ARC Lab Privacy Notice

ARC Lab is operated by Filament Media & Design Agency Pte Ltd, a Singapore company operating ARC Lab (“we”), who is responsible for the personal information described here. This notice explains what we collect, why, who it is shared with and the choices you have. It sits beside our Terms. ARC Lab is for adults and is not directed to children.

What we collect

• Account: your name, email address, sign-in method and workspace membership.
• Your content: questionnaire answers, profiles, references and saved items, story notes, scripts and revisions, and — where you use those features — recordings, uploads and renders.
• Service records: usage and generation accounting, action and security logs, and the record of when you accepted these documents.
• Connections: if you connect a social account, the access it grants and the posts and numbers it returns.
• Product analytics: described below.

How we use it

To provide ARC Lab and its AI features to you, keep it secure, support you, enforce our Terms, and understand and improve the service. People who operate and develop ARC Lab can access submitted content when authorized, for these purposes. ARC Lab does not train its own AI models on your content. We do not sell your personal information or use it for targeted advertising.

Who processes it

Service providers process data on our behalf to run ARC Lab: hosting (Vercel), the database (Neon), sign-in (Google, if you use it) and sign-in email (Resend). When you use AI writing, profile and reference features, the relevant content goes to the configured AI services, including Anthropic (Claude) and the Cheaper Inference gateway used to serve configured models. Reference processing uses our ReelReel service, which may use OpenAI for transcription. Where those features are switched on, voice and transcription go to ElevenLabs, and generated video and images and video analysis use Google (Gemini), directly or through the configured gateway. Files are kept in our S3-compatible object storage, including Cloudflare R2. Embedded videos connect to their hosting platforms when they load, and the social networks you connect receive what you choose to post. Each provider handles the data under its own terms; for AI providers, whether and how long they keep it is governed by their API terms, not by us.

Product analytics

Product analytics uses PostHog. Events are sent from our server only: there is no PostHog script in your browser, no autocapture and no session recording. Events are a fixed list — such as screens reached, saves, and generation outcomes and timings — linked to pseudonymous account and workspace identifiers. They never contain your scripts, answers, search text or anything you type. Your account name and email address are added to your analytics profile (never to individual events).

Creating an account requires acceptance of our Terms and the data collection described here, including identified product analytics. Analytics starts on for new accounts after acceptance. For existing accounts without a refusal, analytics is enabled on the basis of the operator-authorized program agreement; this is not a recorded online acceptance. Explicit refusals remain off. You can turn it off at any time in Settings → Product analytics. Global Privacy Control and Do Not Track always keep it off.

Cookies and browser storage

We use first-party cookies and browser storage that ARC Lab needs: to keep you signed in and protect sign-in, to remember your analytics choice and, when analytics is on, a short analytics session, to carry the Terms click through Google sign-in, and to remember display preferences. We do not use advertising cookies. Embedded videos may set their own cookies when you load them.

Sharing and public links

Members of your workspace see what their role allows. A share link you create makes what it shares visible to anyone who has the link, until it expires or you revoke it. We share data with the service providers above, when the law requires it, to protect people or the service, or as part of a transfer of the service.

Keeping and deleting data

We keep your account and content while your account exists. You can delete scripts and recordings in the app. To delete your account, or to ask for a copy or a correction, email help@arc-lab.io from your account’s address; we will confirm the request is yours and then act on it. Some records may be kept where we need them for security, to prevent abuse, to meet legal obligations, or in backups until they are replaced. Analytics data already sent to PostHog is deleted there on request.

Security

We use encrypted connections, workspace isolation, access controls and logging to protect your data. No system is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires.

Your rights

Depending on where you live, including in several US states, you may have the right to know, access, correct, delete or get a copy of your personal information, and to opt out of certain processing. Ask at help@arc-lab.io. We will not treat you differently for asking.

Changes

If we change this notice we will post the new version here with a new version date, and tell you in ARC Lab if the change is material.

Contact

Filament Media & Design Agency Pte Ltd, a Singapore company operating ARC Lab: help@arc-lab.io