Privacy Policy

Effective Date: 2025-01-01 — Version 1.0

1. Introduction

This Privacy Policy explains how DEVCENTRUM SRL (“we”, “us”, “our”) collects, uses, and protects your personal data when you use ArcOps. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable EU data protection laws.

DEVCENTRUM SRL is the data controller responsible for your personal data. This policy applies to all personal data processed through ArcOps, including data collected via our website, application, and related services.

2. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15) — request a copy of the data we hold about you
  • Right to rectification (Art. 16) — request correction of inaccurate data
  • Right to erasure (Art. 17, “right to be forgotten”) — request deletion of your data
  • Right to restriction of processing (Art. 18) — request that we limit how we use your data
  • Right to data portability (Art. 20) — receive your data in a structured, machine-readable format
  • Right to object (Art. 21) — object to processing based on legitimate interest
  • Right to withdraw consent (Art. 7(3)) — withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal

You also have the right to lodge a complaint with a supervisory authority. In Romania, this is the ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal).

3. How to Exercise Your Rights

To exercise any of your rights, please contact us at [email protected]. We will respond to your request within 30 days, as required by GDPR. If we need additional time due to the complexity of your request, we will inform you within the initial 30-day period.

We may ask you to verify your identity before processing your request to ensure the security of your data.

4. Data Security

We take appropriate technical and organisational measures to protect your data, including:

  • Encryption in transit using TLS (Transport Layer Security)
  • Encryption at rest via AWS RDS (Relational Database Service)
  • Access restricted to authorised personnel only, following the principle of least privilege
  • Regular security reviews and monitoring of our infrastructure

5. Third-Party Services

We use the following third-party services to process your data:

  • AWS SES (Amazon Simple Email Service) — for email delivery (EU region)
  • AWS RDS (Relational Database Service) — for database storage (EU region)
  • AWS S3 (Simple Storage Service) — for file storage (EU region)

All data processing occurs within the European Union. We do not transfer personal data outside the EU/EEA. We do not sell, rent, or share your personal data with advertisers or any other third parties for their own marketing purposes.

6. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email and provide a link to the updated version. The “Effective Date” at the top of this page indicates when the policy was last revised.

Your continued use of ArcOps after any changes to this policy constitutes your acceptance of the updated terms.

7. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact:

DEVCENTRUM SRL
Email: [email protected]

Waitlist Privacy Notice

The following sections describe how we process your personal data specifically when you join the ArcOps waitlist. These terms supplement the general privacy policy above.

1. Data We Collect

When you join the ArcOps waitlist, we collect the following personal data:

  • Email address — to verify your identity and contact you about ArcOps
  • Marketing consent preference — whether you opted in to receive promotional emails
  • Consent timestamps — the date and time you provided each consent
  • Verification status — whether you have confirmed your email address

2. Legal Basis for Processing (GDPR Art. 6)

We process your waitlist data on the following legal bases:

  • Legitimate interest (Art. 6(1)(f)) — Sending the verification email and notifying you when ArcOps launches. This is the core service you signed up for.
  • Consent (Art. 6(1)(a)) — Sending marketing and promotional emails. This only applies if you explicitly opted in by checking the marketing consent checkbox.

3. How We Use Your Data

We use your waitlist data to:

  • Verify your email address ownership via a confirmation link
  • Notify you when ArcOps is ready for launch
  • Send marketing communications about ArcOps (only with your explicit consent)

4. Data Retention

Your waitlist email and consent data are retained until the earliest of:

  • You request deletion of your data
  • 2 years after your last interaction with us

Verified subscribers who opted into marketing communications will receive emails until they unsubscribe. Unsubscribing from marketing does not delete your waitlist registration.

5. Cookies

The waitlist registration form does not use cookies. The main ArcOps website’s cookie policy applies separately.