Privacy Policy

1. Information We Collect

We collect information you provide when creating an account (name, email, address, phone), registering an impression kit (serial number, recipient name), submitting impression photos, or placing an order. We also collect standard usage data (IP address, device type, browser) to operate and secure the service.

2. Impression & Order Data

Your impression photos and the data we use to manufacture your appliances are stored securely in encrypted cloud storage. This data is used solely to make your custom-fit products and to provide replacement appliances from the same impressions during the active kit period. We do not share your impression data with any third party without your explicit written consent, except as required by law.

3. How We Use Your Information

We use your information to: process and fulfill your orders; communicate with you about your orders and kit status; send transactional emails (order confirmations, shipping notifications, approval notices); send expiry reminders for your impression kit; respond to your support requests.

We do not sell your personal information or use it for advertising purposes.

4. Data Sharing

We share limited data with service providers who help us operate the business: Supabase (database and file storage), Stripe (payment processing), Shippo (shipping label generation, which requires your shipping address), and Postmark (transactional email delivery). These providers process your data only as necessary to provide their services and are bound by their own privacy policies.

5. Data Retention

Impression photos and related order data are retained for a minimum of three (3) years from the date we receive your impressions, to support reorders within your kit's active period. After your kit expires and you have not placed an order in 12 months, we may purge impression photo data. Account information is retained for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.

6. Security

We use industry-standard encryption (TLS in transit, AES-256 at rest) for all stored data. Access to customer impression data is restricted to authorized lab staff only. We conduct regular security reviews of our infrastructure.

7. Your Rights

You have the right to access, correct, or delete your personal information at any time. To exercise these rights, log in to your portal or contact us at hello@archcustomslab.com.

8. Contact

Questions about this policy? Email us at hello@archcustomslab.com.