LEGAL

PRIVACY POLICY

Last updated: December 20, 2025

1. Overview

Arrowplane ("Arrowplane", "we", "us", or "our") is a registered Canadian business operating media and technology services under a single legal entity. This Privacy Policy explains how we collect, use, store, and protect personal information across our websites, services, and platforms.

This policy applies to:

  • arrowplane.ca (the business hub)
  • Division sites (e.g., Arrowplane Media, Arrowplane Dev)
  • The Arrowplane Client Portal
  • Any related tools, applications, or services operated by Arrowplane

2. Information We Collect

2.1 Information You Provide Directly

Depending on how you interact with our services, we may collect:

  • Name
  • Email address
  • Messages or inquiries submitted via contact forms
  • Information voluntarily provided in communications

2.2 Client Portal & Media Data

For clients using the Arrowplane Client Portal, we may collect and store:

  • Portfolio or gallery names
  • Uploaded files (photos, videos, or other media)
  • Embedded file metadata (including EXIF data such as camera model, capture date, and technical settings)

Note: GPS/location data embedded in files may be retained if present in the original upload.

2.3 Automatically Collected Information

We collect limited technical data to operate and improve our services, including:

  • IP addresses
  • Device and browser information
  • Page views and interaction data
  • Error and performance logs

This data is collected via:

  • Google Analytics
  • Vercel Analytics
  • Operational logging tools

3. Authentication & Access

3.1 Current Access Model

  • Client portfolios and galleries are public but unlisted
  • Access is provided via invite-only links
  • Links are intended to be private but may be shared by recipients

Arrowplane is not responsible for unauthorized redistribution, sharing, or disclosure of access links by recipients.

3.2 Future Authentication

In the future, access may include:

  • Email and password accounts
  • Third-party authentication (e.g., Google OAuth)

This policy will be updated accordingly.

4. Data Storage & Retention

4.1 Storage Infrastructure

Data is stored using third-party infrastructure providers, including:

  • Amazon Web Services (AWS S3, Lambda, CloudFront)
  • Supabase (database and storage)
  • Vercel (hosting and analytics)

4.2 Retention Periods

Client-uploaded media is stored in active storage for 365 days. After this period, files may be moved to deep archival storage.

Archived data is not publicly accessible and may require a recovery fee if restoration is requested. Retention periods may vary based on contractual agreements or operational needs.

5. Use of Information

We use collected information to:

  • Provide and operate our services
  • Deliver client portfolios and media
  • Respond to inquiries and communications
  • Monitor performance, security, and reliability
  • Improve our platforms and user experience
  • Meet legal and regulatory obligations

We do not sell personal data.

6. Third-Party Services

Arrowplane relies on third-party service providers to operate our infrastructure. These providers may process data on our behalf under their own privacy policies, including:

  • Amazon Web Services
  • Supabase
  • Vercel
  • Google (analytics services)

We are not responsible for the privacy practices of third-party services not directly controlled by Arrowplane.

7. Payments

Arrowplane does not process payments directly through its platforms. All payments, if applicable, are handled externally through third-party providers.

8. Minors

Arrowplane services are not specifically targeted toward minors. However, we may serve clients of all ages. If you believe personal information of a minor has been collected improperly, please contact us.

9. Data Security

We take reasonable technical and organizational measures to protect data against unauthorized access, loss, misuse, or disclosure. However, no system can be guaranteed to be 100% secure. Use of our services is at your own risk.

10. Legal Disclosure

We may disclose personal information if required to do so by law, court order, or governmental authority, or to protect the rights, property, or safety of Arrowplane or others.

11. Your Rights

Depending on applicable laws, you may have the right to request access to your personal information, request corrections or updates, or request deletion, subject to legal and contractual obligations.

Requests can be made using the contact information below.

12. Contact Information

For privacy-related inquiries, legal notices, or formal correspondence:

Arrowplane
British Columbia, Canada
Email: legal@arrowplane.ca

13. Changes to This Policy

This Privacy Policy may be updated periodically. Continued use of Arrowplane services constitutes acceptance of the updated policy.

Back to legal
Contact