Privacy Policy.

What we gather and why.

We collect information you provide directly to us, information we collect automatically, and information from third parties.

• Information you provide. When you contact us, request a proposal, or engage our services, you may share your name, email address, company affiliation, project details, and any other information you choose to include.
• Automatically collected information. When you visit our website, we may collect log data, device information, IP addresses, browser type, referring URLs, pages viewed, and timestamps.
• Cookies and analytics. We use cookies and similar tracking technologies to improve user experience and understand usage patterns. You may disable cookies through your browser settings.

Purpose-driven processing.

We use the information we collect to:

• Respond to your inquiries and provide the services you request.
• Improve, maintain, and operate our website and offerings.
• Send you administrative communications, including updates about your engagement.
• Comply with legal obligations and enforce our terms.
• Detect, prevent, or address fraud, security incidents, and technical issues.
• With your consent, send occasional updates about our work.

Why we have the right to process.

For users in the European Economic Area, the United Kingdom, and similar jurisdictions, we process personal data on the following legal bases:

• Performance of a contract — when processing is necessary to deliver services you requested.
• Legitimate interests — for our day-to-day business operations, security, and improvements, balanced against your rights.
• Consent — where you have given explicit permission, such as for marketing communications.
• Legal obligation — where processing is required by applicable law.

Who sees your data.

We do not sell your personal information. We may share information with:

• Service providers who assist us with hosting, analytics, communication, and similar functions, under contractual confidentiality obligations.
• Professional advisors such as lawyers, accountants, and auditors when required.
• Legal authorities if required by law, court order, or to protect rights, property, or safety.
• Successors in the event of a merger, acquisition, or sale of assets, with notice provided.

How long we keep things.

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy, satisfy legal and accounting requirements, or resolve disputes. Project records are typically retained for the duration of our engagement plus a reasonable period for archival, legal, and reference purposes.

When information is no longer needed, we securely delete or anonymize it.

How we protect it.

We implement reasonable administrative, technical, and physical safeguards to protect your information against unauthorized access, alteration, disclosure, or destruction. These include encrypted transmission, access controls, and secure infrastructure providers.

The control you have.

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — request that inaccurate information be corrected.
• Deletion — request that we delete your information, subject to legal retention requirements.
• Restriction — request that we limit how we process your information.
• Portability — request a copy of your information in a structured, machine-readable format.
• Objection — object to certain types of processing, including direct marketing.
• Withdraw consent — withdraw any previously given consent, without affecting prior lawful processing.

To exercise these rights, contact us at info@arcturne.com. We will respond within the timeframes required by applicable law.

CCPA / CPRA notice.

If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act provide additional rights:

• The right to know what personal information is collected, used, shared, or sold.
• The right to delete personal information held by us.
• The right to opt out of the sale or sharing of personal information.
• The right to non-discrimination for exercising privacy rights.
• The right to correct inaccurate personal information.
• The right to limit the use of sensitive personal information.

Data crossing borders.

Arcturne is based in the United States. If you access our services from outside the U.S., please understand that your information may be transferred to, processed, and stored in the United States, where data protection laws may differ from those in your jurisdiction. We take steps to ensure that any such transfers comply with applicable law and that your data continues to be protected.

Not for those under 13.

Our services are not directed to individuals under the age of 13, and we do not knowingly collect personal information from children. If we learn that we have collected information from a child under 13, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us.

When you leave our site.

Our website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any external sites you visit.

How updates work.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will revise the "Last Updated" date at the top of this policy and, when appropriate, provide additional notice through our website or by direct communication.

Reach out.

For questions, requests, or concerns about this Privacy Policy or our data practices, please contact: