Privacy policy
Last updated: 20 September 2026
The French version prevails. / La version française fait foi.
This policy explains, in line with article 13 of Regulation (EU) 2016/679 (GDPR), how ARCA collects and processes your personal data.
Data controller
CONSTANT, 380 Avenue Jean Perrin, 13290 Aix-en-Provence, France, contact: arcasystem.ai@gmail.com.
Data we collect
- Email address (free guide form, purchase, membership).
- Order data: product bought, amount, session identifier, date.
- Payment data: handled exclusively by Stripe. We never receive, see or store your card number.
- Withdrawal form data: name, email, order number, message.
- Minimal technical data: IP address (only to rate-limit the free guide form) and, after consent, anonymous audience measurement.
Purposes and legal bases
- Performance of the contract (art. 6.1.b): file delivery, membership management, customer support.
- Legal obligation (art. 6.1.c): keeping accounting records and handling withdrawal requests.
- Legitimate interest (art. 6.1.f): site security and spam prevention.
- Consent (art. 6.1.a): informational emails and audience measurement via the cookie banner. Withdrawable at any time.
Retention periods
- Order data and invoices: 10 years (accounting obligation).
- Prospect email (free guide): 3 years after last contact.
- Withdrawal requests: 3 years.
- Anti-spam logs (IP address): 12 months maximum.
- Cookie consent: 6 months.
Recipients and processors
- Stripe Payments Europe — payments and subscriptions.
- Supabase — database and secure file storage.
- Resend — delivery and service emails.
- Lovable Labs Incorporated — website hosting.
Some processors may process data outside the European Union; such transfers rely on the European Commission's standard contractual clauses.
Your rights
You have the right to access, rectify, erase, restrict, object and port your data, and to withdraw consent at any time. Write to arcasystem.ai@gmail.com and we reply within one month. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
Cookies
No analytics or tracking cookie is set before your explicit consent. You can accept, reject or customise your choice in the banner shown on arrival, and change it any time from the footer.
Security
Files are stored in a private space and delivered through temporary signed links (24 h). Traffic is encrypted over HTTPS and secret keys are never exposed to the browser.