1. Overview
This Privacy Policy explains how Ascentum ("Company") processes personal information when you use the Archy service, for what purposes that information is used, and how the Company protects it.
The Company processes personal information in accordance with applicable law and may update this policy when service features or operating policies change.
2. Categories of personal information we process
We may process account information such as email address, name, and authentication provider data to identify users and maintain signed-in sessions.
We may process app language, university, department, course names, professor names, schedules, colors, reminder settings, and other study-environment information that users configure inside the service.
When users import a timetable, we may process the original timetable screenshot and related OCR metadata needed to analyze, debug, and improve timetable recognition.
When you use lecture capture features, we may process audio temporarily as needed for transcription, and we may process transcripts, summaries, formatted notes, prompts, and other study records that users create or save.
We may also generate or collect technical information needed to operate the service, including access logs, browser and device data, cookies, local-storage or session-storage settings, push-notification preferences, crash logs, and usage analytics.
3. Why we process personal information
We process personal information to authenticate users, complete onboarding, personalize language and study settings, manage courses, run timetable OCR and improve its quality, generate transcripts and notes, deliver notifications, measure usage, respond to support requests, provide notices, analyze errors, and improve the service.
4. Retention period
We keep personal information only for as long as needed to fulfill the relevant purpose, unless a longer retention period is required by law.
Account information, course information, transcripts, and notes may remain stored while the user continues to use the service, and will be deleted or isolated when the user requests deletion or account withdrawal unless legal retention obligations apply.
Original timetable screenshots uploaded for OCR may be retained separately for up to six months for debugging and quality-improvement purposes, and are intended to be deleted after that retention window expires.
Audio used for transcription is processed temporarily and is intended to be deleted promptly after processing is complete.
5. Sharing with third parties
We do not provide personal information to outside parties unless the user has agreed in advance, disclosure is required by law, or a valid request is made by an investigative or supervisory authority within the scope permitted by law.
6. Service providers and processing on our behalf
We may use external providers to operate the service. Depending on the feature, this may include Supabase for authentication and database hosting, Vercel for application hosting, Toss Payments for web subscription payments, Sentry for error monitoring, and Amplitude for analytics.
When we use service providers, we manage those relationships in accordance with applicable privacy laws and require providers to handle personal information securely.
7. International data processing
To provide AI-powered features such as transcription, summarization, translation, and OCR, we may use external AI providers including Groq, OpenAI, and Google Gemini. In that process, related information such as audio, transcripts, course metadata, timetable images, and prompts may be processed in countries such as the United States.
Even when data is processed internationally, we aim to limit processing to the minimum scope necessary to provide the requested service.
8. Your rights
Users may request access, correction, deletion, suspension of processing, or withdrawal of consent for their personal information, subject to applicable law.
Information that can be edited directly inside the service may be updated immediately by the user. Other requests can be submitted through the contact channel listed in this policy.
We review and respond to valid requests without undue delay, although some requests may be limited if retention is legally required or if the request would materially affect other users' rights or service stability.
9. Deletion procedures
When personal information is no longer needed, we delete it without undue delay.
Electronic records are deleted using technical measures designed to prevent recovery, and printed or physical records are destroyed by shredding or equivalent methods.
10. Security measures
We make reasonable efforts to protect personal information through access control, protection of authentication data, transport security, monitoring of logs and abnormal activity, error monitoring, and operational controls based on least-privilege principles.
11. Cookies and similar technologies
We may use cookies and similar storage technologies to keep users signed in, remember language preferences, preserve onboarding progress, understand traffic sources, and improve service quality. We may also store limited settings in local storage or session storage.
Users can reject or delete cookies through browser settings. Doing so may limit some features such as persistent sign-in or saved language preferences.
12. Privacy contact point
We operate a contact point for privacy-related questions and rights requests. The current privacy contact point is the Ascentum security team.
13. Complaint and dispute channels
If you need to file a complaint or seek consultation regarding privacy issues, you may also contact the relevant public dispute-resolution or reporting bodies available in your jurisdiction.
14. Changes to this policy
This Privacy Policy may be updated when laws, service features, or operating policies change. When material changes are made, we will provide notice inside the service or through another reasonable communication channel together with the effective date.
15. Contact
If you have questions about personal data processing or would like to exercise your privacy rights, please contact us at the email address below.