Scope & Statutory Notice
This Policy applies to all services, features, and modules hosted on ArchCross (including Coach, Studio, Compass, Kaico, and Field). By creating an account or accessing our services, you acknowledge that you have read and agreed to the practices described herein.
This Policy does not apply to third-party websites or services linked from our platform. We recommend consulting the respective privacy notices of external providers before submitting personal information.
Categories of Personal Data Collected
We collect personal information necessary to deliver and refine our services across the following categories:
- Direct Identifiers
-
Email address, unique user ID, display name, avatar, and single sign-on (SSO) credentials provided through Google or LinkedIn authentication.
- Simulation & Learning Interaction Data
-
Inputs, business problem definitions, decision responses, and reflection text submitted across interactive modules; historical diagnostic scores, competency analytics, and Personal Development Profile records.
- Technical & Telemetry Data
-
Internet Protocol (IP) addresses, browser type and version, operating system, timestamps, session identifiers, device characteristics, and on-platform clickstream analytics.
Purposes & Legal Bases for Processing
Personal data is processed strictly under legitimate, defined purposes:
- Contract Performance: Account provisioning, session authentication, dynamic stage generation, and module delivery.
- Customer Engagement: Delivering automated diagnostic feedback, responding to user inquiries, and transmitting critical operational updates.
- Platform Optimization: Performing aggregate, anonymized telemetry analysis to evaluate system stability and optimize pedagogical calibration.
- Security & Compliance: Preventing abusive behavior, mitigating security threats, and fulfilling statutory retention mandates.
Duration, Territory, Recipients & Methods
- Retention Period
-
Data is retained throughout the active lifecycle of your account until you request deletion, subject to statutory preservation requirements under commercial and tax laws.
- Territory
-
Personal data is stored and processed in Taiwan and wherever our servers, cloud services, and contracted processors are located.
- Non-Sale of Personal Data
-
ArchCross never sells, rents, or commercializes personal data to third parties. Data is shared only with contracted service providers (cloud infrastructure, authentication, and AI inference APIs) strictly bound by data confidentiality agreements.
Generative AI & Third-Party Processing
The text you enter in our services (such as conversations, responses, and scenario descriptions) is sent to generative AI providers (including but not limited to OpenAI, Anthropic Claude, Google Gemini, and Dify) to produce responses, practice materials, and analysis. Please note:
- Provider Data Policies: These providers process the data they receive under their own privacy policies and terms of service. We recommend reviewing them as well.
- Avoid Unnecessary Sensitive Data: We do not send your password or login credentials to these providers. Please avoid entering unnecessary sensitive personal data, or other people's data, in your conversations.
Data Subject Rights & Exercise Procedures
Subject to applicable law, you possess enforceable rights regarding your personal information:
- Right to Access: Review stored profile information and historical submissions.
- Right to Data Portability: Request an electronic copy of personal data provided to the Platform.
- Right to Rectification: Correct or supplement inaccurate or incomplete data.
- Right to Restriction of Processing: Request temporary or permanent cessation of data processing.
- Right to Erasure (Right to Be Forgotten): Request permanent deletion of your account and associated records.
Exercising Your Rights: To submit a statutory privacy request, email [email protected]. We will verify your identity and fulfill valid requests within statutory deadlines. Note that complete account erasure irreversibly removes all performance records and Personal Development Profile history.
Information Security Safeguards
ArchCross deploys rigorous administrative and technical security measures to safeguard data against unauthorized access, disclosure, or destruction:
- In-Transit Encryption: All web traffic is encrypted over HTTPS (TLS).
- At-Rest Encryption: System secrets such as API keys are stored with AES-256 encryption.
- Access Minimization: Internal access to systems and data is strictly limited.
Policy Amendments & Contact Information
ArchCross may update this Privacy Policy to reflect regulatory evolutions or service enhancements. The revised version will be published on this page with an updated "Last Updated" date. Significant changes will be announced proactively through site notices or email.
For questions or requests concerning this Privacy Policy, contact us at [email protected].