Privacy Policy

The short version

What you record in Arca — your catalog, your sales, your customers — is stored in your account so you can see it from your phone and from your computer. We do not sell it, we do not share it, and we do not use it for advertising.

The photos you take of your products are stored in your account and are only visible from it, unless you publish your online catalog: there you are the one showing them, on purpose.

There are no ads inside Arca and we do not sell data to anyone. To learn which of our ads on Facebook and Instagram bring people in, the app tells Meta when you install it, open it and finish signing up, and RevenueCat tells Meta when you start a trial or pay in the app. Your iPhone's advertising identifier is only sent if you allow it; on Android you can delete it in your phone's settings. What you record in Arca never reaches Meta.

On our public website and on the website's sign-up screens — not inside the app and not in your online store — we use Google Analytics, Microsoft Clarity and Vercel Web Analytics to understand how it is used and improve it, and the Meta Pixel to measure our ads on Facebook and Instagram. None of them sets cookies unless you accept them, with one exception: once you have created your account, on the screens to activate your plan Google Analytics and Microsoft Clarity measure the steps of your sign-up (seeing the plan, starting the payment, coming back without paying) to learn where people get stuck and improve it, unless you chose "Necessary only". The Meta Pixel still needs you to accept it. Vercel Web Analytics never uses cookies.

In the phone app we use Amplitude to learn at which step of sign-up people drop off: it measures which screens you see and which options you choose when you start, linked to your account's internal identifier. It does not receive your name, your email, your IP address or anything about your business, and it is not used for advertising.

Your card details never reach our servers: they are captured and stored by whoever takes the payment — Stripe on the web, the App Store or Google Play in the app.

Who is responsible

the developer of Arca ("Arca", "we") is responsible for processing the personal data described here.

For anything related to this policy — including your ARCO rights — you can write to support.arcaarq@gmail.com, or use the support chat inside the app.

This version replaces the one dated October 22, 2026.

What data we collect

From you, as an Arca user: your name, your email address and the name of your business. Your password is stored encrypted and nobody — us included — can read it. If you sign in with Apple or Google, we receive your email from them and, when you share it, your name; never your password.

From your business, if you enter them: its address, its phone number and its tax ID. None of them are required, and they serve a single purpose: being printed on your tickets, your receipts and your catalog. The address, in addition, only appears in your online store if you turn that switch on, because for many businesses that address is a home.

From your operation: the products, stock, inventory movements, sales, expenses and customers you record, and the photos you upload of your products. This information is yours; we only store it so the app works.

From your customers, if you choose to record them: name, email, phone, tax ID and the notes you write about each one. The note is a free-text field: whatever you write there is stored as is, so do not put anything there you would not put in writing. You are responsible for having informed them and for having their consent.

From your payment on the web: the last four digits of your card, its brand and its expiration date. The full number never reaches our servers — it is captured directly by Stripe.

From your purchase in the app: the anonymous identifier of your subscription and its status — active, canceled, in trial — which RevenueCat sends us. Neither your card number nor the email of your Apple or Google account reaches us.

From your device, the minimum needed for the app to work: your session, stored encrypted; a copy of your business so the app opens quickly; and what the widget on your home screen needs. The session and the copy are deleted from the phone when you sign out. Also, to measure our ads, an anonymous identifier generated by the Meta SDK and the phone's advertising identifier — on iPhone, only if you allow it —, as explained in "Who we share it with".

When something fails: a technical report of the error — where it happened, the device model and the app version — so we can fix it. It does not include your business's content.

When you sign up in the app, the welcome flow asks you a few questions: your business's name, its country, its line of business, how you keep your books today, how many hours you spend on them, whether you know your margin and what you want Arca for. The name and the country are stored in your account, because they define your ticket, your currency and your taxes. All the answers are also stored on your phone, so you are not asked again and so they can be applied when you activate your plan, and they are deleted from it when you sign out. The multiple-choice answers — all of them except the business name — are also sent to Amplitude, as explained in the next paragraph.

While you sign up in the app — the welcome screen, registration, the screens of the welcome flow, the plans screen and the personalization screen —: which screens you see and what you tap (for example, whether you sign in with email, Apple or Google, which plan and billing cycle you choose and whether the purchase went through), the multiple-choice answers from the flow, your account's internal identifier, a random device identifier generated by Amplitude itself, your device's model and operating system, its language, the app version, and when each session of use starts and ends. Amplitude measures this. It does not receive your business's name, your email, your sales or anything you record in Arca, nor your IP address or your phone's advertising identifier.

If you download a free template or use a free tool on our website, even without an account: your email, what you told us you sell, the approximate country you are visiting from and, if you arrived through a link that carries it, which campaign or site you came from.

If you join the app's waiting list: your email, which phone you want it for — iPhone or Android —, the page you signed up from, the plan you were looking at if we know it, your approximate country and, if you arrived through a link that carries it, which campaign you came from. If you sign up while signed in, also which account you belong to.

