Privacy policy

Who we are

ARCH is an agent reliability service run by Julius Bautista in Chicago, Illinois, at arch.juliusbautista.com. Questions about this policy go to hello@juliusbautista.com.

What we collect from Google

When you sign in with Google, ARCH requests these permissions:

• Basic profile and email (openid, email, profile): your Google account ID, email address, name and profile picture.
• Google Drive, read only (drive.readonly): requested only if you choose to connect Drive inside a lab that reads scripts from your Drive. It is never requested at sign-in.

How we use it

• Your account ID and email identify you, check that an administrator approved your access, and keep you signed in.
• Your name and picture label your account inside the app.
• Drive access reads the files you open in that lab, when you open them. ARCH never changes, deletes or shares your Drive files.

How we store it

• Your account record (account ID, email, name, picture, approval status and sign-in times) is stored on ARCH servers.
• The Drive access token is kept only in an encrypted cookie in your browser and expires within one hour. ARCH does not keep a Drive refresh token for your account.
• Sessions end after 30 days without use, or when you sign out.

What we never do

• We do not sell, rent or trade your data.
• We do not use Google user data for advertising.
• We do not use Google user data to train AI or machine learning models.
• We do not let people read your Google data, except with your consent, for security or abuse investigations, or where the law requires it.

Google API Services User Data Policy

ARCH's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Sharing

We share data only with the infrastructure providers that host and run ARCH, under their own security terms, or when the law requires it.

Your choices

• Remove ARCH's access at any time from your Google account permissions.
• Email hello@juliusbautista.com to get a copy of your account record or to delete it. We delete it within 30 days of your request.

Changes

When this policy changes, we update the date above. Material changes are announced in the app before they take effect.