Privacy Policy

Last updated: April 22, 2026

ARCA ("we", "us", "our") provides an AI platform for licensed real estate agents. This policy explains what we collect, how we use it, and the choices you have.

What we collect

• Account data: name, email, phone, real estate license number, brokerage name · required to operate.
• Pipeline data: leads, properties, deals, activity logs · content you input into LUMA, NOVA, ATLAS, VAULT.
• Usage telemetry: which tools you use, how often, anonymized per-request counts · for billing + product improvement.
• Agent preferences: tone, language, style choices · stored as memory so drafts get better over time.
• Technical data: IP address, browser type, session timestamps · standard operational logs.

How we use it

• Provide the ARCA service · generate CMAs, score leads, draft copy, build contracts, power the personal AI agent.
• Improve the product · aggregate, anonymized usage patterns inform feature priorities.
• Bill you · if you're on a paid plan, we process subscription data via Stripe.
• Communicate with you · transactional emails (welcome, invites, password resets, billing notices). We don't send marketing without explicit consent.

Third-party services and data flow

Your data passes through these services in operation. Each has their own privacy policy and data processing agreement:

• Supabase · authentication, database, RLS-protected storage. Data is encrypted at rest and in transit. Hosted in the US. Privacy policy.
• Anthropic (Claude API) · AI model that powers NOVA, LUMA, ATLAS, VAULT, and the personal agent chat. What we send Anthropic: when you use these tools, your lead data (names, phone numbers, emails, budgets, timelines, preapproval status, notes), property data (addresses, listing prices, status), activity history, and your professional profile (name, brokerage, FL license number) are transmitted to Anthropic's servers for inference. Anthropic processes this data to generate the requested output and returns it to ARCA. What Anthropic doesn't do: per Anthropic's commercial terms, Anthropic does not train models on customer API data, does not sell it, and retains inference logs only as needed for abuse monitoring (currently 30 days). Inference traffic is encrypted in transit and processed in the United States.
• Mem0 · per-user long-term memory layer for the AI agent. Stores summarized preferences, not full pipeline data. Used only to personalize subsequent prompts. Privacy policy.
• Stripe · subscription billing and payment processing. We do not store full card numbers; Stripe handles PCI scope. Privacy policy.
• Resend · transactional email delivery (welcome, team invites, contract decision notices). Privacy policy.
• Google Places API · address autocomplete for property lookups. Only the address strings you type are sent to Google. Privacy policy.
• Hostinger · application hosting and edge delivery. Privacy policy.

What this means for your clients

If you use ARCA's AI tools to work on a client's transaction, that client's information passes through Anthropic's Claude API as described above. Florida agents have a duty under Chapter 475 to safeguard client information. Before adding a client's full PII to ARCA, we recommend you disclose to your clients that you use AI tools in your workflow, and obtain their consent where required by your brokerage's policy or applicable law (FL §475.278, GDPR Art. 6, CCPA §1798.100). ARCA provides the infrastructure; client-facing consent is part of your professional responsibility.

What we don't do

• We don't sell your data to anyone.
• We don't share lead or client contact info with third parties except those above, and only as required to run the service.
• We don't use your pipeline content to train third-party AI models.
• We don't claim ownership over the content you create in ARCA · it's yours.

Data retention

We keep your data for as long as your account is active. If you cancel, we delete your pipeline data within 90 days unless you ask for earlier deletion. Billing records may be retained longer where required by law.

Your rights

• Access: download your data anytime from Settings (coming soon).
• Correction: update any of your data from Settings.
• Deletion: email us to request account + data deletion. We complete within 30 days.
• Portability: export your leads/properties/deals as CSV or JSON on request.

Florida real estate compliance

ARCA is a tool, not a broker. Your responsibility for compliance with the Florida Real Estate Commission (FREC), Fair Housing, and MLS rules remains yours. Always review AI-generated copy before sending to a client or public channel.

Security

Data is encrypted in transit (HTTPS) and at rest (Supabase). Passwords are hashed (Supabase handles this, using bcrypt). API keys are server-side only. We rotate credentials regularly.

Changes to this policy

We may update this policy as the product evolves. Material changes will be announced via email to active users. Continued use after an update means you accept the new terms.

Terms of Service · Home