Privacy Policy

• This website has no analytics, no advertising and no tracking cookies.
• In the app we keep what it takes to run your workspace: your account, your organization's people and projects, time entries and time off.
• Usage analytics in the app stay off unless your organization turns them on and you agree. Anything typed is masked, and analytics are not linked to your name or email address.
• We do not sell personal information, and we do not use it for advertising.
• Your organization controls the data in its workspace. You can ask your admin, or us, to see, correct or delete what is held about you.

ArcusSuite is provided by ArcusScale, Charlotte, NC, United States. For this website, and for the account details we need to run ArcusSuite, we decide how information is used.

For the information an organization puts into its workspace (its people, projects, time entries and time off), the organization decides what goes in and who can see it, and we process it on the organization's behalf to provide ArcusSuite. If you use ArcusSuite through your employer, your employer's own privacy notice applies to that information as well.

• Hosting. The site is a set of static files served by Amazon Web Services. Like any web request, a visit sends your IP address, the page requested and your browser's user agent to AWS, which uses them to deliver the page and to protect the service from abuse. We do not keep logs of visits to this site.
• No analytics or advertising. The site loads no analytics, advertising, tracking pixels or embedded content from other companies. Its fonts are served from this site.
• Theme. If you switch between light and dark mode, the choice is saved in your browser's local storage. It never leaves your device.

Links to sign up or sign in take you to the ArcusSuite app, which is covered by the next sections.

• Your account. Your first and last name, your email address and, if you create a workspace, your organization's name. Your password is handled by Amazon Cognito, the sign-in service ArcusSuite uses; we never see or store it. Cognito emails you a code to confirm your address when you sign up, and to reset your password if you ask.
• Workspace information. What you and your organization's admins enter: the people in the workspace and pending invitations (email address, role, the manager each person reports to, and tags), projects (name, status, members, their project role and weekly hours), time entries (description, project, date, start and end time) and time off (dates, hours on each day, the reason given, the decision, who made it, any note on a decline, and balances).
• Preferences. Your light or dark theme, and your answer about usage analytics.
• Sign-in sessions. To keep you signed in, the app stores session tokens in your browser's local storage, and our server keeps a refresh token linked to the browser you signed in with, so that signing out ends the session.
• Sign-up protection. The page where you create your account uses Google reCAPTCHA v3 to tell people from automated sign-ups. Google receives information about your browser and how you use the page for that purpose, under the Google Privacy Policy and Terms of Service.
• Invitations. When an admin invites someone, we send that person an email through Amazon Simple Email Service with the organization's name and a link to join.
• Fonts. The app loads its typefaces from Google Fonts, so your browser requests them from Google, which receives your IP address and user agent in the process.
• Server logs. Our servers record requests and errors so we can operate ArcusSuite, fix problems and protect it from abuse.

ArcusSuite can record how people use the app, so we can fix what breaks and decide what to build next. It is off until an admin turns on "Organization analytics" in the workspace settings, and even then each member is asked and decides for themselves. Nothing is recorded for a member who has not said yes.

When you agree, PostHog records the pages you visit, clicks, errors, which parts of a page get attention, and replays of your sessions. Everything typed into a field is masked before it leaves your browser, and the recordings are not linked to your name or email address.

You can change your answer at any time from "Usage analytics" in the account menu. If an admin turns organization analytics off, recording stops for everyone, and members are asked again if it is turned back on.

• To provide ArcusSuite: sign you in, show your workspace, record time, build reports, and route time off requests to the person each requester reports to.
• To keep accounts and the service secure, and to prevent fraud and abuse.
• To send the emails the service needs, such as invitations.
• To understand and improve ArcusSuite, using usage analytics only where they have been agreed to.
• To meet legal obligations and to enforce our Terms of Service.

We do not sell personal information, we do not share it for advertising, and we do not use it to build advertising profiles.

• People in your organization. Admins can see the people and projects in their workspace, and the hours each person logged on the dashboard. Managers can see the time off requests of the people who report to them. Team leaders can see the hours logged by the people on their projects. Everyone can see their own entries, requests and balance.
• Amazon Web Services hosts ArcusSuite and this website, runs the database, handles sign-in (Amazon Cognito) and sends email (Amazon Simple Email Service).
• Google provides reCAPTCHA on the sign-up page and the fonts used in the app.
• PostHog provides usage analytics, only for members who agreed to them.
• Authorities or others, when the law requires it, or when it is needed to protect the rights, property or safety of our users, the public or us.
• A successor, if ArcusScale or ArcusSuite is merged, acquired or sold. This policy would continue to apply to information collected under it.

• Account and workspace information is kept for as long as the organization's ArcusSuite account is open. When an organization asks us to close its account, we delete its workspace information within 90 days, except for anything we must keep longer by law.
• When a time entry or a tag is deleted in the app, it is removed from the workspace, and projects that are archived keep their history. Copies in our backups are deleted as the backups expire.
• Usage analytics are kept on the retention settings of our PostHog project.
• Server logs are short-lived, on our providers' standard retention.

Information travels between your browser and ArcusSuite over encrypted connections (HTTPS). Passwords are handled by Amazon Cognito and are never stored by us, and what each person can see and change is limited by their role. No system is perfectly secure; if a breach affects your personal information, we will tell you as the law requires.

Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to have it deleted, to object to or limit how it is used, and to withdraw consent you have given. Withdrawing consent does not affect what happened before.

For information in a workspace, your organization's admin can usually help first, since they control that workspace. You can also email info@arcusscale.com. We will verify the request before acting on it, we will not charge for it, and we will not treat you differently for making it. If we cannot act on a request, we will say why, and you can ask us to reconsider by replying.

Residents of California and other US states: we do not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of.

ArcusScale operates from Charlotte, NC, United States, and ArcusSuite runs on Amazon Web Services in the United States. If you use it from elsewhere, your information is processed in the United States and in the other countries where our providers operate, under data protection law that may differ from your own.

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases: performing the contract with your organization or with you, to provide ArcusSuite; our legitimate interests in running, securing and improving the service and this website; your consent, for usage analytics; and legal obligations. Where the law requires it, transfers outside your region rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

ArcusSuite is a tool for the workplace and is not directed at children under 16. We do not knowingly collect information from them. If you believe a child has given us personal information, write to info@arcusscale.com and we will delete it.

When we change this policy, we update the date at the top. If a change materially affects how we use information already collected, we will tell admins in the app or by email before it takes effect.

Write to info@arcusscale.com, call +1 (330) 989-8008, or write to ArcusScale, Charlotte, NC, United States.