Privacy Policy

1. Who we are and scope

Archbro (“Archbro,” “we,” “us,” or “our”) is an independent product. This Privacy Policy explains how we collect, use, share and protect personal information when you use Archbro, including the website at archbro.app and its subdomains, the Archbro web application, its WebMCP Site Tools, APIs and related services (the “Services”). It should be read with our Terms of Service.

For the purposes of data protection laws, Archbro is the controller of the personal information described in this policy, except where we process information on behalf of another user, such as a project owner who shares a project with you.

2. Information we collect

Information you provide

• Account information: your name or display name, email address and password (passwords are handled by our authentication provider and are never stored by us in readable form). If you sign in with Google or GitHub, we receive basic profile information from that provider, such as your name, email address and account identifier.
• Project content: what you or your agents add to Archbro, such as project names and goals, prompts and questions, architecture maps and decisions, tasks, notes, comments, review decisions, and the AI-generated Outputs produced for you.
• Account setup answers: when you first sign in, we ask a few optional questions to set up your account: your role, what you want to do first with Archbro, and how you heard about Archbro. You can skip these questions.
• Agreement records: which version of our Terms of Service and this Privacy Policy you agreed to, when, and how (for example, the sign-up checkbox).
• Preferences: settings such as your default project lens, language, theme and notification preferences.
• Sharing information: email addresses of people you invite to a project and the roles you give them.
• Communications: messages, feedback and bug reports you send us, and your email address and the content of your message when you contact us.

Information from services you connect

• Connectors: if you connect GitHub, Slack, Google Drive, Microsoft Teams or another supported service, we receive the access tokens needed to act on your behalf and the data you direct Archbro to read, such as repository files, issues and pull requests, channel messages or documents, within the permissions you grant. Connected-repository content may be analyzed to build and update your project’s architecture.
• Your Agent: if you use a coding or AI agent with Archbro’s WebMCP Site Tools, we receive the requests your agent makes and the information it submits, such as tasks, observations and architecture recommendations.

Information collected automatically

• Technical and log data: IP address, browser and device type, operating system, request timestamps, pages and features used, and error and diagnostic information. We use this to operate, secure and troubleshoot the Services.
• Browser storage: see Cookies and browser storage below.

We do not intentionally collect sensitive categories of personal information, such as health or financial account information. Please do not include such information in your project content unless it is necessary.

3. How we use information

We use personal information to:

• create and manage your account, authenticate you and verify your email address;
• provide the Services, including storing your projects, generating AI Outputs, running Connectors and Site Tools you enable, and enabling sharing and collaboration;
• personalize the Services based on your account setup answers, preferences and use of Archbro, for example by tailoring onboarding, in-product guidance, feature suggestions and default settings, which may involve automated processing that does not produce legal or similarly significant effects for you;
• keep the Services secure and reliable, including preventing fraud, abuse and violations of our Terms, and debugging problems;
• communicate with you about the Services, such as service and security notices, changes to our terms, and replies to your requests;
• understand, at an aggregate level, how features are used, who uses Archbro and how people find it, so we can improve Archbro and plan its development, without using your project content to train AI models; and
• comply with legal obligations and enforce our rights.

Where the law requires a legal basis, we rely on performing our contract with you (providing the Services), our legitimate interests (keeping the Services secure and improving them), your consent (where we ask for it, which you may withdraw), and compliance with legal obligations.

4. AI and model training

Archbro uses Google’s Gemini models through Google Cloud Vertex AI to analyze projects and generate Outputs. To do this, the relevant parts of your project content are sent to Google Cloud for processing.

• We do not use your project content, prompts, connected data or Outputs to train AI models.
• Google processes this content as our service provider under Google Cloud’s terms, which do not allow Google to use it to train its models without our permission. We have not given that permission.
• If we ever want to use your content for model training, we will ask for your explicit permission first.

5. How we share information

We do not sell your personal information, and we do not share it for targeted advertising. Your project data is used only to provide the Services to you and the people you choose to share with. We share personal information only as follows:

• People you share with. Collaborators you invite can see the shared project, and project members can see each other’s names and email addresses within that project.
• Service providers. We use vendors who process information on our behalf under contractual obligations, including:
  • Google Cloud, for hosting, storage and databases (our servers run on Google Cloud virtual machines) and for AI processing through Vertex AI;
  • Google Firebase Authentication, for sign-in, email verification and password-reset emails; and
  • Cloudflare, for secure network delivery and protection of the Services.
• Services you connect. When you use a Connector or sign in with a third-party provider, information is exchanged with that service as needed to carry out your request. When Your Agent reads information through Archbro, that information goes to your agent’s provider under its own terms and privacy policy.
• Legal and safety reasons. We may disclose information if we believe in good faith it is required by law or legal process, or necessary to protect the rights, property or safety of our users, the public or Archbro.
• Business transfers. If Archbro is involved in a merger, acquisition, financing, reorganization or sale of assets, information may be transferred as part of that transaction, subject to this policy.
• With your consent or at your direction.

6. Cookies and browser storage

Archbro uses your browser’s local storage and similar technologies that are strictly necessary to run the Services, such as keeping you signed in, remembering your preferences, and enabling sign-in through our authentication provider. We do not use advertising cookies or third-party analytics trackers. If you block or clear this storage, parts of the Services may not work, and you may need to sign in again.

7. Security

We use administrative, technical and physical safeguards designed to protect personal information. For example, traffic to the Services is encrypted in transit, access to production systems is restricted, and access and refresh tokens for connected services are kept on our servers, encrypted at rest, and never sent to your browser or Your Agent. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a security incident affecting your personal information, we will notify you as required by law.

8. Retention and deletion

We keep personal information for as long as your account is active or as needed to provide the Services. You can delete individual projects in Archbro, and you can disconnect Connectors at any time.

To delete your account and its associated data, email hello@magicdala.com from the address on your account. We will delete or de-identify your personal information within a reasonable period, generally within 30 days, except where we need to keep certain information to comply with law, resolve disputes, prevent abuse or enforce our agreements. Residual copies may remain in backups for a limited time until they are overwritten. Projects you shared may remain available to collaborators who own them.

9. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy of it;
• correct inaccurate information;
• delete your personal information;
• object to or restrict certain processing, or withdraw consent where we rely on it; and
• receive your information in a portable format.

You can update your profile and preferences in Archbro at any time. Answering the account setup questions is optional, and you can ask us to correct or delete your answers. To exercise any other right, email hello@magicdala.com. We may need to verify your identity before acting on your request. You may use an authorized agent where the law allows. We will not discriminate against you for exercising your privacy rights. If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority.

10. International users

Archbro is operated from the United States, and our service providers may process information in the United States and other countries. Data protection laws there may differ from those where you live. Where required, we use appropriate safeguards, such as standard contractual clauses, for international transfers of personal information.

11. Children

The Services are intended only for people who are 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, contact us at hello@magicdala.com and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time, for example when we introduce paid plans or new features. We will update the date at the top of this page, and if a change is material, we will notify you in advance through the Services or by email.

13. Contact us

For questions about this Privacy Policy or our privacy practices, or to exercise your rights, contact us at hello@magicdala.com.