Privacy Policy

This Privacy Policy explains how Arcbig Solutions Private Limited, an unlisted private limited company incorporated in India on 23 May 2024 ("ArcBig", "we", "us", or "our"), operating the ArcBig platform and services (the "Service"), collects, uses, stores, shares, and protects information about you. By using the Service, you agree to the practices described here.

1. Information We Collect

Information you provide

• Account information — name, email, phone/WhatsApp number, password (stored only as a secure hash), business name, and role.
• Business & brand information — your brand kit: logo, colours, fonts, brand voice, products, offers, and content preferences you provide.
• Content & creatives — briefs, requests, images, videos, captions, and other materials you upload or that we produce for you.
• Contact lists you upload — where you choose to upload names and phone numbers of your own customers for WhatsApp messaging, you provide and remain responsible for that data (see Section 7).
• Billing information — plan selections and payment records. Card/UPI details are processed by our payment processor (Razorpay) and are not stored by us.

Information from connected platforms

When you connect a social or business account (Facebook, Instagram, Google Business Profile, and others you enable), we receive access tokens and the data necessary to provide the Service — such as your Pages/profiles, the ability to publish content you approve, and performance insights. Access tokens are encrypted at rest and used only to operate features you have enabled.

Information collected automatically

• Usage and log data (actions in the portal, timestamps, device/browser type, IP address).
• Cookies and similar technologies used to keep you signed in and to operate the Service.

2. How We Use Information

• To provide, operate, and improve the Service — including planning, creating, scheduling, publishing, and analysing your marketing content.
• To publish or schedule content to your connected accounts, only as you or your authorised users approve or configure.
• To generate analytics and reports about your content's performance.
• To process payments, manage subscriptions, and send service-related communications.
• To provide support, ensure security, prevent abuse, and comply with legal obligations.

3. Platform Data — Meta & Google Compliance

ArcBig integrates with third-party platforms. Our access to and use of data from these platforms is limited to providing and improving features you enable, and is governed by their policies in addition to this one.

• Meta (Facebook & Instagram): Our collection and use of information received from the Meta platform adheres to the Meta Platform Terms and Developer Policies. We use Page and Instagram data solely to publish content you approve and to provide insights and reports.
• Google: ArcBig's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Business Profile data only to manage posts, reviews, and performance for locations you authorise.

We do not sell platform data, and we do not use it for advertising to you or for any purpose other than providing the Service you requested.

4. How We Share Information

We do not sell your personal information. We share information only:

• With platforms you connect (e.g., Meta, Google) to publish and manage content at your direction.
• With service providers who help us operate the Service — cloud hosting, database and file storage, payment processing (Razorpay), email delivery, and messaging (WhatsApp Business Platform) — under confidentiality obligations.
• For legal reasons — to comply with law, enforce our terms, or protect rights, safety, and security.
• In a business transfer — as part of a merger, acquisition, or sale of assets, with notice where required.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, we delete or anonymise it. You may request deletion as described below.

6. Data Security

We use technical and organisational measures to protect your information, including encryption of sensitive data (such as platform access tokens) at rest, encrypted connections (HTTPS), access controls, and audit logging. No method of transmission or storage is completely secure, but we work to protect your data and notify you of material incidents as required by law.

7. Your Content and Uploaded Contacts

You retain ownership of the content and contact data you provide. Where you upload contact lists for WhatsApp or other messaging, you confirm that you have obtained all necessary consents/opt-ins from those individuals and that your use complies with applicable law and platform policies. You are responsible for the lawfulness of the contact data you upload, and we act as a processor of that data on your instructions.

8. Your Rights & Choices

Subject to applicable law (including India's Digital Personal Data Protection Act, 2023, and, where applicable, the GDPR), you may:

• Access, correct, or update your information.
• Request deletion of your account and associated data.
• Withdraw consent or disconnect any connected platform at any time from your account settings.
• Object to or restrict certain processing, and request a copy of your data.

9. How to Delete Your Data or Revoke Access

You can disconnect any connected account at any time in your ArcBig account settings, which revokes our stored access token for that account. To delete your ArcBig account and associated personal data, email contact@arcbig.com with the subject "Data Deletion Request", or use the account-deletion option in the portal where available. You can also remove ArcBig's access directly from your Facebook, Instagram, or Google account settings. We will process verified deletion requests within the timeframe required by applicable law.

10. Children

The Service is intended for businesses and users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us information, contact us and we will delete it.

11. International Transfers

We are based in India. Where information is processed or stored outside your country (for example, by cloud providers), we take steps to ensure appropriate safeguards consistent with this policy and applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, where required, provide additional notice.

13. Contact Us

For questions, requests, or grievances regarding this policy or your data, contact:

Arcbig Solutions Private Limited
Grievance / Data Protection Officer: Vinay Saharan, Director
CIN: U73200UP2024PTC203313
GST No: 09ABACA7479D1ZJ
TAN: MRTA23127G
Phone: +91 79066 62340
Email: contact@arcbig.com
Address: #275, Niwari Road, Shiv Puri, Modinagar, Ghaziabad, Uttar Pradesh – 201204, India