Privacy Policy

Effective date: 20 September 2026. Last updated: 20 September 2026.

1. Introduction

The operator of ArcWall (“we”, “us”) explains in this Policy how we collect, use, store, share, and protect personal information when you use the ArcWall website, workbench, AI canvas, and related features (the “Service”), and how you can exercise your rights.

This Policy is read with the Terms of Service. We process personal information lawfully, fairly, and only as needed, in line with the Personal Information Protection Law of the PRC and other applicable rules.

2. Information we collect

Account data: email, login identifiers, avatar and nickname if you provide them, and session credentials, processed via our identity provider (currently Clerk).

Credits and billing: balances, deductions, grants, redeem-code use, pack identifiers, and job status needed to meter the Service. We do not currently collect bank cards or third-party payment accounts; we will notify you before online checkout launches.

Generation and content: prompts, reference images, canvas configuration, job parameters, storage keys for outputs, and, if you publish, gallery metadata and interactions such as likes.

Device and logs: browser type, approximate access time, request status, and security logs. We store a language cookie (arcwall-language) and a theme preference so the UI can remember your choices.

Correspondence: what you send us by email, WeChat, or other published channels.

3. Purposes

We process the above only as needed to: create and maintain accounts; generate, store, preview, download, and (if you choose) publish; meter credits and produce billing records; protect the Service against abuse; meet legal duties; and, where you consent or law allows, improve the product and support.

We do not sell your personal information.

4. Processors, sharing, and cross-border transfer

We may engage processors under instruction, with security duties and no secondary use, including: identity (Clerk), object storage and delivery, messaging, and model providers for image, video, audio, or text. Prompts and references sent to a model provider are used to complete that job and are also subject to that provider’s terms.

Some processors may be outside the PRC. We use contracts, necessity assessments, and other measures required by law to seek an adequate level of protection.

We may disclose information where required by law, to protect vital interests, or with your separate consent, including to regulators, courts, or professional advisers.

5. Storage and retention

Generated files are stored in object storage with access control and signed URLs. Public gallery items can be viewed by other users.

We keep personal information only as long as needed for the stated purposes. After account deletion we delete or anonymise it, except where law requires retention or we must keep records to resolve disputes or enforce agreements. Billing records may be kept longer where financial rules require.

6. Cookies and similar technologies

We use necessary cookies or local storage for session, language (arcwall-language), and theme. You can block non-essential cookies in the browser; some features may then fail. The identity provider may set its own cookies; see its policy.

7. Your rights

Subject to applicable law, you may access, copy, correct, complete, or delete personal information, restrict or refuse processing, request transfer information, and withdraw consent (without affecting processing that already occurred).

Use in-product account tools or email hulk2019@gmail.com. We will respond within statutory time limits and may need to verify identity. Where law allows us to refuse, we will say so.

8. Children

The Service is not directed at children under 14. If we learn we have collected personal information from a child under 14, we will delete it promptly. Minors 14 or over should use the Service with a guardian.

9. Security

We apply technical and organisational measures matching the risk, including transport encryption, access control, least privilege, and audit logs. No internet service is perfectly secure; keep your credentials safe. If a personal-information incident occurs, we will notify you and the competent authority as required and take remedial steps.

10. Changes

We may update this Policy on this page with a new effective date. For material changes we will try to notify you in-product or by email. Continued use means you are aware of the updated Policy.

11. Contact

Privacy requests: hulk2019@gmail.com. You may also use GitHub, X (Twitter), or WeChat listed on the About page. If you are unsatisfied with our response, you may complain to the competent cyberspace or other regulator.