Arshem Web Services
Legal & Governance

Privacy Policy

Last updated: October 27, 2026 • Effective date: January 1, 2026

1. Entity Identification & Purpose

This Privacy Policy governs the collection, processing, and protection of information by Arshem Web Services ("we," "us," or "our"), an independent cloud application studio and software product lab accessible at https://arshemws.com.

We build and operate independent cloud software applications, developer tooling, and automated workflows. We are committed to operating our services with uncompromising engineering integrity, user privacy, and transparent data governance across all our products.

2. Scope of Services & Applications

This policy applies to all mobile applications, web interfaces, cloud software platforms, and API endpoints published by Arshem Web Services or hosted under arshemws.com and its subdomains. When you download or use our mobile apps, create an account, connect external service credentials via OAuth, or interact with our applications, this policy governs the handling of your data.

3. Data Collection Scope

We adhere to strict data minimization principles. We collect and process only the minimal information required to fulfill application functionality:

  • Account Information: Name, professional email address, and authentication identifiers provided during registration or sign-in.
  • Operational Telemetry: Anonymized server logs, browser user-agent strings, HTTP request headers, and error diagnostics required to maintain system availability and protect against distributed denial-of-service (DDoS) attacks.
  • Connected OAuth Integrations: Ephemeral access tokens, refresh tokens, and authorized scopes granted by users to connect external services (such as the Google Ads API or GitHub API). We access only the scopes explicitly authorized by you and required for core application operations.

4. Google API Services User Data Policy & Limited Use Disclosure

Arshem Web Services develops cloud applications that integrate with Google APIs to provide automated reporting and account management tools.

Arshem Web Services' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data received from Google APIs is processed solely to perform the customer-facing automation and analytics explicitly requested by the user within our applications.

5. Prohibition on AI Model Training

We strictly affirm that user and OAuth data is never used to train artificial intelligence (AI) models, machine learning algorithms, or foundation models. Neither your account data, application metrics, nor information received from third-party APIs (including Google OAuth and Google Ads APIs) is ever ingested into AI training sets, evaluations, or third-party generative models.

6. Zero Sale or Commercialization of User Data

We maintain an absolute non-commercialization policy regarding user data:

  • We do not sell, rent, or trade your personal data, credentials, or API tokens to third parties, data brokers, or advertisers under any circumstances.
  • We never share or transfer OAuth credentials or advertising account metrics to third-party ad networks or marketing aggregators.
  • Data is disclosed only when strictly mandated by enforceable legal process, subpoena, or to prevent imminent cyber attacks against our infrastructure.

7. Security Safeguards & Encryption Standards

Arshem Web Services enforces defense-in-depth security controls across all application tiers:

  • Encryption at Rest: All database stores, encrypted token vaults, and backups are secured using industry-standard AES-256 (Advanced Encryption Standard with 256-bit keys).
  • Encryption in Transit: All communications between clients, edge proxies, and application servers are encrypted using modern TLS 1.3 (Transport Layer Security) protocols with strong cipher suites.
  • Credential Vaulting: Sensitive third-party API tokens and refresh secrets are stored inside isolated cryptographic vaults and ephemerally decrypted strictly in memory during active sync executions.
  • Access Controls: Studio engineers operate under strict least-privilege access controls with hardware multi-factor authentication (MFA).

8. Account & Data Deletion Instructions

Users retain full control and sovereignty over their stored records. You may request permanent deletion of your account, associated API credentials, and all synchronized telemetry at any time.

To initiate an account and data deletion request:

  1. Send an email to privacy@arshemws.com from the email address associated with your Arshem Web Services application account.
  2. Include "Account Deletion Request" in the subject line.
  3. Upon verified receipt, all personal data, API tokens, and sync records will be permanently purged from our active databases within 30 days, and subsequent backup rotations will overwrite all historical archives.

9. Infrastructure Partners & Sub-Processors

To deliver resilient cloud software, we partner with trusted, SOC-2 compliant cloud infrastructure providers acting strictly as data processors:

  • Cloudflare: Edge routing, DDoS mitigation, and TLS termination.
  • Amazon Web Services (AWS): Compute infrastructure and encrypted object storage.
  • Supabase / PostgreSQL: Managed transactional database services with encryption at rest.

10. Inquiries & Contact Information

For questions, concerns, or requests relating to this Privacy Policy or our security practices, contact us:

Arshem Web Services
Canonical Website: https://arshemws.com
Privacy & Data Requests: privacy@arshemws.com
General Studio Inquiries: contact@arshemws.com