Privacy notice

Privacy notice

ARCXCOVAEL LLC - policy revision vf-1.0-20261026. Contact: support@arcxcovael.com. Company mail: ARCXCOVAEL, LLC, 8735 DUNWOODY PLACE # 11443, ATLANTA, GA 30350, United States.

Your vault stays local

Filtering, folder navigation and resource tuning operate on your computer. The licensing flow does not send notes, vault names, paths, filenames, directory inventories or hardware identifiers. CPU capacity, available memory and heap headroom guide local bounds and are not uploaded as plugin telemetry. We do not use your notes for model training. There is no optional client analytics or marketing enrollment in this release.

Local settings, state, status and recovery can contain private paths or note preimages. Do not post them publicly. Optional remembered connections store credentials and signed proofs in encrypted application-profile storage outside the vault. The desktop factory uses Windows protected encryption. Other programs running as the same OS user are outside that protection boundary. A window-only connection is available when no unresolved saved record prevents it.

Accounts and necessary service records

Clerk handles email, account authentication and sessions. The plugin and licensing service do not request or store your account password. The licensing service processes verified identity/session proofs and records an account-derived identifier, original trial dates, trial/license identifiers, terms revisions and acceptance times, issuance information and verified purchase references. It also processes short-lived handoff challenges, connection/session hashes and expiry/ revocation state, and account/service request counters. These records support activation, continuity, recovery, abuse prevention and purchased rights. An account-derived hash is pseudonymous account information, not anonymous data.

Cloudflare hosts the licensing service/database; Clerk supplies sign-in; Stripe Managed Payments handles checkout, transaction/tax/receipt and payment-security information; the company support mailbox handles messages you choose to send. Payment-card details are handled by the payment provider, not the plugin or licensing database. Providers may process necessary IP/network, browser/device, account and security records under their own applicable roles and agreements. No promise is made that those providers process no IP information or use only United States systems.

We use necessary records to provide requested trial/purchased access, maintain security, prevent abuse, resolve support requests and meet legal obligations. We do not sell licensing information or use it for targeted advertising. Provider notices: https://clerk.com/legal/privacy, https://www.cloudflare.com/privacypolicy/ and https://stripe.com/privacy.

Retention and requests

We retain minimum account/trial/consent and license-recovery records while needed to administer the account, enforce the one-trial rule, preserve purchased rights or meet applicable legal obligations. Permanent-license recovery can require a long-lived account-linked license record. Contact us to request access, correction or deletion; we verify the request and explain any records that must remain, their purpose and applicable retention. We review the necessity of long-lived records at least annually. No fixed universal deletion date overrides mandatory records or valid purchased rights.

What each retention period covers

Connection records: expired connection codes and connection sessions are cleared 7 days after their recorded expiry, including sessions revoked before expiry. These are short-lived activation/connection records, not permanent purchased licenses. Keeping them briefly supports diagnosis of connection problems.

Routine counters and controlled security logs: daily request counters are cleared after 30 days. Routine security logs are limited to 30 days where the configured provider offers that control. These records support abuse prevention and troubleshooting; they are not copies of your notes. A specific security or legal incident may require a longer documented hold.

Support correspondence: messages concerning a support case are cleared after 24 months from that case's closure, unless needed for an ongoing dispute or legal obligation. This preserves case history for follow-up questions and disputes. The period governs retention of correspondence; it does not describe how long support is offered or limit permanent 1.x rights.

Protected operational backups: after a deletion is applied to active service records, remaining copies in our local protected operational backups are cleared within 35 days. This is the time for deleted records to age out of the backup rotation. These are service backups, not backups of your vault. They do not replace your independent note and configuration backups.

If a backup is restored, deletion and hold records must be reapplied before the service resumes. A restored backup must not recreate access or an account that was lawfully deleted. The longer-lived trial, consent, purchase and recovery records described above are not cleared as ordinary logs or support messages. Their necessity is reviewed at least annually.

Provider-controlled records have their own applicable retention and request processes; we assist or direct requests as appropriate. We do not guarantee deletion of records held independently by a payment provider for legal duties.

Sign-out clears/revokes the native connection when confirmed; it is not account deletion. Uninstalling the plugin or deleting a vault does not delete server records. Deleting an account can remove online license-recovery capability; an existing valid offline permanent proof is not remotely erased. Trial history is not silently reset, and purchased rights are not withdrawn to resolve a request.

Email support@arcxcovael.com for requests. We provide the response and rights required by applicable law; no blanket waiver is imposed. We disclose material notice changes before they take effect as required and preserve existing contractual rights. Marketing, if ever introduced, requires a separate choice.