Arconite Works Privacy Notice

1. Who is responsible

Arconite Intelligence, referred to in this notice as Arconite, is responsible for decisions about Works data processing. The privacy contact is dpo@arconite.co. For help using Works, contact help@arconite.co.

2. Data we process

Works may process:

• your Google account identifier, verified email, name, and profile picture received at sign-in;
• your internal Works identifier, tier, session records, and security records;
• prompts, responses, titles, drafts, files, and metadata needed for conversation history;
• limited technical data, such as time, IP address, browser agent, failures, and request identifiers;
• Library, Memory, and Spaces data only after separate authorization through Arconite Cloud.
• the selected response, reason, and note you voluntarily submit when reporting content, for safety review by Works; other messages and files are not automatically included.

3. Purposes and legal grounds

We process data to authenticate users, provide and maintain the service, generate responses, synchronize history, prevent abuse, secure accounts, diagnose failures, comply with law, and answer requests.

Depending on context and applicable law, processing may rely on performance of a contract, requested pre-contract steps, legitimate interests with safeguards, legal compliance, the exercise of rights, or consent where required.

4. Providers and sharing

We use Arconite Accounts and its providers for authentication, Supabase for product data, Vercel for hosting and compute, AI model providers to generate responses, and Arconite Cloud for Talks, Library, Memory, and authorized Spaces. Memory receives text messages to evaluate and save useful information and personalize future answers.

We share only the data needed for each purpose under applicable contracts and controls. We do not sell personal data. Content sent to models may be processed under the applicable provider configuration and terms.

5. International transfers

Some providers operate infrastructure in other countries. Where an international transfer occurs, we seek the mechanisms and safeguards required by applicable law and limit data to the service purpose.

6. Retention and deletion

We keep profile, tier, and history while the account is active or as needed to provide the service. Security records and residual data may be kept longer as necessary for fraud prevention, legal obligations, the exercise of rights, and technical recovery.

Request deletion of your Works account and data in Settings → Account or at /account-deletion, on the web and Android. The request blocks access and starts removal of private Works data. Your Arconite Accounts identity and content shared with other people are preserved; local display-name copies are minimized.

The receipt separately shows Works data, processing by the Talks, Library and Memory providers, session revocation and retention review. Operator evidence is not Cloud verification. Pending work is never reported as complete deletion. Preserve this browser cookie or the app’s protected storage to recover the receipt; without that proof, contact the privacy channel for separate verification.

Deletion requests are evaluated and carried out as required by law. Protected backups may be deleted in later cycles and are not used for ordinary operations while awaiting expiration.

Report evidence has restricted access and encrypted storage, with a defined expiry for review. Minimal receipt and handling records may remain for security and accountability. The privacy contact provides the applicable periods and accepts requests about this information.

7. Your rights

You may request confirmation of processing, access, correction, portability where applicable, sharing information, review of automated decisions in legally protected cases, objection, restriction, anonymization or deletion where available, and withdrawal of consent.

Send requests to dpo@arconite.co. We may request proportionate information to verify identity and protect the account before fulfilling a request.

8. Security

We apply technical and organizational controls proportionate to risk, including protected sessions, server-only credentials, account partitioning, and blocking Cloud features without a linked identity. No system is completely secure; report suspected issues through the contact channel.

9. Children and teenagers

Works is not directed to children. If a minor's use requires guardian consent or supervision under applicable law, that requirement must be met before use.

10. Changes

We may update this notice to reflect service or legal changes. Material changes will be communicated appropriately. The displayed version identifies the current text.