Your data. Actually yours.

1. Who we are

Genesis Arc is operated by Trung Le, carrying on business as “Genesis Arc”, Nanaimo, British Columbia, Canada. For privacy questions, requests or complaints, contact the privacy officer: [email protected].

This policy covers the Genesis Arc application at genesisarc.ca/app, the genesisarc.ca website, agent websites we host at yourname.genesisarc.ca, and the video meeting rooms. It applies alongside our Terms of Service.

2. The zero-server principle

Genesis Arc runs in your browser. Your business content — contacts, leads, listings, buyers, documents, photos, notes, reports and settings — is stored on your own device (browser storage) and synced to your own Google Drive account. We do not operate databases of your client records, and we cannot browse them. If you stop using Genesis Arc, that data is still sitting in your Drive and on your device, under your control.

A small number of features need a server to work at all (answering a phone call while your laptop is closed, hosting a public website, connecting a video call). The rest of this policy describes those narrow cases precisely.

3. What we process, and why

Your account

You sign in with Google. We receive your basic profile (name, email) to operate your account. If you purchase a plan, billing is handled by our payment processor — card numbers never touch us.

Google user data (Drive, Calendar)

With your consent via Google sign-in, Genesis Arc uses: Google Drive to store and sync the app’s own data files and documents in your account; and Google Calendar availability (free/busy) so your assistant can check when you’re free before pencilling a booking. We request the narrowest scopes that work, and we do not use Google user data for advertising or sell it to anyone.

ARIA receptionist (calls, texts, email) — optional, off by default

If you enable the receptionist, communications sent to your business line or forwarded from your inbox are processed in real time so ARIA can answer: audio and text pass through our infrastructure provider (Cloudflare), your telephony account (Twilio — the message logs live in your Twilio account, not ours), and an AI provider (Anthropic) to generate the response. We keep only the minimum operational memory needed for a coherent conversation (for example, recent thread context and pencilled bookings), stored with automatic expiry. Calls are not recorded by Genesis Arc.

Agent websites & leads

If you publish a website, the content you chose to publish (and its AI translations, if enabled) is stored on our hosting so the public can view it. When a visitor submits a form on your site, their submission (name, contact details, message) is held briefly on our hosting until your app collects it — typically minutes — after which it lives in your own records. For website visitors: the agent whose site you used is the business collecting your information; we process it on their behalf.

Video meeting rooms

Meetings are peer-to-peer: video and audio stream directly between the two participants and do not pass through our servers. Genesis Arc does not record meetings. Chat messages travel directly between participants and are not stored by us. Tiny connection notes used to establish the call are held with short automatic expiry. If a participant asks ARIA to translate or explain text or a selected clause image, that content is sent to the AI provider to produce the answer and is not retained by us. If the agent saves a marked-up contract to their app, the file is held on our hosting for up to 7 days for delivery, then removed.

The genesisarc.ca website

Our marketing pages use no advertising trackers and no third-party analytics cookies. Local browser storage is used only for things like remembering a billing-toggle choice.

4. Service providers

These providers process data in Canada and the United States. Where personal information is processed outside Canada, it is subject to the laws of those jurisdictions — by using the Service you consent to this, as described here. We choose providers with strong security practices and use them only for the purposes above.

5. Your clients’ information — role clarity

Agents use Genesis Arc to manage information about their own clients. For that information, the agent is the organization responsible under privacy law, and Genesis Arc acts on the agent’s instructions. Agents are responsible for collecting client information lawfully and with appropriate consent. If you are a client of an agent who uses Genesis Arc and want to access or correct your information, contact your agent — we will assist them with any such request.

6. Retention

• Your business content: stored in your Google Drive and on your devices — you control it, and deleting it there deletes it, period.
• Website form submissions: held on our hosting only until your app collects them.
• Receptionist operational memory: short rolling windows with automatic expiry.
• Meeting connection notes: hours. Meeting rooms: expire in 24 hours. Saved meeting documents: up to 7 days.
• Published website content: until you unpublish or close your account.

7. Security

All traffic is encrypted in transit (TLS). Access tokens are scoped as narrowly as the platforms allow. The app includes on-device protections such as the Privacy Screen (blur + PIN) and kiosk PIN-locking for open-house devices. No system is perfectly secure; if a breach creates a real risk of significant harm, we will notify affected users and authorities as required by law.

8. Your rights

You may request access to, or correction of, personal information under our control, and withdraw consent (which may limit what the Service can do for you). Because your business content is in your own Drive, most access is immediate and self-serve. To exercise rights or make a complaint, contact [email protected]. You may also contact the Office of the Information and Privacy Commissioner for BC or the Office of the Privacy Commissioner of Canada.

9. Children

The Service is for licensed professionals and business use; it is not directed to anyone under 18, and we do not knowingly collect information from minors.

10. Changes

We may update this policy as the Service evolves. Material changes will be reflected in the “Last updated” date and, where practical, an in-app notice. Continued use after changes take effect means you accept the updated policy.