When you visit our public website (arcaarq.com) or go through the website's screens to sign in, sign up and activate your plan — not inside the app and not in online stores: which pages you view, which site or campaign you came from, the sign-up steps you complete (signing up, starting checkout, joining the waiting list), your type of device and browser, and your approximate country. Google Analytics measures this; if you accept its cookies, it also recognizes repeat visits with a random identifier. If you accept them, the Meta Pixel also records the pages you view and those sign-up steps, to know whether you came from one of our ads. Microsoft Clarity records how you move through those pages — clicks, scrolling and cursor movement — to see where people get stuck; what you type into forms is hidden before it leaves your browser. Vercel Web Analytics counts visits without cookies or identifiers.

When you create your account on the website, we store in it where you first came from: the campaign or referring site, the page you landed on and the date. It tells us which channels bring us businesses; it includes nothing about your browsing afterwards.

What permissions the app asks for, and why

Camera: to read barcodes and to take a photo of a product. The image stays in your account; the scanner records nothing.

Photos: only if you pick an image from your library for a product or for your logo. Arca does not read your library; it opens the system picker and receives what you selected.

Notifications, if you accept them: for alerts about your own operation. They are not used for advertising.

Tracking, on iPhone only: you are asked once, when you finish the sign-up questions or, if you already had a plan, when you open the app. If you allow it, Arca passes your iPhone's advertising identifier to Meta to know whether you came from one of our ads; if not, the app works the same and that identifier never leaves the phone. On Android there is no prompt: the identifier is controlled by the system, and you can delete it in your phone's settings (Privacy → Ads).

Each permission is requested at the moment it is needed, you can deny it, and you can change it later in your phone's settings. Denying any of the four does not lock you out of the app: it only turns that feature off.

What we use it for

To provide the service: showing you your information, calculating your costs and margins, and issuing your tickets and reports.

To charge you for the subscription and keep track of whether it is up to date.

To contact you about your account: email confirmation, password recovery, invitations to your team, and the replies from the support chat.

If you downloaded a template or used a tool: to deliver it and, only if you ticked the box, to occasionally send you tips for your business and news about Arca. That second purpose is optional: you can ask us to stop writing to you at any time, from the email itself or by writing to the address above, and you keep your template.

If you joined the waiting list: to let you know when the app comes out in your phone's store. Every notice includes a link to unsubscribe, and that email is not used for anything else without asking you again.

To measure and improve our public website and the app's sign-up — at which step people leave and what kind of business ends up subscribing — and to learn which outreach channels work. These are statistics to improve the product, not advertising profiles.

We do not sell your information or your customers' information to anyone, and we do not use it for third-party advertising. What you record inside Arca never reaches Meta or Google.

Who we share it with

Only with the providers that make the service work, and only with what each one needs. None of them receives your information to use on their own account.

With Supabase, which hosts the database and the image storage on servers located in the United States.

With Vercel, which serves the website and the service's functions.

With Stripe, which processes payments for subscriptions purchased on the web and receives only your name, your email and your card details, which it captures directly.

If you subscribe inside the app, with the Apple App Store or Google Play, which charge for the subscription, and with RevenueCat, which confirms the status of that charge to us and receives your account's internal identifier to link the purchase to your business. Arca does not receive your card details: the store keeps them. RevenueCat also tells Meta about your trial, your payment and your renewals, as explained below.

With Resend, which delivers your account emails — confirmation and password recovery — and, if you joined it, the waiting-list notice, and processes your email address in order to do so.

With Sentry, which receives crash reports from the website and the app: which screen failed and on which line, the device model, the app version and your account's internal identifier, so we can find the case if you write to us. It does not receive your sales, your customers, your amounts, your email or your IP address.

With Amplitude, Inc., only from the phone app (iPhone and Android), to measure sign-up: it receives the usage data described above — the screens you see and what you tap, the multiple-choice answers from the welcome flow, your account's internal identifier and a random device identifier. The app is configured so that it does not record your IP address or your phone's advertising identifier, and it does not receive your business's name, your email or your sales. It is not used for advertising, it is not sold, and it is not used to track you across other apps or websites. Amplitude processes this data on servers in the United States.

With Google, through Google Analytics, only on our public website and on the website's sign-in and sign-up screens, never inside the app: it receives the pages you visit, where you came from, your type of device and browser and, if you accept its cookies, a random identifier. It does not receive your name, your email or anything about your business. Google may process this data on servers outside Mexico.

With Microsoft, through Microsoft Clarity, on the same pages as Google Analytics: it receives how you navigate them — clicks, scrolling, cursor movement and the page text —, your type of device and browser and, if you accept its cookies, a random identifier. What you type into forms is hidden before it is sent. It does not receive your name, your email or anything about your business, and it is not used for advertising. Microsoft may process this data on servers outside Mexico.

With Vercel, which hosts the site, through Vercel Web Analytics, on the same pages: it counts visits, the page, the referring site, the country and the type of device, without cookies or identifiers that follow you from one day to the next.

