Privacy Policy

1. Who We Are

Arcvue LLC ("Arcvue," "we," "us") is a Virginia limited liability company that operates the Arcvue financial intelligence platform at arcvue.ai. Our contact email is info@arcvue.ai.

2. What Data We Collect

Account Information. When you sign up for Arcvue, we collect your name, email address, company name, and role. This information is used to create your account and communicate with you about the Service.

Financial Data from Your ERP. When you connect your accounting system (QuickBooks Online, UNANET, Costpoint, Sage Intacct, or other supported ERPs), Arcvue imports financial data including: general ledger transactions, chart of accounts, contract and project records, invoice and revenue data, cost pool and indirect rate information, and employee time records. This data is read-only — Arcvue never writes data back to your ERP. Your financial data is stored in a dedicated database that is physically separate from every other customer's data.

Usage Telemetry. Arcvue collects anonymous, aggregated usage telemetry to improve the platform. This includes: which modules are accessed and how frequently, feature usage counts (e.g., number of exports, syncs, or searches), error events and sync success/failure rates, and session counts. Telemetry never includes actual financial values, account numbers, contract names, employee names, or any content from AI assistant queries. Telemetry collection can be disabled by your account administrator in the Admin Console at any time.

3. How We Use Your Data

We use your data solely to provide and improve the Arcvue platform. Specifically: to render your dashboards, forecasts, financial statements, and reports; to run nightly ERP syncs and keep your data current; to send email alerts (sync failures, monthly reports) when configured; to diagnose and fix technical issues; and to improve the platform based on aggregated, anonymous usage patterns.

We do not sell your data to third parties. We do not use your financial data for advertising. We do not share your data with other Arcvue customers.

4. Data Isolation and Security

Per-Tenant Databases. Each customer's data is stored in a dedicated, physically separate database file on our servers. Your data is never commingled with another customer's data in a shared database. There is no row-level filtering — complete physical isolation.

Encryption. All data is encrypted at rest using AES-256 volume encryption on AWS infrastructure. All data in transit is encrypted using TLS 1.2 or higher.

Access Controls. Only authorized Arcvue personnel have server-level access. Customer users access data only through the authenticated web application. All administrative access is logged.

Authentication. The platform supports multi-factor authentication (MFA), password complexity requirements, account lockout after failed attempts, and role-based access controls (RBAC) that limit what each user can see and do.

5. Third-Party Services

Arcvue uses the following third-party services in the operation of the platform:

Amazon Web Services (AWS). Our servers and databases are hosted on AWS infrastructure in the United States (us-east-1, Northern Virginia). AWS provides the underlying compute, storage, and network infrastructure.

ERP APIs. When you connect your accounting system, Arcvue communicates with that system's API using credentials you authorize. We store OAuth tokens securely on the server and use them to sync data on your behalf. For QuickBooks Online customers, Intuit Inc. acts as a sub-processor — your financial data flows through Intuit's API during each synchronization. For UNANET customers, data is synced via ODBC connection to the UNANET DataLake. Other supported ERPs (Costpoint, Sage Intacct, JAMIS, D365, PROCAS) connect via their respective APIs.

LLM APIs (Optional). If you use the optional AI Assistant feature, your natural language queries are sent to a large language model API (currently Anthropic Claude) to generate responses. The queries are sent alongside relevant context from your data to answer your question. No financial data is retained by the LLM provider after the response is generated. You may opt out of the AI Assistant entirely.

Microsoft Graph API (Optional). If you configure email alerting, Arcvue uses the Microsoft Graph API to send reports and alerts from your authorized email address. We store the OAuth credentials securely and use them solely for sending authorized email communications.

6. Data Retention and Deletion

Your data is retained for the duration of your subscription. Upon termination, we will provide a complete data export (SQLite database file or CSV) within thirty (30) days of your request. After the export period, your dedicated database file and all associated backups are permanently deleted from our systems. We will provide written confirmation of deletion upon request.

7. Your Rights

You may request at any time: a copy of all data we hold about your organization; correction of inaccurate account information; deletion of your data (subject to the termination process above); or information about what data we collect and how it is used. Contact info@arcvue.ai to exercise any of these rights.

8. Cookies and Tracking

The Arcvue web application uses session cookies to maintain your authenticated login session. We do not use advertising cookies, third-party tracking pixels, or analytics scripts that track you across other websites.

9. Children's Privacy

Arcvue is a business-to-business service and is not intended for use by individuals under 18 years of age. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to your account administrator. The effective date at the top of this page reflects the most recent update.

11. Contact

For questions about this Privacy Policy or our data practices, contact us at info@arcvue.ai.