Privacy Policy

This Privacy Policy describes how Project Arc Technologies (“Project Arc”) handles personal information in connection with the Project Arc website and the Project Arc platform (the “Service”).

This policy will be updated as the Service and our practices change.

We collect information you choose to give us, for example when you request a demo, sign up for updates, or contact us. This can include your name, work email, company, role and any message you send.

If you have a Project Arc account, we hold the information needed to operate it, such as your name, email address, sign-in details, organization and membership, role and permissions, profile details, an optional profile photo and your preferences.

Authorized users may create and manage project information in the Service, such as project details, team members, tasks, schedules, comments, reviews, construction administration records and related activity. This information may include personal information about project participants.

Users may upload drawings, specifications, reports, images and other files. These are stored so that authorized users can view, review, mark up and export them.

We keep communications sent to us and communications made through the Service, such as comments, replies, mentions and notifications, so the Service can display and record them.

Like most web services, the Service and its hosting providers process technical information needed to deliver and secure it, such as browser and device information, IP address, and records of errors and activity within the Service.

We use information to:

• provide, operate and maintain the Service;
• authenticate users and enforce permissions;
• respond to demo requests, questions and support needs;
• send updates you have asked to receive;
• secure the Service and investigate misuse; and
• improve and develop the Service.

We do not sell personal information.

We rely on third-party service providers to host, store and operate the Service, including infrastructure, database, file storage, authentication, email delivery and AI service providers. These providers process information on our behalf as needed to provide the Service.

The production environment for current customers stores core customer data at rest — the Project Arc database, sign-in (authentication) records and files in private storage — with Supabase in its Canada (Central) region. Other processing, such as logs, network delivery and caching, email delivery, support and AI-assisted requests, may involve service providers operating in other countries, including the United States. A United States customer data environment is planned and is not yet generally available. A customer’s applicable storage region will be identified in its order form or service documentation.

Project Arc remains accountable for personal information handled by its service providers. Information processed outside Canada may be subject to the laws of, and lawful access by authorities in, that jurisdiction.

When a user chooses an AI feature, the information that feature needs is sent for processing. AI-assisted requests are routed through Lovable’s AI gateway to an OpenAI model and may be processed in the United States.

Organization owners and administrators can turn AI Features off for their organization, and AI Features are off by default where no organization setting exists. See the AI & Data Policy for what each feature sends.

We use access controls, including sign-in and firm- and project-level permissions, to limit who can see project information. No online service can be guaranteed to be completely secure, and our security practices continue to develop.

We keep information for as long as it is needed to provide the Service and for the purposes described in this policy, or as required by law. Formal retention periods have not yet been finalized and will be described in a future version of this policy.

You may ask to access, correct or delete personal information we hold about you, or stop receiving updates, by contacting us. Some project information may be controlled by the organization that manages the project, and we may need to refer your request to that organization.

We may update this policy as the Service develops. The “Last Updated” date identifies the current version.

For questions or requests regarding this Privacy Policy, please contact Project Arc through our Contact page.

Project Arc Technologies
British Columbia, Canada
hello@projectarc.io
Contact Project Arc →