Legal

Privacy Policy

Last updated 12 August 2026

1. Who we are

Arches is operated by Integer Innovative Solutions. This policy explains what we collect and why.

2. What we collect

  • Account data: name, email address, sign-in provider, account creation date.
  • Project data: prompts, briefs, uploaded sketches and photos, generated outputs, sustainability assessments and version history.
  • Billing data: plan, billing status, renewal date, invoice references and payment status.
  • Usage data: monthly generation counters used to enforce plan limits.

3. Payment data

Card details are collected and processed entirely by Moyasar, our payment provider. Arches never receives or stores card numbers, CVV codes or cardholder banking data — only the invoice reference, amount and payment status.

4. How we use data

To operate generation engines, store your project library, enforce plan quotas, process subscriptions, provide support and improve reliability. We do not sell personal data.

5. AI processing

Prompts and uploaded images are sent to AI model providers to produce outputs. Only the content needed to fulfil a generation request is transmitted.

6. Storage and security

Data is stored in managed cloud infrastructure with encryption in transit. Access rules restrict every project, payment and usage record to its owning account.

7. Retention

Project data is retained while your account is active. Deleting a project removes it from your library; billing records are retained as required by Saudi accounting regulations.

8. Your rights

You may request access, correction, export or deletion of your data by writing to privacy@integer.sa.

9. Cookies

Arches uses essential browser storage for authentication sessions and local usage counters. No advertising trackers are used.