Privacy Policy

Arcanjo is operated by Effetive Sistemas ("we", "our", or "us"), a company incorporated in Brazil. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Arcanjo. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Software.

This Privacy Policy is intended to comply with applicable data protection laws, including Brazil's Lei Geral de Proteção de Dados (LGPD) and, where applicable, the European Union's General Data Protection Regulation (GDPR).

2.1 Information you provide directly

• Account information: email address and name when creating a paid account
• Payment information: processed entirely by Stripe — we never store payment card details
• Support communications when you contact us by email
• License labels and preferences you set within the dashboard

2.2 Automatically collected information

• Machine identifier (hashed) — used exclusively for license binding; not linked to personal identity
• Application version and OS platform — for compatibility and update delivery
• Anonymized crash reports and error logs — to diagnose and fix bugs
• Aggregated feature usage statistics (opt-out available in settings) — to improve the product

2.3 Information we do NOT collect

• Your source code or project files
• Your Anthropic API keys or any other authentication credentials
• The content of your agent conversations or terminal sessions
• Session history stored locally in your SQLite database
• Contents of your CLAUDE.md files or skill files

We use the information we collect to:

• Provision and maintain your account and subscription
• Process payments and manage billing through Stripe
• Issue, validate, and manage license keys and machine bindings
• Send transactional emails: receipts, billing notices, and account alerts
• Respond to support requests and resolve technical issues
• Improve the Software through aggregated, anonymized analytics
• Detect, prevent, and investigate fraud and security incidents
• Comply with legal obligations under Brazilian law and other applicable regulations

We do not sell, rent, or trade your personal information to third parties. We may share data only in the following limited circumstances:

• Stripe:Payment processing. Stripe receives billing and payment data as necessary to process transactions. Stripe's Privacy Policy governs their use of your data.
• Supabase: Authentication and account data storage. We use Supabase as our backend-as-a-service for storing account information and license data.
• Legal authorities: When required by law, court order, or to protect the rights, property, or safety of Arcanjo, our users, or others.
• Business transfers: In connection with a merger, acquisition, or sale of all or substantially all of our assets, with advance notice to affected users.

We retain account data (email, subscription status, license records) for as long as your account is active and for 90 days after account deletion, after which it is permanently deleted. Payment records are retained for 7 years as required by Brazilian fiscal law. Machine identifier hashes are retained for the duration of an active license binding and deleted upon unbinding or subscription cancellation. Anonymized analytics data may be retained indefinitely. You may request earlier deletion of your personal data at any time.

We implement industry-standard security measures to protect your data, including:

• TLS encryption for all data in transit between the application and our servers
• Encryption at rest for account and license data stored in our database
• Access controls limiting who within Effetive Sistemas can access personal data
• Regular security review of our infrastructure and dependencies

No method of electronic transmission or storage is 100% secure. While we strive to protect your information using commercially reasonable means, we cannot guarantee absolute security. In the event of a data breach that poses significant risk to your rights, we will notify you as required by law.

The Arcanjo desktop application does not use cookies. Our website uses:

• Essential auth cookies: Set by Supabase to maintain your authenticated session. These are strictly necessary and cannot be disabled without breaking login functionality.
• No third-party tracking or advertising cookies. We do not use Google Analytics, Facebook Pixel, or similar third-party trackers on our website.

You can control cookies through your browser settings. Disabling session cookies will prevent you from staying logged in to the Arcanjo website.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention obligations
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain types of processing, including analytics
• Restriction: Request restriction of processing in certain circumstances
• Opt-out of analytics: Disable anonymized usage tracking from within the application settings at any time

To exercise any of these rights, contact us at contact@arcanjocode.com.br. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

Effetive Sistemas is based in Brazil. Our infrastructure providers (Supabase, Stripe) may process and store data on servers located in other countries, including the United States. When transferring data internationally, we rely on appropriate safeguards such as standard contractual clauses or data processing agreements that comply with applicable data protection law. By using Arcanjo, you acknowledge that your data may be transferred to and processed in countries outside your own.

The Software is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at contact@arcanjocode.com.br and we will promptly delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by updating the "Effective date" at the top of this page and, for significant changes, by sending an email to registered account holders. Your continued use of the Software after the effective date constitutes acceptance of the updated policy.

For privacy-related inquiries, data access requests, or complaints, contact us at:

Effetive Sistemas
Brazil
contact@arcanjocode.com.br

If you are in Brazil and believe we have not complied with LGPD, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD). EU residents may also lodge a complaint with their local data protection supervisory authority.