1. Data controller

The data controller is Arendt Regulatory & Consulting S.A., 41A, Avenue John F. Kennedy, L-1855 Luxembourg. For any question regarding the protection of your data, you can contact our dedicated point of contact at ARC_AI@arendt.com.

2. Data collected

As part of the use of the platform, we may process:

• Account data : email address and password (stored in encrypted form).
• Content you provide : imported documents, prompts, agents and configurations created.
• Technical usage data : connection logs, timestamps, actions performed and cost/usage indicators.
• Strictly necessary cookies the operation and securing of your session.

3. Purposes and legal bases

• Provide, operate and secure the platform and authenticate users — performance of the contract.
• Process your documents via the artificial intelligence features — performance of the contract.
• Improve service reliability, prevent abuse and ensure traceability — legitimate interest.
• Comply with our legal and regulatory obligations — legal obligation.

4. Hosting and recipients

The data is hosted on the cloud infrastructure Microsoft Azure, within data centers located in the European Union. Your data is not sold. It may be processed by technical subcontractors acting on our behalf (cloud hosting, AI model providers), bound by contractual confidentiality and security commitments.

5. Transfers outside the European Union

No data is transferred to a third country that does not ensure an adequate level of protection without appropriate safeguards (standard contractual clauses or another mechanism provided for by the GDPR).

6. Data retention

Your data is kept for the duration of your relationship with the platform, then for the period necessary to comply with our legal obligations. The content you delete is removed from the platform according to the technical purge timeframes.

7. Your rights

In accordance with the GDPR, you have the right of access, rectification, erasure, restriction, objection and portability of your data. You can exercise these rights by writing to ARC_AI@arendt.com. You also have the right to lodge a complaint with the National Commission for Data Protection (CNPD) in Luxembourg.

8. Cookies

The platform uses cookies strictly necessary for its operation (session management and security). These cookies are not used for advertising purposes. Where applicable, any non-essential cookie would only be placed with your consent.

9. Security

We implement appropriate technical and organizational measures (password encryption, access control, environment isolation) to protect your data against any unauthorized access, loss or alteration.

10. Contact

For any question regarding this policy or the processing of your data: ARC_AI@arendt.com.