ArcRabbit Privacy Policy

1. Business Identity and Introduction

ArcRabbit ("ArcRabbit", "the Service", "we", "our", or "us") is an AI-powered personal knowledge workspace operated and provided by M/S SAISUN TECHNOLOGY SERVICES, a sole proprietorship established on September 19, 2016, with its head office at:

This Privacy Policy describes our practices regarding the collection, use, processing, storage, and protection of personal data and submitted content when you use our website (arcrabbit.com), mobile applications, and associated services.

By creating an account, accessing, or using ArcRabbit, you acknowledge and agree to the data collection and processing practices set forth in this Privacy Policy.

2. Information We Collect

3. How We Use and Process Information

M/S SAISUN TECHNOLOGY SERVICES uses collected data exclusively for providing and securing ArcRabbit:

• Service Delivery: To parse submitted links, transcribe speech, extract source facts, and structure knowledge items.
• AI Companion & Retrieval: To generate contextual embeddings and answer conversational queries through our Context Engine using your saved library.
• Authentication & Security: To verify your identity, prevent spam/abuse, enforce rate limits, and protect against fraudulent activity.
• Customer Support: To assist you with account inquiries, data deletion requests, or technical issues.

We do NOT sell, rent, or trade your personal information or saved content to data brokers, advertisers, or third-party marketing networks.

4. Artificial Intelligence Processing and Third-Party Sub-Processors

To fulfill core features (such as video transcription, key-point extraction, and conversational search), ArcRabbit engages vetted infrastructure and AI sub-processors:

• Google Gemini API: Processes transcripts, article texts, and chat prompts to generate source-faithful extractions, analytical summaries, and semantic embeddings. Google processes this data under enterprise API confidentiality commitments.
• Supabase: Provides managed database hosting, Postgres vector search storage, authentication, and encrypted data storage.
• Cloudflare: Provides DNS, CDN caching, DDoS mitigation, and Turnstile anti-bot verification.
• RapidAPI / Content Extraction Proxies: Used strictly to fetch public media transcripts and metadata for user-submitted URLs.

Sub-processors are authorized to process data strictly to provide the technical services requested by ArcRabbit and under strict confidentiality standards.

5. Data Retention and Account Deletion

We retain your saved knowledge, chat histories, and profile information only for as long as your account is maintained.

Full Account and Data Deletion Mechanism: You maintain complete control over your data. You may permanently delete your account and all associated data at any time via:

• In-App Self-Service: In the mobile or web app workspace drawer, navigate to your account profile and select "Delete Account". This immediately calls our deletion endpoint (/api/auth/delete) which cascades and permanently erases your authentication record, profile, saved content, ideas, chat sessions, embeddings, and collections.
• Web Form: Visit arcrabbit.com/delete-account to initiate a deletion request.
• Email Request: Send an email from your registered account to dhanushk@arcrabbit.com. Requests are processed within 48 hours.

6. Cookies and Local Storage

ArcRabbit utilizes local storage and cookies for:

• Strictly Necessary: Storing authentication sessions, security CSRF tokens, and Turnstile tokens.
• Functional: Storing workspace UI preferences (e.g. dark mode, calendar display mode, cookie consent status).
• Optional Analytics: Anonymized usage metrics, enabled only with your explicit consent via our cookie banner.

For further details, please review our Cookie Policy.

7. Data Security Safeguards

We enforce technical and administrative security controls, including:

• Transport Layer Security (TLS/HTTPS) for all data in transit.
• Encrypted databases and secure credential hashing.
• Row Level Security (RLS) policies within Supabase ensuring strict user data isolation.
• Least-privilege administrative access controls.

While we implement robust industry-standard safeguards, no internet transmission or electronic storage system is 100% immune from risk.

8. Children's Privacy

ArcRabbit is not directed to individuals under 13 years of age (or under 16 in certain jurisdictions). We do not knowingly collect personal data from minors. If you become aware that a child has provided us with personal information without parental consent, please contact us immediately.

9. User Rights

Under applicable privacy laws, you have the right to:

• Access and review personal information associated with your account.
• Request corrections of inaccurate personal data.
• Request permanent deletion of your account and associated knowledge items.
• Withdraw consent for optional analytics or marketing communications at any time.

To exercise your rights, email us at dhanushk@arcrabbit.com.

10. Grievance Officer and Contact Information

Pursuant to the Information Technology Act, 2000 and rules made thereunder, any queries, concerns, or grievances regarding the processing of your personal information may be addressed to our designated Grievance Officer: