Privacy Policy

1. Who we are

Arcvale Cloud is the controller of personal data collected through this website and in connection with our Services. This policy explains what we collect, why, and the rights you have.

2. Data we collect

• Contact and account data – name, email address, company, phone number and billing address.
• Order data – selected products, locations, configuration and billing preferences.
• Payment data – processed by our PCI DSS compliant payment partners; we do not store full card numbers.
• Technical data – IP addresses, server logs and network traffic metadata needed to operate and secure the Services.
• Communications – support tickets, emails and call notes.

3. How we use data

• To provide, maintain and support the Services you order.
• To process payments and prevent fraud.
• To secure our network, including DDoS mitigation and abuse handling.
• To communicate service notices, maintenance windows and account information.
• To comply with legal obligations.

We do not sell your personal data.

4. Legal bases (UK/EU)

Where the UK GDPR or EU GDPR applies, we process data on the basis of contract performance, legitimate interests (such as network security and fraud prevention), legal obligations, and consent where required (for example, optional marketing emails).

5. Sharing

We share data only with service providers that help us operate our business (payment processors, datacenter operators, email and ticketing providers) under written agreements, and with authorities where legally required.

6. International transfers

Data may be processed in the United States and the United Kingdom. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Addendum and Standard Contractual Clauses.

7. Retention

Account and billing records are retained for as long as your account is active and for up to 7 years afterwards to meet tax and accounting obligations. Server logs are retained for up to 90 days unless needed for an ongoing security investigation.

8. Security

We apply technical and organisational measures including encryption in transit, role-based access control, multi-factor authentication for staff and regular security reviews.

9. Your rights

Depending on your location, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know and the right to delete. To exercise any right, email support@apptestexchange.com. You may also complain to your local data protection authority, such as the UK Information Commissioner’s Office.

10. Cookies

This website uses only strictly necessary cookies and local storage required for it to function. We do not use advertising trackers.

11. Changes

We may update this policy from time to time. The “last updated” date above shows when it was last revised.