At Arc Solutions ("Arc", "we", "our"), protecting the privacy, confidentiality, and security of your personal data and business information is our highest priority. This Privacy Policy details how we collect, store, process, and safeguard data across our multi-tenant software platform.
1. Information We Collect
To provide our cloud business platform, we collect the following categories of information:
- Account & Registration Details: Account owner full name, login email, phone number, shop brand name, and branch addresses.
- Employee & Staff Records: Staff names, login credentials, phone numbers, assigned roles, working branches, and specialty titles.
- Customer & Client Data: Client names, contact phone numbers, visit history, preferred services, and purchase records entered into your tenant database.
- Transaction & Financial Logs: Point of Sale (POS) receipts, cash/M-Pesa payment records, expense logs, and profit goals.
- System & Device Analytics: IP addresses, browser types, session cookies, and login activity logs for security auditing.
2. How We Use Your Data
We process collected data exclusively for the following operational purposes:
- Providing and maintaining core SaaS features (POS, scheduling, client journeys, inventory tracking).
- Processing automated WhatsApp, SMS, and email notifications (e.g. appointment confirmations, receipt statements, campaign automations, and welcome credentials).
- Generating tenant-scoped financial performance reports and analytics dashboards.
- Enforcing account security, multi-factor authentication (OTP), and preventing unauthorized access.
3. Data Protection & Tenant Isolation Security
Arc employs enterprise-grade security protocols to protect your information:
- Row-Level Tenant Isolation: Every database record is strictly bound to your specific
tenant_id, guaranteeing complete data isolation between businesses. - Data Encryption: All network communication is encrypted using 256-bit SSL/TLS HTTPS encryption. Passwords and sensitive tokens are hashed using industry-standard BCRYPT algorithms.
- Performance Composite Indexing: Queries are optimized and indexed to prevent unauthorized data exposure or performance degradation.
4. Third-Party Integrations & Processing
We integrate with trusted third-party service providers solely to facilitate core platform functions:
- WhatsApp Business API (Meta Platforms, Inc.): Used to deliver automated WhatsApp appointment reminders, booking confirmations, customer engagement campaigns, and digital POS receipt notifications.
- Brevo & Email Services: Used to dispatch transactional credentials, welcome emails, and password resets.
- M-Pesa Payment Services: Used to process subscription payments and checkout transactions securely.
We do NOT sell, rent, trade, or monetize your customer lists or transaction history to advertisers or third-party brokers under any circumstances.
5. Data Retention & Account Deletion
Your data remains stored as long as your tenant account is active. If you close or delete your account, your data will be permanently purged or anonymized in accordance with applicable data protection regulations.
6. Your Rights
As a data owner, you have the right to:
- Access, update, or correct your account and employee profile details at any time.
- Export your customer records and transaction reports.
- Request permanent deletion of your tenant account and associated data.
7. Contact Our Data Protection Officer
🔒 Data Privacy Inquiries: If you have questions regarding data privacy or security, contact our Data Protection Team at privacy@arcsolutions.co.ke.