Privacy Policy

Last updated: October 2, 2026

Arcane Intelligent Systems ("we," "us," or "our") operates software products and services available through our website and related applications. This Privacy Policy explains how we collect, use, and protect information when you use our services.

Information We May Collect

Depending on how you interact with our services, we may collect the following types of information:

How We Use Your Information

We use the information we collect to:

Payment Processing

We use third-party payment processors to handle payment transactions. These providers have their own privacy policies governing how they handle your payment information. We do not necessarily store your full payment card details on our own systems.

Cookies and Analytics

Our services may use cookies or similar technologies to maintain session information, remember preferences, and understand how our services are used. We aim to keep the use of tracking technologies minimal and relevant to service functionality. You can manage cookie preferences through your browser settings.

Tracy does not include third-party tracking pixels, advertising scripts, or cross-site identifiers. Our servers maintain operational logs (such as error rates, response latency, and usage counts) to ensure service reliability. These logs do not contain the content of your queries or webpage data.

Pages under /tracy on this website fire anonymous funnel beacons so we can understand how visitors discover and purchase Tracy. Each browser is assigned a random session identifier stored locally for thirty days; we record the page you visited, the referring site, any campaign parameters in the URL (such as utm_source), and a two-letter country code derived from your IP address. We never store the IP itself, do not fingerprint your device, and do not share this data with third parties. The session identifier resets when you clear your browser’s site data.

Operational Usage Data

Tracy sends daily counts of successful questions, failures by broad category, webpage and PDF use, and requests for detailed answers, together with the time of the first successful question. These records are linked to a random installation identifier and can be linked to your email if you provide one. They are not anonymous. We use them to diagnose failures and measure activation and service reliability.

For BYOK and Pro requests, we also record the provider, model, operation type, request time, response status, timing measurements, and token or speech-character counts. Where available, counts distinguish cached, cache-write and reasoning tokens. We use these records to diagnose performance and estimate provider costs from published prices. Estimates are not your provider invoice and do not reveal activity outside Tracy. Request records use the same installation identifier; Pro requests may also be associated with your license. API keys are not included in these accounting records.

These operational records contain no question text, answers, page content, screenshots, or browsing history. Content needed to answer a question is processed by the selected AI service; feedback you choose to send is handled separately as described below.

Install Identity and Your Email

When the Tracy extension is installed it generates a random identifier for that installation. It is not derived from you, your device, or your browsing — it is a random value, it grants access to nothing, and on its own it tells us only that some installation exists. This is separate from, and longer-lived than, the thirty-day website session identifier described above.

The extension sends this identifier to our server at most once every twelve hours along with the extension version and which mode you are using (free trial, Tracy Pro, or your own API key). We use it to see how many installations are active, to catch a faulty release before it affects more people, and to understand when someone stops using Tracy. It is also included when you remove the extension, so that if you tell us why on the page that opens, we can connect your comment to the version and mode you were actually running.

The install check also records a country code supplied by Cloudflare. This check does not include your questions, the pages you read, their addresses, or your browsing history. We do not collect browsing history, device fingerprints, or keystrokes.

Your email address. During the guided tour, Tracy introduces an optional email field in its settings panel so we can reply to your feedback. You can continue without providing an address. Skipping the tour suppresses this automatic introduction; the email field remains available in settings. An email isrequired when you set up Tracy with your own API key, because that is the only way we can reach you about your setup or answer you if you write in. You can also leave an address when sending feedback, so that we can reply to it. We use your address to contact you about your setup and to reply to you — nothing else.

Marketing is separate. Tracy will only email you about product news if you tick the clearly labelled box asking for it. That box is unticked by default, declining it does not restrict your use of Tracy in any way, and you can withdraw it at any time by replying to any message or writing to support@arcsys.one.

Voice Feedback (Opt-In)

When you choose to record and send voice feedback, Tracy uploads the recording, a speech-recognition transcript, and a screenshot of the visible viewport to our Cloudflare service. Context includes the extension version, mode, webpage host, interface used, timestamp, installation identifier, and any reply email and license key supplied. The license key is hashed before storage in the feedback record.

Audio is forwarded to OpenAI for transcription. Recordings, transcripts, screenshots, and context are stored in Cloudflare R2 and D1 so the developer can review your feedback and investigate problems. This recording feature runs only when you choose to use it.

Feedback is retained until you request deletion. To delete a submission, write to support@arcsys.one with its approximate date. Sending feedback is optional.

Data Retention

We retain your information for as long as reasonably necessary to provide our services, fulfill the purposes described in this policy, and comply with legal requirements. When information is no longer needed, we take reasonable steps to delete or de-identify it.

Except for feedback you choose to send, we do not store the webpage content or questions processed by Tracy after delivering a response. AI providers handle data under their own policies linked below. Within 90 days of account closure, your email address is permanently deleted and your account is de-identified. Operational metadata (such as response status, latency, and token counts) associated with your account is retained in de-identified form for service improvement and capacity planning, and can no longer be linked to you.

The installation identifier, and your email address if you gave us one, are retained until you ask us to delete them or until 90 days after you stop using Tracy, whichever comes first. Removing the extension does not by itself delete them, because the record of why someone left is the point — write to support@arcsys.one and we will remove it. Voice-feedback submissions are retained until you request deletion.

Security

We take reasonable measures to protect your information from unauthorized access, loss, or misuse. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Third-Party Services and AI Providers

Tracy uses third-party AI providers to process your queries and generate responses. Depending on your plan, your webpage content and queries may be sent to one or more of the following providers:

Free trial and Tracy Pro: Your queries and webpage content are routed through our servers before being forwarded to an AI provider. We do not log or store the content of your queries or the webpage data beyond what is needed to deliver the response.

Our servers record operational metadata for each request — such as response status codes, response latency, and token usage counts — to detect outages, compute costs, and maintain service quality. This data is associated with your account for quota enforcement, billing, and support purposes. These logs do not contain your query text, webpage content, or conversation history.

We may use third-party messaging services (such as Telegram) for internal operational alerts when service errors are detected. These alerts contain only aggregate or anonymized technical data, not user content.

Bring Your Own Key (BYOK) users: Your queries and webpage content are sent directly from your browser to the AI provider you have configured. Your API key is stored locally on your device and is never transmitted to our servers.

Payments are processed by Paddle (privacy policy), which acts as our merchant of record. Paddle handles all billing, invoicing, and tax compliance. We receive subscription status and transaction confirmations but do not have access to your full payment details.

Our services may also integrate with or link to other third-party services. These third parties have their own privacy practices, and we are not responsible for their policies.

Your Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. These may include the right to:

To exercise any of these rights, please contact us at support@arcsys.one. We will respond to your request within 30 days.

Children's Privacy

Our services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will indicate the updated date at the top of this page. Your continued use of our services after any changes indicates your acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at support@arcsys.one.