Privacy Policy

1. Introduction

Arc Studio LLC (“Arc Studio,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at arcstudiolab.com or use any of our products and services, including ProHeadshot.ai, which is owned and operated by Arc Studio LLC (collectively, the “Services”).

By using the Services, you agree to the practices described in this Policy. If you do not agree, please do not use the Services.

2. Information We Collect

Information you provide

• Account information — name, email address, password, and any other details you provide when registering.
• Billing information — processed by our payment provider, Stripe. We do not store full payment card numbers on our servers.
• Content — files, prompts, images, or other materials you upload or submit to the Services.
• Communications — messages you send to us, including support requests and feedback.

Information collected automatically

• Log data — IP address, browser type, device type, operating system, referring URLs, pages viewed, and timestamps.
• Cookies and similar technologies — used for authentication, session management, preferences, and analytics.
• Usage data — how you interact with the Services, including features used and actions taken.

3. How We Use Information

• Provide, operate, and maintain the Services.
• Process transactions and send related confirmations and receipts.
• Respond to support requests and communicate with you about your account.
• Improve, personalize, and develop new features.
• Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity.
• Comply with legal obligations and enforce our Terms of Service.

4. How We Share Information

We do not sell your personal information. We share information only in the following circumstances:

• Service providers — trusted third parties that help us operate the Services, such as Stripe (payments), Supabase (database & authentication), Cloudflare (storage, CDN, and security), and third-party AI model inference providers. These providers process information only on our instructions and under contractual confidentiality obligations.
• Legal compliance — when required by applicable law, subpoena, court order, or to protect the rights, property, or safety of Arc Studio, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, with appropriate confidentiality protections.
• With your consent — for any other purpose disclosed at the time of collection.

5. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account at any time by contacting us.

6. Security

We use industry-standard safeguards to protect your information, including encryption in transit (TLS) and at rest, restricted access controls, single sign-on for production systems, and audit logging. No method of transmission or storage, however, is 100% secure, and we cannot guarantee absolute security.

7. Photo Data Processing (ProHeadshot.ai)

For our headshot generation service (ProHeadshot.ai), we collect and process user-uploaded photographs to generate AI-based portrait outputs. We treat these images with heightened care:

• Purpose limitation — uploaded photos are used solely to train a personalized AI model and generate your requested headshots.
• No third-party use — uploaded photos are never used to train general AI models, sold, or shared with advertisers.
• Automatic deletion — uploaded photos and generated AI models are automatically deleted within 30 days of generation, unless you request earlier deletion.
• User control — you may request immediate deletion of all uploaded photos at any time by emailing hi@arcstudiolab.com.

By uploading photos to ProHeadshot.ai, you confirm that you have the right to use those photos and grant us limited permission to process them solely to deliver the requested service.

8. Cookies & Tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Services are used. You can control cookies through your browser settings. Disabling cookies may limit certain features of the Services.

We use essential cookies for session management and authentication, and a privacy-focused analytics tool (such as Plausible or Cloudflare Web Analytics) that does not track individual users across sites. We do not run advertising networks on our Services and do not allow third-party advertisers to track you across sites through us.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access, correct, or delete the personal information we hold about you.
• Object to or restrict certain types of processing.
• Receive a copy of your data in a portable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise these rights, email us at hi@arcstudiolab.com. We respond to verifiable requests within 30 days.

10. International Users

Arc Studio is based in the United States, and the Services are operated from the U.S. By using the Services, you understand that your information will be transferred to and processed in the United States, which may have data protection laws different from those in your country.

11. Children’s Privacy

The Services are not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or through the Services. Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our handling of your data, please contact us: