Privacy Policy

Last updated: January 1, 2025

At Arqu Technologies, Inc. ("arqu SLT", "we", "us", or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our surplus lines compliance platform and related services.

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

  • Account Information: Name, email address, company name, phone number, and password when you create an account.
  • Policy Data: Insurance policy documents you upload, including policyholder information, premium amounts, coverage details, and effective dates.
  • Payment Information: Billing address and payment method details (processed securely through our payment processor).
  • Communications: Information in messages you send to us, including support requests and feedback.

1.2 Information Collected Automatically

When you access or use our services, we automatically collect:

  • Usage Data: Pages visited, features used, actions taken, time spent, and interaction patterns.
  • Device Information: IP address, browser type, operating system, device identifiers, and screen resolution.
  • Log Data: Server logs including access times, error reports, and referring URLs.
  • Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to collect information and provide our services.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services, including policy data extraction, tax calculation, and document generation.
  • Process transactions and send related information, including confirmations and invoices.
  • Send technical notices, updates, security alerts, and administrative messages.
  • Respond to your comments, questions, and customer service requests.
  • Monitor and analyze trends, usage, and activities to improve user experience.
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities.
  • Personalize and improve our services based on your preferences and usage patterns.
  • Comply with legal obligations and enforce our terms of service.

3. Data Processing and AI

Our services use artificial intelligence and machine learning to extract data from policy documents and perform tax calculations. Important information about this processing:

  • Your Data Is Not Used for Training: We do not use your policy data or any personally identifiable information to train our AI models. Our models are trained exclusively on synthetic data and publicly available information.
  • Human Review: Our system may flag certain extractions for human review to ensure accuracy. This review is conducted by authorized personnel bound by confidentiality obligations.
  • Data Isolation: Your data is logically isolated from other customers' data and is only accessible to your authorized users.

4. Information Sharing

We do not sell, trade, or rent your personal information. We may share information in the following circumstances:

  • Service Providers: With vendors, consultants, and other service providers who need access to perform services on our behalf (e.g., cloud hosting, payment processing, analytics).
  • Legal Requirements: When required by law, subpoena, or other legal process, or to protect the rights, property, and safety of arqu SLT, our users, or the public.
  • Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as a business asset.
  • With Your Consent: We may share information with third parties when you give us explicit consent to do so.

5. Data Security

We implement robust security measures to protect your information:

  • Encryption: All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.3.
  • Access Controls: Strict access controls and authentication mechanisms limit access to authorized personnel only.
  • Infrastructure: Our services are hosted on SOC 2 Type II compliant cloud infrastructure with regular security audits.
  • Monitoring: Continuous security monitoring and intrusion detection systems protect against unauthorized access.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. We also retain information as necessary to comply with legal obligations, resolve disputes, and enforce agreements.

  • Active Accounts: Policy data and filing records are retained for the duration of your subscription plus 7 years for compliance purposes.
  • Closed Accounts: Upon account closure, personal data is deleted within 30 days, except where retention is required by law.
  • Backup Data: Backup copies may persist for up to 90 days after deletion before being fully purged.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

  • Access: Request access to the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Export: Request a copy of your data in a portable format.
  • Opt-Out: Opt out of marketing communications at any time.

To exercise these rights, please contact us at support@arqu.io.

8. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • The right to know what personal information we collect, use, and disclose.
  • The right to request deletion of your personal information.
  • The right to opt-out of the sale of personal information (note: we do not sell personal information).
  • The right to non-discrimination for exercising your privacy rights.

9. International Data Transfers

Our services are hosted in the United States. If you access our services from outside the United States, your information may be transferred to, stored, and processed in the United States. By using our services, you consent to the transfer of information to the United States.

10. Children's Privacy

Our services are not directed to children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Arqu Technologies, Inc.

Email: support@arqu.io