Legal
Privacy Policy
Last updated: February 24, 2026
Our Foundational Principle
ArcticAI is architected around a core guarantee: your document content is never visible to, retained by, or processed on our servers. This privacy policy details the data we do gather, the purposes it serves, and how we safeguard it.
Information We Gather
Account Details
When you register, we collect your email address and a cryptographically hashed version of your password. We never store passwords in plaintext.
Vault Metadata
We retain metadata about your vaults — names, creation timestamps, operational status, selected model tier, and session duration. We have no access to and do not store the content of your documents.
Payment Information
ArcticAI accepts Visa and Mastercard. Card details are handled through PCI DSS-compliant payment infrastructure. We do not retain your full card number on our systems.
Usage Metrics
We log GPU compute duration for billing purposes, including vault activation and deactivation times and the model tier in use.
Information We Never Gather
- Document content — files are processed exclusively on your dedicated GPU instance
- Chat conversations — all AI interactions execute locally within your cold chamber
- AI-generated outputs — reports, summaries, and extracted data stay on your instance
- Behavioral analytics — we deploy no analytics cookies, browser fingerprinting, or third-party tracking scripts
Data Storage Practices
Account and vault metadata resides in encrypted databases protected with AES-256 at rest. All data in transit is secured with TLS 1.3. Database access is restricted to essential platform services only.
Data Retention Schedule
Account metadata persists while your account remains active. Vault metadata (names, timestamps, usage records) is kept for billing purposes for 12 months following vault destruction. When you close your account, all associated personal data is permanently erased.
Document Data Lifecycle
Your documents exist solely on your dedicated GPU instance. When a vault is destroyed, the instance is terminated and all storage is wiped — including every uploaded document, chat exchange, model memory state, and generated artifact. This destruction is irreversible by design.
Third-Party Disclosure
We do not sell, lease, or share your personal data with third parties for marketing. We may disclose limited data to service providers who support platform operations (such as payment processors and infrastructure hosts), solely to the extent required and under binding confidentiality agreements.
Your Rights
You are entitled to:
- Access the personal data we hold about you
- Request correction of any inaccurate information
- Request deletion of your account and all associated data
- Export your account data in a portable format
To exercise any of these rights, contact us at hello@arcticai.dev.
Policy Updates
We may revise this Privacy Policy periodically. Any material modifications will be communicated via email to registered users. The current version is always available on this page.
Contact
new company 1
new address 1
Reg Nr: 11111111
hello@arcticai.dev