Security

1. Our Commitment

ARCTYPE LIMITED, a company registered in Ireland, is built to keep your prompts, files, boxes, and generations safe. This page describes the technical and organizational measures we use to protect the Service and your data.

2. Infrastructure Security

We host the Service on established cloud providers with industry-standard controls:

• Network isolation and firewalled application and database layers
• Isolated per-user environments, with box network access firewalled down to each user
• Access-controlled object storage for your uploads and generations
• Least-privilege access for all internal systems

3. Data Encryption

• In transit: traffic to our APIs is encrypted with TLS; box streams are additionally firewall-scoped to your IP and token-authenticated
• Secrets and credentials are stored in a managed secrets store, never in code

4. Private by Default

Your prompts, attached documents, storyboards, and generations are private unless you explicitly publish them. Only content you choose to publish appears on Explore, and publishing a Google Workspace file applies link-sharing through your own Google account with your consent.

5. Account Security

• Sign-in supports one-time verification codes and passwords — passwords are stored only as salted hashes
• Sessions use short-lived signed tokens, revoked on sign-out
• Cross-app handoffs between arctype apps use single-use, expiring exchange codes
• Connected accounts (such as Google) use OAuth with revocable scopes

6. Payment Security

Credit purchases are processed by Stripe, which is PCI-DSS Level 1 certified. Your full card number never touches our servers — we only store your credit balance and transaction history.

7. AI Provider Handling

To fulfil a generation, your prompt and any attached files are sent to the third-party provider running the selected model (for example Alibaba Cloud or Hugging Face), over encrypted connections. We send only what the request requires, and we never sell your data or use your private content to advertise to you.

8. Data Retention and Deletion

You can delete individual generations and storyboards at any time, and delete your account from the settings page. Deletion removes your content from active systems; backups, where they exist, expire on a rolling schedule.

9. Vulnerability Reporting

We appreciate the security research community. If you believe you have found a vulnerability, please report it to hello@arctype.org and give us a reasonable window to investigate and respond before any public disclosure.

10. Contact

Questions about security at ARCTYPE LIMITED? Reach us at:

Company: ARCTYPE LIMITED (registered in Ireland)
Email: hello@arctype.org
Website: https://arctype.org