With Meta Platforms, through the Meta Pixel, only on our public website and on the website's sign-in and sign-up screens, never inside the app or in your online store, and only if you accept cookies: it receives the pages you visit, the sign-up steps you complete, your type of device and browser, your IP address and its cookie identifiers. It is used to know how many sign-ups each ad brings and to show Arca's ads to people who may be interested. It does not receive your name, your email or anything about your business. Meta also processes this data under its own data policy, on servers outside Mexico.

With Meta Platforms, also from the phone app, through its SDK, to measure our ads on Facebook and Instagram: it receives that you installed or opened the app and that you finished signing up, an anonymous identifier generated by the SDK itself, your device's model and operating system, your IP address and the phone's advertising identifier — on iPhone only if you allow it; on Android, unless you have deleted it. When you start a trial, pay or your subscription renews in the app, RevenueCat sends Meta that event with the plan, the price and the currency, linked to those same identifiers. Meta does not receive your name, your email or anything you record in Arca. It is used to know which ad brought each install and each payment; Meta also processes it under its own data policy, on servers outside Mexico.

Several of these providers process the information outside Mexico, mainly in the United States. They do so on our behalf and only to provide their service to us; except for Meta, as stated above, none of them uses it for its own purposes.

With the authorities, when there is a duly founded and motivated order compelling us to do so.

With nobody else. We do not sell your information and, apart from what is stated above about Meta, we do not transfer it for advertising purposes.

What you publish yourself

If you turn on your online store, whatever you mark as public — your business's name and logo, your products, their prices, their photos and, if you choose so, your address — becomes visible to anyone who has the address, and orders arrive at the WhatsApp number you set, with its country code. That is not something we share: it is what you are publishing, and you can turn it off whenever you want. If your subscription ends, the store stops being shown.

People who buy from your store do not need an account. Their cart is kept only in their browser's storage, and their name and the note they write — both optional — travel inside the WhatsApp message they send you. Arca does not receive or store those orders: the deal, and the details they give you, stay between you and your customer.

The receipt you share with a customer carries only that sale and the details of your business that you already put on the ticket.

How long we keep it

For as long as your account is active. If you cancel, we keep the information for 90 days in case you decide to come back, and after that it is permanently deleted.

If you close your business from the app — More → Business settings → "Close the business" — everything belonging to your business and your user is deleted without waiting those 90 days. If you pay on the web, the subscription is canceled at that moment; if you pay through the App Store or Google Play and it is still renewing, the app asks you to cancel it in the store first, because we cannot do it for you.

The welcome-flow answers and the copy of your business kept on your phone are deleted when you sign out. The usage data Amplitude keeps is retained for as long as it is useful for measuring sign-up; you can ask us to delete the data for your account.

The waiting list is separate from your account: deleting the account does not remove you from it. You can unsubscribe from the link in the notice or ask us to delete your entry.

You can also ask us to delete it by writing to support.arcaarq@gmail.com. Before doing so we recommend saving a copy of your store from Settings → General, which downloads all of your information into a file.

Your ARCO rights

Under Mexican data protection law you have the right to Access your data, to Rectify it if it is inaccurate, to Cancel it when you consider it is no longer required, and to Object to its use for specific purposes. These are known together as your ARCO rights (acceso, rectificación, cancelación y oposición).

Much of this you can do yourself from Settings and, in the app, from More → Business settings. For anything else, write to support.arcaarq@gmail.com with your request; we have 20 business days to reply.

You may also withdraw your consent at any time, through the same procedure.

Minors

Arca is a work tool for businesses and is not directed at minors. We do not knowingly collect data from minors; if any reaches us, we delete it.

Cookies

Necessary: on the web, Arca uses cookies to keep your session open. Without them you would have to sign in again on every screen, so they cannot be turned off.

Measurement, only on the public website and on the website's sign-in and sign-up screens, and only if you accept them: Google Analytics cookies (_ga and _ga_ followed by a code), which last up to two years and are used to count visits and tell new visits from repeat ones, Meta Pixel cookies (_fbp and, if you came from an ad, _fbc), which last three months and are used to measure our ads, and Microsoft Clarity cookies (_clck and _clsk), which last up to a year and are used to join the pages of a single visit. If you choose "Necessary only", none are set and the Meta Pixel is not even loaded; Google and Microsoft Clarity only receive cookieless signals with no identifiers (each page counts as a new visit). If you have already created your account and did not choose "Necessary only", on the screens to activate your plan the Google Analytics and Microsoft Clarity cookies are set, to join the steps of your sign-up; Meta's never are.

Your choice and the campaign you arrived from are kept in your browser's storage, not in a cookie. You can change your mind at any time from "Cookie preferences" at the bottom of any page on the site, or by clearing them in your browser.

Apart from the Meta Pixel's, we do not use advertising cookies. There are no measurement cookies inside the app, and the phone app does not use cookies: it stores your session encrypted on the device, and Amplitude stores its random device identifier there, which is reset when you sign out. The Meta SDK also stores its anonymous identifier on the phone.

In online stores, the shopper's cart is kept in their browser's storage, not in a cookie or on our servers.

Changes to this policy

If we change something important, we will let you know by email before it takes effect, and the date above will change. The version in force is always on this page.