Legal
Privacy Policy
Last updated: June 26, 2026
Our Foundational Principle
ArcticAI is architected around a core guarantee: your document content is never visible to, retained by, or processed on our servers. This privacy policy details the data we do gather, the purposes it serves, and how we safeguard it.
Information We Gather
Account Details
When you register, we collect your email address and a cryptographically hashed version of your password. We never store passwords in plaintext.
Chamber Metadata
We retain metadata about your chambers — names, creation timestamps, operational status, selected model tier, and session duration. We have no access to and do not store the content of your documents.
Payment Information
ArcticAI accepts Visa and Mastercard. Card details are handled through PCI DSS-compliant payment infrastructure. We do not retain your full card number on our systems.
Usage Metrics
We log GPU compute duration for billing purposes, including chamber activation and deactivation times and the model tier in use.
Information We Never Gather
- Document content — files are processed exclusively on your dedicated GPU instance
- Chat conversations — all AI interactions execute locally within your cold chamber
- AI-generated outputs — reports, summaries, and extracted data stay on your instance
- Behavioral analytics — we deploy no analytics cookies, browser fingerprinting, or third-party tracking scripts
Data Storage Practices
Account and chamber metadata resides in encrypted databases protected with AES-256 at rest. All data in transit is secured with TLS 1.3. Database access is restricted to essential platform services only.
Data Retention Schedule
Account metadata persists while your account remains active. Chamber metadata (names, timestamps, usage records) is kept for billing purposes for 12 months following chamber destruction. When you close your account, all associated personal data is permanently erased.
Document Data Lifecycle
Your documents exist solely on your dedicated GPU instance. When a chamber is destroyed, the instance is terminated and all storage is wiped — including every uploaded document, chat exchange, model memory state, and generated artifact. This destruction is irreversible by design.
Third-Party Disclosure
We do not sell, lease, or share your personal data with third parties for marketing. We may disclose limited data to service providers who support platform operations (such as payment processors and infrastructure hosts), solely to the extent required and under binding confidentiality agreements.
Your Rights
If you are located in the UK or the European Economic Area, you have rights under the UK GDPR and EU GDPR. Regardless of where you are located, you are entitled to:
- Access the personal data we hold about you
- Request correction of any inaccurate information
- Request deletion of your account and all associated data
- Export your account data in a portable format
- Object to or restrict certain processing, and lodge a complaint with your local data protection authority
To exercise any of these rights, contact us at support@arcticai.space.
Policy Updates
We may revise this Privacy Policy periodically. Any material modifications will be communicated via email to registered users. The current version is always available on this page.
Contact
Nexia Digital Sp. z o.o.
Nowogrodzka 42, 00-695 Warszawa, Poland
NIP: 7011301281
support@arcticai.space