Privacy Policy

This Privacy Policy describes how True Mark Consulting, LLC DBA ArcasyaAI (“Arcasya,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you visit or use our website and platform at www.arcasya.ai (collectively, the “Services”). By accessing or using our Services, you agree to this Privacy Policy.

1. Who We Are

Arcasya is an AI agent orchestration platform serving American small and mid-market businesses. Our Services include AI workflow automation, agent management, consulting, and related tools. We are the data controller for personal data collected through our website and platform.

2. Information We Collect

We collect information in the following categories:

2a. Information You Provide Directly

• Contact information: name, email address, phone number, company name, and mailing address.
• Account credentials: username and password for platform access.
• Payment information: billing details processed securely by our third-party payment processor (we do not store raw card numbers).
• Communications: messages, support requests, form submissions, and survey responses.

2b. Information Collected Automatically

• Usage data: pages visited, features used, session duration, click paths, and interaction logs.
• Device and technical data: IP address, browser type, operating system, and device identifiers.
• Cookies and tracking technologies: session cookies, analytics pixels, and similar tools (see Section 7).

2c. Information from Third Parties

• Calendar and scheduling data from integrations such as Calendly.
• Business enrichment data from lead intelligence tools used in our internal sales pipeline (not shared publicly).

3. How We Use Your Information

We use your information to:

• Create and manage your account and provide access to our platform.
• Deliver AI agent orchestration services, automation workflows, and consulting engagements.
• Process payments and send invoices, receipts, and billing notifications.
• Respond to support requests and communicate about your account.
• Send marketing communications and product updates (you may opt out at any time).
• Analyze usage to improve platform performance, features, and user experience.
• Comply with legal obligations and protect the rights and safety of our users and business.
• Conduct internal research and analytics to refine our AI tools and service offerings.

4. AI Services — Important Disclosures

Because Arcasya is an AI platform, the following disclosures are critical:

4a. AI-Generated Outputs

Our platform uses artificial intelligence and large language models (LLMs) to generate responses, automate tasks, and execute workflows. AI-generated outputs may be inaccurate, incomplete, or contextually inappropriate. You are responsible for reviewing all AI-generated content before acting on it. Arcasya outputs do not constitute legal, financial, medical, or professional advice of any kind.

4b. Third-Party AI Model Providers

Our platform integrates with AI models and APIs provided by third parties, which may include Anthropic (Claude) for language models, xAI for voice models, and Google for Workspace integration APIs. When you use our Services, your inputs and prompts may be transmitted to these providers in order to generate responses. Each provider maintains its own privacy policy and data usage terms. We encourage you to review:

• Anthropic Privacy Policy: privacy.anthropic.com
• xAI Privacy Policy: x.ai/privacy
• Google Privacy Policy: policies.google.com/privacy

4c. Data Used to Train AI Models

Arcasya does not use your personal data, client data, or platform inputs to train our own AI models. However, third-party AI providers may process your inputs under their own terms. Anthropic’s API usage policy, for example, specifies how API-submitted data is handled. We recommend reviewing those policies if data training is a concern for your business. If you require contractual assurances on this point, contact us about a Data Processing Agreement (DPA).

4d. Automated Agent Actions

Certain features of Arcasya allow AI agents to take automated actions on your behalf, such as sending emails, updating records, or triggering workflows. By enabling these features, you authorize Arcasya to execute these actions under your direction. You are responsible for supervising agent behavior and for the downstream outcomes of actions you authorize. Arcasya is not liable for business impacts resulting from automated decisions made through our platform.

5. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: Vendors who support our operations (hosting, payment processing, email delivery, analytics). These parties are bound by confidentiality obligations.
• AI Model Providers: As described in Section 4b, your inputs are processed by third-party LLM providers to deliver AI functionality.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.
• Legal Compliance: When required by law, court order, or governmental authority, or to protect our rights and the safety of others.
• With Your Consent: For any other purpose you explicitly authorize.

6. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described in this policy, maintain your account, comply with legal obligations, or resolve disputes. When data is no longer needed, it is securely deleted or anonymized. You may request deletion of your data at any time (see Section 10).

7. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to:

• Keep you logged in and maintain session state.
• Analyze platform usage and improve performance.
• Deliver relevant communications and measure marketing effectiveness.

Types of cookies we use:

• Essential Cookies: Required for core platform functionality. Cannot be disabled.
• Analytics Cookies: Help us understand how users interact with our platform (e.g., page views, session length).
• Preference Cookies: Remember your settings and configuration.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies may affect certain features. We do not currently respond to browser-level Do Not Track (DNT) signals.

8. Security

We implement commercially reasonable technical and organizational security measures to protect your data, including encrypted data transmission (TLS), access controls, and secure infrastructure hosting. However, no internet transmission or storage system is 100% secure. We continuously review and improve our security practices. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

9. Children’s Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, contact us at info@arcasya.ai and we will promptly delete it.

10. Your Privacy Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Correct or update inaccurate data.
• Request deletion of your personal data.
• Object to or restrict certain processing activities.
• Receive a portable copy of your data.
• Withdraw consent where processing is based on consent.

California Residents (CCPA/CPRA): You have additional rights including the right to know what categories of personal information we collect and share, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your rights.

To exercise any of these rights, contact us at info@arcasya.ai. We will respond within 30 days.

11. International Data Transfers

Arcasya is based in the United States. If you access our Services from outside the U.S., your information may be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction. By using our Services, you consent to this transfer. We take reasonable steps to ensure your data is protected consistent with this policy.

12. Data Processing Agreements

If your use of Arcasya involves processing personal data of your own customers or employees (for example, feeding client records into an AI agent workflow), you may need a Data Processing Agreement (DPA) with Arcasya. Please contact us to request a DPA. We are prepared to execute appropriate agreements for clients with GDPR, CCPA, or HIPAA-adjacent obligations.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notice on our platform. The “Last Updated” date at the top of this page reflects the most recent revision. Continued use of our Services after changes are posted constitutes your acceptance of the updated policy.

14. Contact Us

For questions, requests, or concerns about this Privacy Policy, contact us at:

True Mark Consulting, LLC DBA ArcasyaAI
23200 Deming Road, Cicero, Indiana 46034, United States
Email: info@arcasya.ai

For data privacy requests specifically, please use the subject line: “Privacy Request — [Your Name]” to ensure prompt handling.