ARCHE is operated by HDC Brands LLC ("we," "us," "our"). When we say "ARCHE," we mean the platform, website, and all related services accessible at arche.carbongreylabs.com and any associated domains.
For privacy matters, you can reach us at:
| Data Type | What It Is | Why We Collect It |
|---|---|---|
| Account information | Name, email address, password (hashed) | To create and manage your account |
| Session content | Your messages, ideas, and co-founder conversations | To provide the Service and persist your sessions |
| Blueprint data | Product blueprints, features, and roadmaps you generate | To save and retrieve your work |
| Payment information | Billing details (processed by Stripe — we never see card numbers) | To process subscription payments |
| Data Type | What It Is | Why We Collect It |
|---|---|---|
| Usage data | Pages visited, features used, session timestamps | To improve the Service and fix issues |
| Device information | Browser type, operating system, screen resolution | To ensure compatibility |
| IP address | Your internet IP address | Security, fraud prevention, general location |
| Cookies | Session tokens, preference cookies | Authentication and user experience |
If you sign in using Google or GitHub, we receive basic profile data from those providers (name, email, profile photo). We do not receive your passwords from third-party providers. The data we receive is governed by the respective provider's privacy policy.
We use your data exclusively to:
We share limited data with trusted service providers who help us deliver ARCHE:
| Provider | Purpose | Data Shared |
|---|---|---|
| Anthropic | AI model provider (co-founder engine) | Your message content per session |
| Stripe | Payment processing | Billing info, subscription status |
| Supabase | Database, authentication, storage | Account data, sessions, blueprints |
| Vercel | Hosting and delivery | Web traffic, IP (logs only) |
| Google / GitHub | Optional sign-in providers | Basic profile if you use OAuth login |
We require all service providers to maintain appropriate data security and to process your data only as directed by us.
We may also share data when required by law, court order, or governmental authority, or when necessary to protect the rights, safety, or property of HDC Brands LLC or others.
Your data is stored on Supabase infrastructure hosted in the US East region (us-east-1). By using ARCHE, you consent to the transfer and processing of your data in the United States.
We implement industry-standard security practices including:
In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours of becoming aware of the breach, as required by applicable law.
We use essential cookies for authentication (session tokens) and basic functionality. We do not use advertising cookies or cross-site tracking cookies. You can disable cookies in your browser settings, but this will affect your ability to remain logged in.
We do not use Google Analytics, Facebook Pixel, or other third-party advertising trackers.
Regardless of where you are located, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at info@carbongreylabs.com. We will respond within 30 days.
We retain your data for as long as your account is active. When you cancel your account:
You can request immediate deletion of your data at any time by contacting info@carbongreylabs.com.
ARCHE is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us at info@carbongreylabs.com and we will promptly delete it.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information. To exercise your California rights, contact us at info@carbongreylabs.com.
If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice within ARCHE at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.
For any privacy-related questions, requests, or concerns:
We aim to respond to all privacy inquiries within 5 business days.