Legal
Privacy Policy
Last updated 12 August 2026
1. Who we are
Arches is operated by Integer Innovative Solutions. This policy explains what we collect and why.
2. What we collect
- Account data: name, email address, sign-in provider, account creation date.
- Project data: prompts, briefs, uploaded sketches and photos, generated outputs, sustainability assessments and version history.
- Billing data: plan, billing status, renewal date, invoice references and payment status.
- Usage data: monthly generation counters used to enforce plan limits.
3. Payment data
Card details are collected and processed entirely by Moyasar, our payment provider. Arches never receives or stores card numbers, CVV codes or cardholder banking data — only the invoice reference, amount and payment status.
4. How we use data
To operate generation engines, store your project library, enforce plan quotas, process subscriptions, provide support and improve reliability. We do not sell personal data.
5. AI processing
Prompts and uploaded images are sent to AI model providers to produce outputs. Only the content needed to fulfil a generation request is transmitted.
6. Storage and security
Data is stored in managed cloud infrastructure with encryption in transit. Access rules restrict every project, payment and usage record to its owning account.
7. Retention
Project data is retained while your account is active. Deleting a project removes it from your library; billing records are retained as required by Saudi accounting regulations.
8. Your rights
You may request access, correction, export or deletion of your data by writing to privacy@integer.sa.
9. Cookies
Arches uses essential browser storage for authentication sessions and local usage counters. No advertising trackers are used.