Privacy policy.

Privacy Policy

Arc Financial Technologies ("Arc," "we," "our," or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have over it.

By accessing or using Arc's platform, products, or services, you agree to the collection and use of information as described in this policy.

1. Who we are

Arc Financial Technologies is registered in [jurisdiction] under company number [XXXXXX], with its registered address at [address]. Arc operates the platform available at arc.com and the Arc mobile application. For privacy-related enquiries, contact our Data Protection Officer at: privacy@arc.fi

2. Information we collect

Information you provide directly:

• Full name, email address, phone number, and date of birth when you create an account

• Government-issued identification documents submitted for identity verification (KYC)

• Bank account or payment details used to fund your Arc account

• Communications you send us, including support requests and feedback

Information collected automatically:

• Device identifiers, IP address, browser type, and operating system

• Usage data — pages visited, features used, time spent, clicks, and scroll depth

• Transaction history and portfolio activity within the Arc platform

• Cookies and similar tracking technologies (see Section 7)

Information from third parties:

• Identity verification data from KYC/AML screening providers

• Financial data from payment processors and banking partners

• Publicly available information used for fraud prevention and compliance screening

3. How we use your information

We use your personal data to:

• Create and manage your Arc account

• Process deposits, withdrawals, and yield distributions

• Verify your identity and comply with anti-money laundering (AML) and know-your-customer (KYC) obligations

• Communicate with you about your account, products, and service updates

• Improve the Arc platform through usage analysis and product research

• Detect, prevent, and investigate fraud, security incidents, and policy violations

• Comply with applicable laws, regulations, and lawful requests from authorities

• Send you marketing communications, where you have given consent or where permitted by law

We do not sell your personal data to third parties for their own marketing purposes.

4. Legal basis for processing

We process your personal data on the following legal bases:

• Contract performance — processing necessary to provide the services you've signed up for

• Legal obligation — processing required to comply with KYC, AML, and financial regulation

• Legitimate interests — fraud prevention, platform security, and service improvement

• Consent — marketing communications and non-essential cookies, where you have opted in

5. How we share your information

We share your data only where necessary:

Service providers: Identity verification partners, payment processors, cloud infrastructure providers, and customer support tools — all bound by data processing agreements.

Regulatory and legal authorities: Where required by law, court order, or regulatory obligation. We will notify you where legally permitted to do so.

Business transfers: In the event of a merger, acquisition, or sale of assets, your data may transfer to the successor entity under equivalent privacy protections.

With your consent: We will not share your data with third parties for purposes not described here without your explicit consent.

6. Data retention

We retain your personal data for as long as your account is active and for a period thereafter as required by applicable financial regulation — typically 5–7 years post account closure, to satisfy AML record-keeping obligations. Where data is no longer required, we securely delete or anonymise it.

7. Cookies

Arc uses cookies and similar technologies to operate the platform, remember your preferences, and understand how the product is used.

Essential cookies: Required for the platform to function. Cannot be disabled.
Analytics cookies: Help us understand usage patterns. Can be disabled via cookie settings.
Marketing cookies: Used to personalise communications. Require your consent.

You can manage cookie preferences at any time via Cookie Settings in the platform footer.

8. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you

• Correct inaccurate or incomplete data

• Delete your data, subject to legal retention obligations

• Restrict or object to certain processing activities

• Portability — receive your data in a structured, machine-readable format

• Withdraw consent for processing based on consent, at any time

To exercise any of these rights, contact us at privacy@arc.fi. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

9. Data security

Arc implements industry-standard technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS) and at rest (AES-256)

• Multi-factor authentication for account access

• Regular independent security audits of smart contracts and platform infrastructure

• Access controls limiting employee data access to what is necessary for their role

No security measure is infallible. If you become aware of any security concern related to your Arc account, contact security@arc.fi immediately.

10. International data transfers

Arc may transfer your personal data to countries outside your jurisdiction of residence. Where such transfers occur, we ensure equivalent protections are in place through Standard Contractual Clauses, adequacy decisions, or other appropriate safeguards.

11. Children

Arc's services are not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact privacy@arc.fi and we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-platform notification at least 30 days before they take effect. Continued use of Arc after the effective date constitutes acceptance of the updated policy.

13. Changes to these Terms

Arc may update these Terms from time to time. Material changes will be communicated via email or in-platform notification at least 30 days before they take effect. Continued use of Arc after the effective date constitutes acceptance of the updated Terms.

15. Contact

Arc Financial Technologies
legal@arc.fi
support@arc.fi