Privacy Policy
EFFECTIVE OCTOBER 24, 2026
1. Operator and scope
Arcweaver Systems, Inc. operates arcweaversystems.net and the Release Desk individual pilot. Business address reported in the September 29, 2026 filing: 222 Johnson Avenue, 1B, Brooklyn, NY 11206, United States. Contact raja@arcweaversystems.net. This policy covers website visits, individual accounts, demo use, and inquiries.
2. Account and workspace information
We process your name, email, password hash, and entered release records: titles, scopes, categories, owner labels, target dates, statuses, rollout and rollback plans, checks, evidence notes, optional URLs, passed marks, and activity. Do not enter credentials, production secrets, sensitive regulated data, unnecessary personal information, or unauthorized content.
3. Inquiries and technical data
Contact submissions include your name, email, optional company, topic, and message. Hosting and email providers may process IP addresses, timestamps, browser details, and operational logs. Rate limits store a hash derived from the source IP and limit scope. Password-reset tokens are hashed and expire after 30 minutes.
4. Purposes and legal bases
We use data to provide account access, save and organize records, apply manual workflow checks, generate requested exports, respond to inquiries, and protect the service. Where applicable, legal bases include performing the agreement, legitimate interests in operation and security, and consent where required. Workspace content is not sent to AI services in this release.
5. Cookies and browser storage
Accounts use an essential session cookie and CSRF security token. The fictional demo saves examples and your edits in local browser storage without sending them as account records. Privacy choices can clear demo data. No advertising trackers or third-party analytics are included.
6. Providers and disclosure
Hosting and email providers process data needed to operate the service and deliver messages. Information may be disclosed where legally required or reasonably needed to protect rights and security. We do not sell personal information or share it for cross-context behavioral advertising. This release has no CI/CD, repository, AI, or automated testing integration.
7. External links
Evidence URLs are stored as entered references. The application does not fetch their content or run a check against them. Opening a link requests the external website, whose privacy practices apply. Use only references you have authority to store and share.
8. Retention
Workspace records remain while an account is active unless removed earlier or legally required. Deleting a release removes linked checks. Activity can retain short titles after individual deletion. Account deletion removes active account data, releases, checks, activity, and reset tokens. Contact records older than 90 days and rate-limit entries older than 24 hours are cleared during API requests. Mailbox copies, backups, and operational logs follow configured provider retention schedules.
9. Rights and controls
You can export, correct, and remove records, or delete your account. Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection and withdraw consent where applicable. Contact raja@arcweaversystems.net; identity verification may be required. You may contact an appropriate supervisory authority where applicable. We do not discriminate for exercising applicable rights.
10. Security and international processing
Controls include password hashing, account-scoped queries, session protections, CSRF tokens, and submission limits. No system guarantees absolute security. Providers may process data in the United States and elsewhere. Applicable safeguards must be used where international-transfer rules require them.
11. Adults and changes
The service is intended for adults 18 and older. We may update this policy and communicate material changes as required. Send privacy questions to raja@arcweaversystems.net.