Privacy Policy

Data We Collect

• Account information (name, email) provided at registration
• Email data from connected email accounts (used for signal detection)
• Calendar events from connected Google Calendar accounts
• Job application data and notes you enter into ArcVia
• Usage data (pages visited, features used) for product improvement

Google OAuth Scopes We Request

ArcVia requests the following Google OAuth scopes when you connect your Google account. Each scope is requested only when you take an explicit action in the app, and each can be revoked at any time from Settings → Connections or from your Google Account permissions page at myaccount.google.com/permissions.

• openid, https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/userinfo.profile — Used only to identify your ArcVia account at sign-in. We receive your email address, name, and profile picture. No other Google data is accessed at sign-in.
• https://www.googleapis.com/auth/gmail.readonly — Requested when you click "Connect Gmail" or "Continue with [your email]." Used to detect recruiting-related email threads in your inbox and classify their stage (initial outreach, screening, interview, offer, rejection). A rule-based filter excludes non-recruiting mail before any body content is examined. Classified messages are processed by an enterprise-tier AI classifier under a contract that prohibits the provider from retaining message content or training on it. Only the classification result — company, stage, and confidence — is stored in ArcVia's database. Raw email bodies are discarded immediately after classification. Attachments are never accessed.
• https://www.googleapis.com/auth/calendar.events — Requested when you click "Connect Calendar" or "Upgrade Access." Used to (1) detect interview events on your Google Calendar and link them to matching opportunities in your pipeline, and (2) optionally append an ArcVia context block (opportunity name, round, deep link) to interview event descriptions so the context is visible in your calendar app on any device. Calendar events unrelated to job search are filtered out by a rule-based classifier before any enrichment is considered.

Data you can delete

Disconnecting any Google integration from Settings → Connections immediately revokes the OAuth token and halts all further access and classification. You can permanently delete all ArcVia-derived data by deleting your ArcVia account, which removes all stored signals, opportunities, momentum history, and classification records.

How We Use It

• Signal detection and career intelligence generation
• AI-powered insights and recommendations
• Product improvement and reliability

Data may be processed periodically or triggered by events (such as new activity) to generate insights and recommendations.

What We Do Not Do

• We do not sell your data to anyone
• We do not share your data with recruiters or employers
• We do not use your data for advertising
• We do not create public profiles or share your information externally

Third-Party Services

ArcVia integrates with the following third-party services to provide functionality:

• Google OAuth for authentication and email/calendar integrations
• Microsoft OAuth for authentication
• AI providers for generating insights and recommendations

Cookies

ArcVia uses a single HTTP-only cookie to maintain your session. No third-party tracking cookies are used.

Data Storage & Security

Your data is stored securely with industry-standard protections including encrypted connections, secure database access, and regular security reviews.

User Control

• Disconnect integrations at any time from Settings
• Request account deletion by contacting support
• Export or review your data upon request

Data Retention

Your data is retained as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us.

Contact

Privacy questions or data requests: support@arcvia.ai