Privacy Policy

1. Who we are

Arbitrion ("we", "us", "our") operates the website at arbitrion.com and the Arbitrion application. Our contact address is 15442 Ventura Blvd, Ste 201-237, Sherman Oaks, CA, USA. For privacy questions, write to support@arbitrion.com. This Privacy Policy describes how we handle personal information when you visit our site, create an account, take a free trial, subscribe, or otherwise interact with our services.

2. Information we collect

We collect information in three ways: information you give us, information collected automatically, and information from third parties.

Information you give us. Account details (name or display name, email address, password hash), profile preferences, support tickets and any attachments, content you submit (such as invoices uploaded to claim a lead), affiliate program details, and survey or feedback responses.

Information collected automatically. Device and connection data (IP address, user agent, browser, OS, locale, time zone), pages and features used, search queries, lead views and unlocks, click and conversion events, performance and error telemetry, and approximate location derived from IP.

Information from third parties. Payment metadata and subscription status from Stripe (we do not receive or store full card numbers); sign-in details from OAuth providers you authorise (such as Google); aggregate analytics from Google and similar providers; product/Keepa lookup results requested on your behalf.

3. How we use information

We use personal information to: provide, secure and improve the Service; create and manage your account; process payments, trials and refunds; deliver leads, search results, Keepa data and other features; communicate with you about your account, billing, security and product updates; provide customer support; detect, prevent and respond to fraud, abuse, security incidents and violations of our Terms; comply with legal obligations; and, where you have consented or where permitted by law, send marketing communications you can opt out of at any time.

4. Legal bases (EEA / UK)

If you are in the European Economic Area or the United Kingdom, we process personal information on the following legal bases: performance of a contract (to deliver the Service you have signed up for); our legitimate interests (to secure the Service, prevent fraud, improve our product and run our business); compliance with legal obligations (tax, accounting, responding to lawful requests); and your consent (for example for non-essential cookies or marketing emails). You can withdraw consent at any time without affecting the lawfulness of prior processing.

5. How we share information

We do not sell personal information. We share personal information only with service providers and partners that help us run the Service, with authorities when legally required, and in connection with a corporate transaction. Specifically, we may share information with: (a) infrastructure and database providers; (b) Stripe for payment processing; (c) email delivery providers; (d) analytics and error-monitoring providers; (e) customer-support providers; (f) law enforcement and regulators where we have a good-faith belief that disclosure is required by law or necessary to protect rights, safety or property; and (g) a buyer or successor entity in connection with a merger, acquisition, financing or sale of assets, with appropriate confidentiality protections.

6. Service providers and sub-processors

Current key processors include, among others: Supabase (managed Postgres, authentication and file storage), Cloudflare (hosting, edge functions and DNS), Stripe (payment processing), Google (analytics and ads measurement), Keepa (Amazon product data), and email-delivery providers. Each is contractually required to process personal information only on our instructions and to apply appropriate security measures. The list may change as we evolve the Service.

7. Cookies and similar technologies

We use cookies and similar technologies (such as localStorage and pixels) to keep you signed in, remember your preferences, secure the Service, measure usage, and improve marketing. Strictly necessary cookies are required for the Service to function. Analytics and marketing cookies are used subject to applicable consent requirements. You can control cookies through your browser settings and opt out of certain analytics or advertising cookies through the relevant provider tools.

8. International data transfers

We are based in the United States and our service providers may process personal information in the United States, the European Union and other countries. Where personal information is transferred from the EEA, UK or Switzerland to a country that has not received an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or other lawful transfer mechanisms.

9. Data retention

We retain personal information for as long as your account is active and for a limited period thereafter, as needed to provide the Service, comply with legal, tax and accounting obligations, resolve disputes, prevent fraud and enforce our agreements. When you delete your account, we will delete or anonymise personal information that we no longer need, except where retention is required by law (for example invoices retained for tax purposes).

10. Security

We use technical and organisational measures designed to protect personal information, including encryption in transit (TLS), encryption at rest where supported by our providers, role-based access controls, row-level security on our databases, audit logging, and regular review of access. No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we work hard to protect your information and notify users and authorities of incidents where required by law.

11. Your rights (GDPR / CCPA)

Depending on where you live, you may have the right to access, correct, port, delete or restrict the use of your personal information, to object to certain processing, and to withdraw consent. California residents have additional rights under the CCPA/CPRA, including the right to know what categories of personal information we collect, the categories of sources, the business purpose of collection, the categories of third parties with whom we share it, and the right to request deletion, correction and to opt out of "sharing" for cross-context behavioural advertising. We do not sell personal information for money. To exercise your rights, email support@arbitrion.com from the address on file or use in-app controls. We will verify your request and respond within the time required by applicable law. You may also lodge a complaint with your local data protection authority.

12. Children's privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. For material changes, we will take reasonable steps to notify you, for example via email or in-app notice.

14. Contact

For any privacy question or to exercise your rights, contact us at support@arbitrion.com or by mail to Arbitrion, 15442 Ventura Blvd, Ste 201-237, Sherman Oaks, CA, USA.