Back to Home

Privacy Policy

Protection and management of your personal data

1. Data Collection

ARCTON collects the following information when you use our service:

  • Profile information (name, email, profile photo)
  • Social media connection data (Facebook, Instagram, LinkedIn, YouTube, TikTok, Threads)
  • Content you publish via our platform
  • Usage and analytics data

2. Social Media Data Usage

When you connect with your social networks, we collect:

Data collected:

  • Name and profile photo
  • Email address
  • Access to pages you manage
  • Publishing permissions

Usage:

  • Secure authentication
  • Content publishing
  • Performance analysis
  • Data synchronization

3. Data Sharing

Privacy commitment

We do not sell, trade, or rent your personal information to third parties. Your data is used solely to provide and improve our services with complete respect for your privacy.

4. Third-Party Data Processors

To provide our services, we share certain data with the following trusted processors:

  • Stripe: Payment processing and subscription management — processes billing and payment card data
  • OpenAI: AI content generation — processes text prompts to generate content (no personal data shared)
  • Google AI (Gemini, Imagen, Veo): AI content generation — processes text and media prompts (no personal data shared)
  • Meta (Facebook, Instagram): Social media publishing — receives content you choose to publish
  • Google (YouTube): Video publishing — receives content you choose to publish
  • TikTok: Content publishing — receives content you choose to publish
  • LinkedIn: Content publishing — receives content you choose to publish
  • Threads (Meta): Content publishing — receives content you choose to publish

All processors are bound by data processing agreements in compliance with GDPR. Data is processed within the EU or in countries with adequate data protection levels.

5. Cookies and Local Storage

ARCTON uses cookies and local storage strictly for essential functionality:

  • Authentication tokens: To keep you logged in securely
  • Language preference: To display the interface in your chosen language
  • Theme preference: To remember your light/dark mode choice

We do not use tracking cookies, advertising cookies, or any third-party analytics cookies. No cookie consent banner is required as we only use strictly necessary cookies as defined by the ePrivacy Directive.

6. Security and Protection

Technical measures

  • Sensitive data encryption
  • Secure SSL/TLS connections
  • Multi-factor authentication

Organizational measures

  • Limited data access
  • Staff training
  • Regular security audits

7. Your GDPR Rights

In accordance with GDPR (Regulation 2016/679), you have the following rights over your personal data:

Right of access (Art. 15)

Request a copy of all personal data we hold about you

Right of rectification (Art. 16)

Correct inaccurate or incomplete personal data

Right to erasure (Art. 17)

Request deletion of your personal data and account

Right to data portability (Art. 20)

Export your data in a machine-readable format (JSON)

Right to restriction (Art. 18)

Request restriction of processing of your personal data

Right to object (Art. 21)

Object to processing based on legitimate interests, including AI analysis

Right to lodge a complaint

You may lodge a complaint with CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr

8. Lawful Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract performance (Art. 6(1)(b)): Account management, social media publishing, content scheduling, analytics
  • Consent (Art. 6(1)(a)): AI-powered content generation, email notifications, push notifications
  • Legitimate interest (Art. 6(1)(f)): Service improvement, security monitoring, fraud prevention
  • Legal obligation (Art. 6(1)(c)): Billing records, tax compliance, legal requests

9. Data Retention

We retain your data for the following periods:

  • Account data: For the duration of your account, deleted within 30 days of account deletion
  • Published posts and analytics: For the duration of your account
  • Drafts: 30 days after last edit, then automatically deleted
  • AI generation history: For the duration of your account
  • Billing records: 10 years (French legal obligation)
  • Server logs: 12 months

10. International Data Transfers

Your data may be processed outside the EU by the following sub-processors. Appropriate safeguards are in place:

  • OpenAI (USA): Standard Contractual Clauses (SCCs) — AI text and image generation
  • Google Cloud / Gemini (USA): EU-US Data Privacy Framework — AI generation and video processing
  • Stripe (USA): EU-US Data Privacy Framework — payment processing
  • Meta (USA): EU-US Data Privacy Framework — Facebook, Instagram, Threads publishing
  • TikTok (Singapore/USA): Standard Contractual Clauses — content publishing
  • Railway (USA): Standard Contractual Clauses — application hosting
  • SMTP2GO (New Zealand): Standard Contractual Clauses — transactional emails

11. Contact and Support

For any questions regarding this privacy policy or to exercise your rights:

Data Protection Officer (DPO)
Email: privacy@arcton.io
Response guaranteed within 72 hours
You may also contact CNIL: Commission Nationale de l'Informatique et des Libertés — www.cnil.fr

12. Modifications to this Policy

This privacy policy may be updated to reflect changes in our practices or for legal and regulatory reasons.

Change notification

We will inform you of any significant changes by email and via our platform.

Last updated : March 1, 2026