Privacy Policy

ArchAICore Labs (“ArchAICore”, “we”, “us”) publishes the website at archaicore.com and provides enterprise software. This policy covers that website and the following services (together, the “Services”):

• Cloud & FinOps Automation
• Financial & Banking Engines
• Conversational AI & Agents

For privacy requests, contact [email protected] or use our support page.

For this website, and for messages you send us directly, ArchAICore Labs is the controller of that correspondence.

For an enterprise Service, the customer is typically the controller of the business data it submits, and ArchAICore Labs processes that data to provide the Service on the customer’s instructions. A data processing agreement is available on request when a Service is under contract. If you obtained a Service through Microsoft Marketplace, Microsoft’s own terms govern Microsoft’s processing. This policy governs processing by ArchAICore Labs.

Depending on how you interact with us, we may process:

• Identity and contact details, such as name, work email, company, and role.
• The contents of email, support tickets, and security reports you send us.
• Technical data our website host, Cloudflare, logs for security and operation, such as IP address, browser type, and the time of a request. Cloudflare may set a strictly necessary security cookie for that purpose. This marketing site does not use advertising cookies, analytics products, or marketing pixels.
• Account data if a Service gives you an account, such as an administrator’s contact details and authentication records.
• Customer content you connect to a Service. That can include cloud resource metadata for Cloud & FinOps Automation; records used for audit, reconciliation, and tax rules in Financial & Banking Engines; and prompts, documents, and workflow context submitted to Conversational AI & Agents.

Please do not send special-category data, payment card numbers, or government identifiers unless a written agreement says the Service is meant to receive them.

We use personal information to:

• Operate, secure, and troubleshoot the website and the Services.
• Reply to enquiries, support requests, and privacy or security reports.
• Perform the product functions a customer configures.
• Keep records a customer’s reviewers, and our own, can follow.
• Meet legal obligations and establish or defend legal claims.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use customer content to advertise to the people inside it. This website does not send visitors to a model provider. We do not allow a model provider to train public models on customer content unless the customer’s agreement expressly permits that use.

If Microsoft gives us a customer’s contact details because of a Microsoft Marketplace transaction, we use those details only to deliver the offer and to answer a question about it. We do not use them to send the customer to a competing marketplace, and we do not use them for marketing unless that customer has agreed.

Where the GDPR or UK GDPR applies, we rely on:

• Contract, where processing is needed to provide a Service you or your organization asked for.
• Legitimate interests, such as securing the website, answering a business enquiry, and keeping ordinary operational records, balanced against your rights.
• Legal obligation, where a law requires us to keep or disclose information.
• Consent, where we ask for it. You may withdraw consent without affecting earlier processing.

We share personal information only with:

• Cloudflare, which hosts this website and can route email for archaicore.com, and any other infrastructure or email provider that runs a contracted Service, only so they can do that work for us.
• A model or cloud provider a Service uses to perform a function you configured, under terms that restrict their use of the data.
• Professional advisers, where confidentiality duties apply.
• Authorities, when the law requires it or when it is necessary to protect rights and safety.
• A buyer of our business, if one succeeds to these obligations.

Enterprise customers may also instruct us to send results to systems they control. That sharing follows the customer’s configuration.

We and our providers may process information in countries other than your own. Where the GDPR requires a transfer tool, we use an approved mechanism such as standard contractual clauses, plus any extra measures the transfer needs.

We keep website correspondence for as long as needed to handle it, and for a limited period afterward in case of a follow-up or a dispute. Hosting security logs are kept for a limited period, ordinarily no longer than twelve months, unless a longer period is required to investigate an incident.

Customer content in a contracted Service is kept for the term of that agreement and then deleted or returned as the agreement specifies. Backups roll off on the provider’s cycle.

The website is served over HTTPS. Access to company systems is limited to people who need it for their work. No method of transmission or storage is perfectly secure. If you believe you have found a vulnerability, write to [email protected] with the subject “Security”.

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to processing of your personal information, to data portability, and to lodge a complaint with a supervisory authority. You may also withdraw consent where processing is based on consent.

Send requests to [email protected]. We may need to verify that the request is yours. If we process the data only for an enterprise customer, we may refer the request to that customer, who decides it.

Residents of some US states may have additional rights to know, delete, and correct personal information, and to appeal a denial. We do not sell personal information or share it for cross-context behavioral advertising. Use the same email to make a request.

Cloud & FinOps Automation, Financial & Banking Engines, and Conversational AI & Agents may classify records, apply rules, or propose an action. They are designed so a customer can review a consequential outcome before relying on it. They are not offered for a decision that produces a legal or similarly significant effect on a person, such as a decision about credit, employment, housing, or insurance, unless a written agreement says otherwise. Even then, the customer remains the decision-maker.

The customer is responsible for having a lawful basis to submit personal information to a Service, and for telling its own personnel and customers what the Service does.

The Services are not directed to children, and we do not knowingly collect personal information from anyone under 16. Contact us if you believe we have, and we will delete it.

We will post changes on this page and update the date above. If a change materially affects a contracted Service, the customer agreement describes how notice is given.

ArchAICore Labs
https://archaicore.com
[email protected]
https://archaicore.com/support