Privacy Policy

Introduction

At ArrowLancer ("we," "our," or "us"), we are committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws. This privacy policy explains how we collect, use, store, and protect your personal information when you use our website and services.

Data Controller

ArrowLancer acts as the data controller for the personal data we collect. You can contact us regarding any privacy-related matters through our contact form or the details provided at the end of this policy.

Information We Collect

Personal Data We Collect

We collect the following types of personal data when you interact with our services:

• Account Information: Name, email address, password (encrypted)
• Waiting List Applications: Full name, email, country, city, field of expertise, skills, experience level, LinkedIn profile, job hunting status, referral source, reason for joining
• Resume/CV Files: When uploaded, we store the file, filename, file size, and metadata
• Contact Information: Name, email, and message content when you contact us
• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent on site, click patterns, search queries
• Analytics Data: User journey events, job interaction events, engagement metrics, performance data

How We Collect Data

• Directly from you when you register, join our waiting list, or contact us
• Automatically through cookies and analytics tools when you use our website
• From third-party services like Firebase Analytics and Google Analytics

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: For analytics, marketing communications, and non-essential cookies
• Legitimate Interest: For website functionality, security, and service improvement
• Contract Performance: To provide services you've requested (account creation, waiting list)
• Legal Obligation: To comply with applicable laws and regulations

How We Use Your Data

• To provide and maintain our services
• To manage your account and waiting list application
• To communicate with you about our services
• To improve our website and user experience
• To analyze usage patterns and website performance
• To ensure website security and prevent fraud
• To comply with legal obligations

Data Storage and Security

We store your data using Firebase (Google Cloud Platform) services, which provide enterprise-grade security. Your data is:

• Encrypted in transit and at rest
• Stored in secure data centers with appropriate access controls
• Protected by industry-standard security measures
• Backed up regularly to prevent data loss

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:

• Account Data: Until you delete your account or request deletion
• Waiting List Data: Until you request removal or we launch our full service
• Analytics Data: Up to 26 months (Google Analytics standard)
• Contact Form Data: Up to 2 years for customer service purposes

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for data processing

To exercise these rights, please contact us using the information provided below. We will respond within 30 days.

Cookies and Tracking

We use cookies and similar technologies to enhance your experience:

• Necessary Cookies: Essential for website functionality (always active)
• Functional Cookies: Enable enhanced features and personalization
• Analytics Cookies: Help us understand website usage and performance

You can manage your cookie preferences through our consent banner or your browser settings.

Third-Party Services

We use the following third-party services that may process your data:

• Firebase (Google): Database, authentication, analytics, and file storage
• Google Analytics: Website analytics and user behavior tracking

These services have their own privacy policies and data processing practices. We ensure all third-party processors meet GDPR compliance standards.

International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, including adequacy decisions and standard contractual clauses approved by the European Commission.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us immediately.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the "Last updated" date. For material changes, we may provide additional notice.

Contact Us

If you have any questions about this privacy policy, want to exercise your rights, or have privacy concerns, please contact us:

• Through our website contact form
• Email: support@arrowlancer.com

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal data in accordance with applicable law.