Legal

Privacy Policy

Last updated: March 2026 · Effective immediately upon publication.

1. Introduction

Arcflo is an AI-native operating system for architecture, interior design, and construction firms. It is operated by D2V Architectural Consultancy, based in Chennai, Tamil Nadu, India. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use Arcflo.

This policy is governed by the laws of India, including the Information Technology Act, 2000, and is designed to align with the Personal Data Protection Bill (PDPB). By using Arcflo, you consent to the practices described in this policy.

2. Information We Collect

Account Information

When you create an Arcflo account, we collect your full name, work email address, and firm name. If you register via Google OAuth, we receive your name and email from Google with your explicit consent.

Project Data

All project information you enter into Arcflo — including tasks, phases, financial data, site logs, client details, and documents — is stored on our servers and associated with your workspace (tenant).

Usage Data

We use PostHog, a privacy-focused analytics platform, to collect anonymised usage data including page views, feature interactions, and session durations. This data does not contain personally identifiable information and is used solely to improve the product.

Visitor Chat Data

If you use the AI chat widget on our public website, we collect your name and email address (which you provide before chatting) and store the conversation messages to enable follow-up. This data is used only for sales and support purposes.

Contact Form Submissions

When you submit our contact form, we collect your name, email, firm name (optional), and message. This information is used to respond to your enquiry.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Arcflo platform
  • Authenticate your identity and secure your workspace
  • Send product updates, feature announcements, and service notifications
  • Respond to support requests and contact form submissions
  • Analyse usage patterns to improve user experience (via anonymised analytics)
  • Process payments for paid subscriptions via Razorpay

We will never use your project data to train AI models or share it with third parties for commercial purposes.

4. Data Storage & Security

Your data is hosted on Railway (PostgreSQL database) and Vercel (application hosting). Both platforms maintain industry-standard security certifications and infrastructure controls.

Within Arcflo, all data is isolated per firm using Row Level Security (RLS) in PostgreSQL. This means one firm's team members can never access another firm's data, even if they share the same database cluster.

We implement secure token authentication (JWT), encrypted connections (HTTPS/TLS), and follow OWASP security best practices. We never sell your data.

5. Third-Party Services

Arcflo uses the following third-party services, each governed by their own privacy policies:

  • Vercel — application hosting and CDN
  • Railway — database hosting (PostgreSQL)
  • Google OAuth — authentication (only when you choose Google sign-in)
  • Groq — AI language model powering the visitor chat widget (visitor messages only)
  • PostHog — privacy-focused, anonymised product analytics
  • Razorpay — payment processing for paid subscriptions

6. Your Rights

Under applicable Indian data protection law, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Export your project data (within 30 days of account closure)
  • Withdraw consent for marketing communications at any time

To exercise any of these rights, email us at privacy@arcflo.in. We will respond within 30 days.

7. Cookies

Arcflo uses the following cookies:

  • Session cookies — to maintain your authenticated session (required for the app to function)
  • PostHog analytics cookies — anonymised usage tracking (can be declined)
  • Theme preference — local storage key to remember your light/dark mode preference

We do not use advertising cookies, tracking pixels, or sell cookie data to third parties.

8. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes (such as new data sharing practices), we will notify you via email at least 14 days before the change takes effect. Continued use of Arcflo after that date constitutes acceptance of the updated policy.

9. Contact

For privacy-related questions or to exercise your rights, contact:

D2V Architectural Consultancy (Arcflo)

Chennai, Tamil Nadu, India

Email: privacy@arcflo.in