This is the Privacy Policy of the Arch website and any affiliated software and mobile applications (collectively, the “Site”), operated by MOBA Inc. (together with our affiliates and subsidiaries, “Arch”, “we”, “us”, “our” and terms of similar meaning) and our related products and services (collectively, the “Service” or “Services”). It describes the information that we collect from you as part of the normal operation of our Site, and how we use and disclose this information. All of the different forms of data, content, and information described below are collectively referred to as “information.”
By accepting the Privacy Policy in the registration process or by visiting and using the Site or the Services, you expressly consent to our collection, use and disclosure of your personal information in accordance with this Privacy Policy. This Privacy Policy is incorporated into and subject to our Terms of Service. Capitalized terms used but not defined herein shall have the meanings ascribed to them in the Terms of Service.
We may collect and store the following information when running our Service:
Information You Provide. We may collect personal information that can be used to contact or identify you, and may include information such as an individual’s name, email address, mailing address, telephone number, and payment or bank account details (“Personal Information”).
When you register an Account, we may collect some Personal Information, such as your name, your phone number, a credit card or other billing information, your email address and postal addresses. The Site allows you to link your Third Party Accounts. We may use OAuth (as defined below), if available, to access Third Party Accounts in order to limit our collection of your passwords. “OAuth” is an open protocol for authorization, commonly used a way for users to log in to sites using their accounts with third-party services, such as Google, but without exposing their third-party-service passwords to such sites. For a Third Party Account that does not support OAuth, we will ask for your login credentials for such Third Party Account, which may include your email address and password.
Google Calendar and Contacts Data
When you connect your Google Account to Arch, we use Google OAuth to access and process the Google Account data necessary to provide calendar synchronization and related features.
For calendar synchronization and event management, we access and process your Google Calendar data, including your calendars, events, attendees, and related event information. This information is used to display your calendars and events in Arch and to enable you to create, update, and synchronize calendar events between Arch and Google Calendar.For attendee search and guest invitation features, we access and process the names and email addresses stored in your Google Contacts. When you search for a guest by name, Arch uses this information to display matching attendee suggestions and to add the selected email address as a guest to a Google Calendar event. We limit the fields requested through the Google People API to names and email addresses and do not access, use, or store telephone numbers or other contact information that is not necessary for these features.
When you invite others to join Arch, you provide us with certain contact information that allows us to send an invitation. We may also receive Personal Information through other users, for example if they have tried to give you access to a Arch account or refer Arch to you. It is your responsibility to ensure that your Personal Information is up-to-date.
Others’ Personal Information. If you directly provide Personal Information about another individual through the Service, you represent that you have the lawful right to provide that information for the intended purpose. This does not limit or exclude Arch’s obligations under applicable data protection laws.
When you use attendee search and guest invitation features, Arch may process the names and email addresses of individuals included in your Google Contacts, including individuals who do not have an Arch Account. Arch processes this information on the basis of its legitimate interests in providing attendee search and guest invitation features requested by you, and limits the processing to what is reasonably necessary for those purposes.
Arch does not use this information for marketing, advertising, profiling, or other unrelated purposes. Arch does not sell this information or disclose it to third parties for their own independent purposes. When you select an individual as a guest, the selected email address is added to the applicable calendar event at your direction. Where service providers process this information on behalf of Arch, they may process it only as necessary to provide the contracted services and subject to appropriate confidentiality and security obligations.The names and email addresses retrieved from Google Contacts are retained while your Arch Account remains active and are deleted when you delete your Arch Account, except where retention is required by applicable law.Individuals who do not have an Arch Account may contact us at hello@archcalendar.com to inquire about the source and purpose of the processing of their Personal Information, or to request access, deletion, or suspension of processing. We will handle such requests in accordance with applicable laws and subject to identity verification.
Sensitive Personal Information. You are prohibited from uploading any Sensitive Personal Information about yourself or others, as set forth in the Terms of Service.
Log Data. When you use the Service, we may automatically record information from your Device, its software, and your activity using the Services. This may include the Device’s Internet Protocol (“IP”) address, browser type, the web page visited before you came to our website, information you select or search for on our website, locale preferences, identification numbers associated with your Devices, your mobile carrier, date and time stamps associated with transactions, system configuration information, metadata concerning your files, and other interactions with the Service.
Cookies and Tracking Technologies. We also use technologies such as cookies, JavaScript, local storage (as defined below), pixel tags and scripts to collect information, provide a better user experience, and improve our Services. A cookie is a small data file that we transfer to your Device. We may use “persistent cookies” to save your registration ID and login password for future logins to the Service. We may use “session ID cookies” to enable certain features of the Service, to better understand how you interact with the Service and to monitor aggregate usage and web traffic routing on the Service. You can instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. If you do not accept cookies, however, you may not be able to use all aspects of the Service. “Local storage” is a way for a website to collect and store information “locally” (e.g., on the user’s device rather than on the website’s server) and then later retrieve it again. Local storage includes “localStorage” and “sessionStorage.” By using local storage, a user’s visits can, for example, be stored on their own computer, counted, and then given to us.
Personal Information. Personal Information is or may be used: (i) to provide and improve our Service, (ii) to administer your use of the Service, (iii) to better understand your needs and interests, (iv) to personalize and improve your experience, and (v) to provide or offer software updates and product announcements. If you no longer wish to receive communications from us, please follow the “unsubscribe” instructions provided in any of those communications.
1. Amplitude
We use Amplitude, a product-analytics platform, to understand usage patterns, feature adoption, and traffic sources. Amplitude collects pseudonymous event data—such as device identifiers, timestamps, and referrer URLs—and transmits it to servers in the United States. The service does not retain information that directly identifies you (e.g., name or email address) and does not merge your IP address with other data in a way that could personally identify you. We rely on the aggregated reports generated by Amplitude to improve our product and user experience.
2. Sentry
We use Sentry for error and performance monitoring. When an error occurs, Sentry captures the stack trace, device information, and limited contextual data (for example, recent UI actions) and sends it to servers in the United States so we can reproduce and fix bugs more quickly. Sentry does not permanently store data that directly identifies individual users. Additionally, we employ a session-replay component integrated with Sentry; it records clicks, scrolls, and navigation events in a pseudonymous way while automatically masking passwords, payment details, and other sensitive fields so that such information never leaves your device.
3. Mailchimp
We use Mailchimp, operated by The Rocket Science Group LLC, to send welcome messages, product updates, and other marketing emails. When you consent to receive such communications, we transmit your name, email address, and communication preferences to Mailchimp’s servers in the United States. Mailchimp acts solely as our data processor and may not use your information for any purpose other than delivering and analyzing these emails on our behalf. Each marketing email contains an “unsubscribe” link that lets you opt out at any time. Transactional or administrative notices necessary to operate the Service will still be sent even if you unsubscribe from marketing emails.
Note that we will never email you to ask for your account information; if you receive such an email, please forward it to hello@archcalendar.com
If Arch intends to use any Personal Information in any manner that is not consistent with this Privacy Policy, you will be informed of such anticipated use prior to or at the time the Personal Information is collected.
Your Use. User Content that you provide to us may be shared with other Users that are connected to your Account. You can also use the Services to share your User Content with other third parties. For example, your calendar information may be integrated into your Account, and, if you are invited to attend a meeting, or if you invite others to attend a meeting, your meeting notes may automatically be posted to your calendar and so shared with the other meeting attendees (whether or not they are Account holders). Under no circumstances will we sell your Personal Information to third parties.
Service Providers, Business Partners and Others. We may use certain trusted third party companies and individuals to help us provide, analyze, and improve the Service (including but not limited to data storage, maintenance services, database management, web analytics, payment processing, and improvement of the Service’s features). These third parties may have access to your information only for purposes of performing these tasks on our behalf and under obligations similar to those in this Privacy Policy.
Third Party Applications. We may share your information with a third party application with your consent, for example when you choose to access our Services through such an application. We are not responsible for what those parties do with your information, so you should make sure you trust the application and that it has a privacy policy acceptable to you.
Compliance with Laws and Law Enforcement Requests; Protection of Arch’s Rights. We may disclose to parties outside Arch information that you provide and that we collect when we have a good faith belief that disclosure is reasonably necessary to (a) comply with a law, regulation or compulsory legal request; (b) protect the safety of any person from death or serious bodily injury; (c) prevent fraud or abuse of Arch or its users; or (d) to protect Arch’s property rights.
Services's use of information received, and Services's transfer of information to any other app, from Google APIs will adhere to Google's Limited Use Requirements.
Business Transfers. If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction, but we will notify you (for example, via email and/or a prominent notice on our website) of any change in control or use of your information, or if your information becomes subject to a different Privacy Policy. We will also notify you of choices you may have regarding the information.
Non-Private or Non-Personal Information. We may disclose your non-private, aggregated, or otherwise non-personal information, such as usage statistics of our Service.
You can access and modify the Personal Information associated with your Account by contacting us at hello@archcalendar.com. Please note that if you signed up using Third Party Account, you may have to access and modify the Personal Information associated with your Third Party Account in order to modify certain of the Personal Information associated with your Account. If you want us to delete your Personal Information and your Account, please contact us at hello@archcalendar.com with your request. When you delete your Account, we delete the Personal Information associated with your Account without delay, except where retention is required by applicable law.
We will retain your information for as long as your Account is active or as needed to provide you the Services. If you are a User and wish to cancel your account or request that we no longer use your information to provide you Services, you may delete your account. We may retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Consistent with these requirements, we will try to delete your information quickly upon request. Please note, however, that there might be latency in deleting information from our servers and backed-up versions might exist after deletion. Only the User may request that an Account be deleted.
The security of your information is important to us. We follow generally accepted standards to protect the information submitted to us, both during transmission and once we receive it. No method of electronic transmission or storage is 100% secure, however. Therefore, we cannot guarantee its absolute security. If you have any questions about security on our website, you can contact us at hello@archcalendar.com.
Depending upon your location and in accordance with applicable laws, you may have the right to:
Access personal information about you are consistent with legal requirements. In addition, you may have the right in some cases to receive or have your electronic personal information transferred to another party.
Request correction of your personal information where it is inaccurate or incomplete.
Request deletion of your personal information, subject to certain exceptions prescribed by law.
Request Deletion, Restriction or object to the processing of your personal information, including the right to opt-in or opt-out of the sale of your personal information to third parties.
Not be discriminated against by us for exercising your privacy rights.
If you would like to exercise any of these rights, please contact us as set forth below. We will process such requests in accordance with applicable laws. To protect your privacy, we will take steps to verify your identity before fulfilling your request, such as by requiring you to submit your request via your account.
Our Services are not directed to persons under 13. We do not knowingly collect personally identifiable information from children under 13. If a parent or guardian becomes aware that his or her child has provided us with Personal Information without their consent, he or she should contact us at hello@archcalendar.com. If we become aware that a child under 13 has provided us with Personal Information, we will take steps to delete such information from our files.
If you have any questions about this Privacy Policy, please contact us at hello@archcalendar.com.
This Privacy Policy may change from time to time, and the most current version will be posted on our Site, so please check our Site regularly. We may provide notice of changes in other circumstances as well. By continuing to use the Service after those changes become effective, you agree to be bound by the revised Privacy Policy.