Privacy Policy

Last updated: 16 May 2026

ArcOS is operated by Deighton Digital (“ArcOS”, “we”, “us”). This policy explains what information we collect, how we use it, and the choices you have. It also covers our handling of data accessed through Google APIs.

1. Information we collect

We collect only what is needed to provide the service.

• Contact information you give us directly (name, email, company) when you reach out or engage us.
• Account data from third-party platforms you connect (such as Google, Meta, Shopify, Klaviyo) once you authorise the connection.
• Operational data generated while running campaigns, content, and analytics on your behalf inside your accounts.

2. Google user data

When you authorise ArcOS to access Google services (for example Google Ads, Google Analytics, Search Console, Gmail, Calendar, or Drive) we access only the scopes you grant. We use that data solely to provide the features you have asked for. Specifically:

• We do not sell Google user data.
• We do not use Google user data to serve advertising.
• We do not use Google user data to train generalised AI/ML models.
• Human review of Google user data only occurs where you have explicitly asked us to, or where it is strictly necessary for security, abuse prevention, debugging, or to comply with the law.
• You can revoke access at any time from your Google Account permissions page.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How we use information

• To deliver the services you have engaged us for.
• To communicate with you about your account, work in progress, and results.
• To improve our internal tooling and operating cadence (using aggregated, non-identifying signals).
• To meet legal, accounting, and regulatory obligations.

4. How we share information

We do not sell personal information. We share data only with:

• Sub-processors that power our infrastructure (hosting, analytics, error tracking) under written agreements.
• The platforms you have asked us to operate inside (e.g. Google, Meta, Klaviyo, Shopify).
• Authorities where required by law.

5. Data retention

We retain information for as long as needed to provide the service and meet our legal obligations. When an engagement ends, we delete or anonymise data that is no longer required, on request or on a routine cycle.

6. Security

We use industry-standard practices to protect information: encrypted transport, scoped access tokens, least-privilege access, and audit logging. No system is perfectly secure, but we take reasonable steps to keep your data safe.

7. Your rights

You can ask us to access, correct, export, or delete the personal information we hold about you. Email angus@deighton.cc and we will respond within a reasonable period.

8. Children

ArcOS is a business-to-business service and is not directed to children under 16. We do not knowingly collect personal information from children.

9. Changes

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

10. Contact

Questions about this policy or your data: angus@deighton.cc.