Section 1. Scope and Core Commitment
Arcix develops professional workflow automation plugins and productivity extensions for SketchUp, CAD, and architectural drafting environments. We believe in maximum transparency, robust data protection, and minimal data collection.
This Privacy Policy explains how personal data is collected, stored, processed, and safeguarded when you visit our website (arcix.org / associated domains), purchase subscription licenses, or utilize Arcix plugins.
Section 2. Merchant of Record & Financial Information Handling
All commercial software purchases, subscriptions, renewal billings, and digital tax compliance (VAT, GST, Sales Tax) are conducted through our authorized Merchant of Record, Lemon Squeezy, LLC.
- Payment Processing Security: When you purchase an Arcix license, your financial information (including credit/debit card numbers, expiration dates, security codes, PayPal credentials, or bank transfers) is entered directly into encrypted checkout fields hosted and secured by Lemon Squeezy.
- Zero Credit Card Storage by Arcix: Arcix does not host, capture, inspect, or retain your raw payment card data on our servers. All transactions comply strictly with Payment Card Industry Data Security Standards (PCI-DSS Level 1).
- Order Data Shared with Arcix: Upon successful checkout, Lemon Squeezy transmits a secure confirmation webhook to Arcix containing non-sensitive order metadata: your registered customer email address, transaction timestamp, purchased subscription plan (Standard, Pro, or Team), and generated License Key.
- Lemon Squeezy Privacy Policy: For details regarding Lemon Squeezy’s data protection standards, please consult the Lemon Squeezy Privacy Policy.
Section 3. What Information We Collect and Where It Is Stored
We adhere strictly to the principle of data minimization. We collect only what is strictly required to provision licenses and verify authorized software usage:
-
Account & License Verification Data:
- Customer email address associated with your order.
- Assigned License Key and subscription validity timestamps.
- Plan tier attributes (e.g., Standard, Pro, Team seat quotas).
- Storage Location: Hosted on secured cloud database infrastructure (AWS and Cloudflare edge servers) equipped with end-to-end TLS 1.3 encryption in transit and AES-256 encryption at rest.
-
License Activation & Anti-Fraud Telemetry:
- When you activate an Arcix plugin, our verification endpoint logs an activation event to ensure compliance with device/seat limits: hashed device hardware ID (device fingerprint), operating system platform, SketchUp host version, IP address, and request timestamp.
- Storage Location: Encrypted activation logs are retained on our access-restricted cloud servers for a maximum of 180 calendar days for license auditing and fraud prevention.
-
Architectural Project & 3D Model Privacy (Zero-Access Guarantee):
100% LOCAL PROCESSING — ZERO MODEL UPLOAD: All 3D SketchUp models, 2D floor plans, architectural sections, CAD layers, DWG/DXF files, LayOut documents, and technical drafting geometries created with Arcix tools remain exclusively stored on your local computer or private studio local network. Arcix plugins execute automation algorithms locally on your machine and NEVER transmit, upload, inspect, or store your proprietary architectural designs or customer client project data to external cloud servers.
Section 4. Cookies, Local Storage, and Web Analytics
We believe in an uncluttered, tracker-free web experience:
-
Essential Local Storage: We use browser
localStoragesolely for functional interface preferences (for example, remembering your preferred Dark Mode or Light Mode theme selection). This information never leaves your device. - Zero Third-Party Advertising Trackers: We do not use third-party advertising cookies, cross-site profiling trackers, Google AdSense, or social media advertising pixels (such as Meta/Facebook Pixel). We do not sell, rent, monetize, or trade your personal information to data brokers or ad networks under any circumstance.
- Server Security & DDoS Telemetry: Our website uses Cloudflare for global Content Delivery Network (CDN) acceleration, SSL/TLS certificate enforcement, and Distributed Denial of Service (DDoS) mitigation. Cloudflare may process transient network request headers (such as IP addresses and User-Agent strings) solely to detect malicious bot traffic and maintain platform availability.
Section 5. Authorized Third-Party Sub-Processors
To deliver our SaaS services reliably, we collaborate with reputable cloud service providers who uphold rigorous global data compliance standards:
| Service Provider | Role & Data Processed | Headquarters / Jurisdiction | Data Protection Standard |
|---|---|---|---|
| Lemon Squeezy, LLC | Merchant of Record: checkout processing, invoicing, billing accounts, sales tax compliance. | United States | PCI-DSS Level 1, SOC 2 compliant, GDPR/CCPA compliant. |
| Cloudflare, Inc. | DNS management, CDN asset caching, SSL encryption, and DDoS defense. | United States / Global Edge | ISO 27001, SOC 2 Type II, GDPR compliant. |
| Google Workspace | Customer support correspondence and ticket communications ([email protected]). | United States | ISO 27001, SOC 3, HIPAA/GDPR compliant. |
Section 6. Data Retention and Deletion
- Active Subscriptions: Account and licensing records are retained for the active duration of your subscription to provide continuous software updates and license validations.
- Audit & Financial Archives: Transaction records and commercial invoice archives are maintained by Lemon Squeezy for the statutory duration required by applicable financial, accounting, and tax regulations.
- Telemetry Log Purging: License activation logs and transient network verification telemetries are automatically expunged after 180 calendar days.
Section 7. Your Legal Data Rights (GDPR & CCPA Compliance)
Depending on your country or state of residence (including the European Economic Area, United Kingdom, and California), you possess specific rights regarding your personal information:
- Right to Access: You may request a copy of the personal information we hold concerning your account.
- Right to Rectification: You may request the correction of any inaccurate or incomplete personal data.
- Right to Erasure (“Right to be Forgotten”): You may request the permanent deletion of your licensing profile and contact records, subject to statutory tax and invoice retention obligations mandated by law.
- Right to Restrict or Object: You may object to or restrict specific processing workflows under certain legal conditions.
- Right to Data Portability: You may request your account data in a structured, machine-readable format.
To exercise any of these rights, please contact us directly at [email protected]. We respond to all verified requests within thirty (30) days without charge.
Section 8. Data Security and Minor Protection
- Technical Security Measures: We employ strict administrative, technical, and physical safeguards including strict API authentication tokens, role-based access controls, HTTPS transport encryption, and routine vulnerability audits.
- Protection of Minors: Arcix software products are intended strictly for professional architects, engineers, design studios, and university students aged 16 or older. We do not knowingly collect personal information from children under 16 years of age.
Section 9. Privacy Inquiries and Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our team through our official channels:
- Provider Entity: Arcix
- Data Protection & Support Email: [email protected]
- Customer Account & Billing Inquiries: Lemon Squeezy Customer Portal
- Merchant of Record Official Site: lemonsqueezy.com
Direct communication channel for privacy and data questions:
[email protected]