This policy explains what data arcdoq collects, how we use it, where it lives, and the choices you have. We keep it in plain language, and we hold to one principle: your content and your customers' data are yours, and we handle them only to run the service.
arcdoq is a platform for hosting websites and generating them with AI, operated by NIMBARC, LLC ("arcdoq", "we", "us"). This policy applies to our marketing site, the arcdoq application, and the services we provide to signed-in users.
We act in two roles. For your arcdoq account and workspace, the data about you (your email, your sites, your team) makes us the data controller. For the data your published sites collect from their own visitors, such as form submissions, you are the controller and arcdoq is a processor acting on your instructions. This policy describes how we handle that visitor data on your behalf; your own privacy notice governs your relationship with your visitors.
When you create an account we collect your email address and display name, and an optional profile avatar if you add one. We use a magic link to sign you in, so we do not store a password.
Your workspace name and slug, the region you choose for your data, the members of your workspace, and the email addresses of people you invite.
When you sign in, we record the session with your IP address, browser user agent, and timestamps, and we show these in your account so you can review active sessions and sign out of any of them.
The sites you create or upload, their published versions, any assets you upload, and your AI build conversations, which include the prompts you write and the output the AI produces.
If you request access or contact us, we keep your email, name, and the content of your message.
We do not run third-party analytics, advertising, or cross-site tracking. We do not sell your personal data, and we do not use your content or personal data to train AI models.
Sites you publish are hosted as you provide them. When a site includes a form, arcdoq stores the submissions your visitors send, which can include names, email addresses, and messages, as well as any other fields you choose to collect. We store this on your behalf as a processor.
We do not store a visitor's raw IP address with a submission. We keep a one-way hashed value instead, used only for spam protection and rate limiting. For public forms we also use a bot check (see Subprocessors).
If you configure a webhook, each submission is also sent to the destination URL you specify. That destination is outside arcdoq and under your control. You are responsible for having a lawful basis and your own privacy notice for what your forms collect, and you control retention, deletion, and export of your submissions (see Your rights and choices).
When you create a workspace you choose a home region, the European Union or the United States. This choice is permanent for the workspace.
Your content at rest stays in the region you choose. That covers your sites, uploaded assets, AI build history, form definitions, and form submissions.
Some data is global and is stored on our primary infrastructure in the EU regardless of your region. That covers your account and sign-in records, workspace and membership records, billing records, profile avatars, audit logs, and the routing information that directs traffic to your sites. AI generation is also processed on our EU-based infrastructure and by our AI provider, so the prompt and any reference images you submit for a build are processed outside your home region even when the resulting site is stored in it.
Content at rest lives in your region. Your sites, assets, build history, form definitions, and form submissions are stored in the EU or US region you select. Account, billing, and audit records, profile avatars, and AI build processing run on our EU-based primary infrastructure.
We rely on a small set of subprocessors to operate arcdoq. Each processes only the data it needs for its function.
| Subprocessor | What it does | Data it processes | Location |
|---|---|---|---|
| Microsoft Azure | Cloud hosting: databases, storage, CDN, compute | All hosted data and content | EU and US |
| Anthropic | AI site generation (Claude) | Build prompts and reference images you submit | US |
| Resend | Transactional email delivery | Recipient email and sign-in or invite links | US |
| Cloudflare | Bot protection (Turnstile) on public forms | Visitor IP address and a challenge token | Global edge |
We update this list as our providers change, and we give notice of material changes as described in Changes to this policy.
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. arcdoq gives you controls to exercise many of these directly:
For anything you cannot do in the product, including deleting your account entirely, email support@arcdoq.com and we will respond. If we process form submissions on your behalf, your visitors should direct their requests to you as the controller, and we will help you fulfill them.
No system is perfectly secure, but we work to protect your data and to respond quickly if something goes wrong.
Because some data is global and our subprocessors operate in more than one country, your data may be transferred to and processed in countries other than where you live. If you choose the US region, your content at rest is stored in the US; if you choose the EU region, some subprocessors (our AI provider and email provider) still process certain data in the US, and AI build processing runs in the EU.
Where the law requires it, these transfers rely on appropriate safeguards, such as the relevant standard contractual clauses, to protect your data.
arcdoq is a tool for building and hosting websites, not a service directed to children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, contact us and we will delete it.
We may update this policy as the service evolves. When we do, we change the date at the top of the page. For material changes, we give notice in the product or by email before they take effect.
For any privacy question or request, email support@arcdoq.com.
arcdoq is operated by NIMBARC, LLC, a Florida limited liability company, at 2355 Centerville Rd #15652, Tallahassee, FL 32308. If you are in the EU or UK and have an unresolved concern, you also have the right to lodge a complaint with your local data protection authority.