Last updated: August 2026
This Privacy Policy explains how Arcturus Labs, Inc. ("Arcturus Labs," "we," "us," "our") collects, uses, discloses, and protects information when you visit arcturuslabs.io (the "Site") or contact us through it. It applies to the Site only. Work performed under a client engagement is governed by the confidentiality, data processing, and security terms of the applicable signed engagement agreement, which control over this policy for that work.
Inquiry information you give us: when you contact us or submit our inquiry form, we collect the information you provide: your name, work email, phone number (if provided), company, and the description of the job or project you send us.
Client information: if you become a client, we receive the contact and business information needed to deliver and invoice for services, as defined in the engagement agreement.
Technical information: standard server logs and analytics, including pages visited, referring URLs, browser type and version, device type, approximate location derived from IP address, and timestamps of visits.
Client data processed during engagements (for example, documents and data you ask our systems to process) is handled under the engagement agreement's data-processing terms: processed for you, in environments you control access to, never used by us for any other purpose, and never used to train AI models.
We do not use the Site to make automated decisions that produce legal or similarly significant effects on individuals.
Where the GDPR or UK GDPR applies, we process personal information on these bases: consent (where you opt in to communications), legitimate interests (responding to business inquiries, Site security and improvement, and defending legal claims), contract (performing engagements), and legal obligation (where retention or disclosure is required by law). You may withdraw consent at any time without affecting prior processing.
The Site uses only strictly necessary cookies or equivalent technologies required for basic functionality and security. We do not use advertising or cross-site tracking cookies. Any privacy-friendly analytics we run aggregates technical information (see Section 2) and does not build individual profiles for advertising. Most browsers let you block or delete cookies; the Site will continue to function.
We share personal information only with:
We do not otherwise disclose your information except with your permission.
When we evaluate or respond to an inquiry, we may use software, including AI tools, to help draft responses or organize information. We do not input client engagement data into third-party AI systems except under the engagement agreement's data-processing terms, which require zero-retention, no-training configurations and client-approved environments. Inquiry descriptions you submit through the Site are used only to respond to you and improve how we respond to similar requests.
Inquiry information is kept as long as needed to respond and for a reasonable period afterward (generally up to 24 months) for business record-keeping, then deleted or anonymized. Technical logs are kept for security and debugging for generally up to 12 months. Client records are retained as required by the engagement agreement, invoicing law, and tax law. When an engagement ends, client data in environments we operate is handled per the engagement agreement's offboarding and deletion terms.
We apply industry-standard measures appropriate to a small firm: encryption in transit and at rest for systems we operate, multi-factor authentication, least-privilege access limited to personnel who need it, and access logging. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
Where applicable law gives you rights over your personal information (such as access, correction, deletion, restriction, objection, portability, or opt-out of communications), you may exercise them by emailing legal@arcturuslabs.io from the address you used. We respond within the timeframe the applicable law requires and may ask for information to verify your request. EEA/UK residents may lodge a complaint with their supervisory authority; California residents see the section below.
The California Consumer Privacy Act, as amended, gives California residents the right to know, access, delete, correct, and limit the use of personal information, and the right to non-discrimination for exercising those rights. The categories we collect and their purposes are listed in Sections 2 and 3. We do not sell or share personal information as those terms are defined by the CCPA. To exercise California rights, email legal@arcturuslabs.io. We will verify your request as required and respond within the statutory period.
We are based in the United States. If you contact us from the EEA, UK, or elsewhere, your information will be transferred to and processed in the United States. Where required, transfers rely on adequacy decisions or the EU Standard Contractual Clauses (as incorporated into our service provider agreements), supplemented by our security measures.
The Site is directed to businesses and is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
We may update this policy from time to time. Material changes will be posted on this page with an updated date. This version supersedes all earlier versions.
Privacy questions, requests, or complaints: legal@arcturuslabs.io.
← Back to Arcturus Labs