ArcGabriel — Privacy Policy
Version 1.0 — August 2026
ArcGabriel is operated by Philip Martin ("we"), who is the data controller for
personal data processed in running the Service. We comply with UK GDPR and the
Data Protection Act 2018. This policy says what we collect, why, and your
rights — briefly and honestly.
What we collect and why
| Data | Why (lawful basis) |
|---|---|
| Account details — name, email, business name | To provide the Service (contract) |
| Signed agreement record — name, IP, timestamp, document hash | To evidence the contract (contract; legal obligation) |
| Payment records | Processed by Stripe; we hold no card numbers (contract; legal obligation) |
| Files and information you upload | To do the marketing work you subscribe for (contract) |
| Connected account tokens (e.g. Meta) | To publish on your instruction (contract). Revocable by you at any time |
| Activity records — sign-ins, actions, IP addresses | Security and audit (legitimate interests) |
| Emails we send you about the Service | Operating the Service (contract). Marketing email only with consent, withdrawable any time |
We do not sell personal data, and we do not use your data to train anything
for anyone else.
Where it lives and who touches it
Data is stored in the UK/EU. Processors we use: Stripe (payments), our hosting
provider, our email delivery provider, and AI model providers used to generate
your content (sent only what is needed to do your work, under contracts that
forbid other use). Social platforms you connect receive what publishing
requires. That's the list; if it changes, this policy changes and you're told.
How long we keep it
While your subscription runs, plus 90 days after cancellation so you can
return or export — then erased, except invoices and contract records kept for
the legally required period. Files you delete yourself are held, marked for
deletion, for 90 days (accident protection, as set out in the Terms) and then
permanently erased; you can request immediate erasure instead and we will
honour it.
Your rights
Access, rectification, erasure, restriction, portability, and objection — ask
at pm@philipmartin.me and we respond within one month. You also have the right
to complain to the Information Commissioner's Office (ico.org.uk). We will
notify you and the ICO of any breach where the law requires it.
Cookies
The Service uses only strictly necessary cookies (your sign-in session and
onboarding state). No advertising or cross-site tracking cookies.