Privacy Policy

Owner and Data Controller

Archil, Inc.
445 Bush Street, Suite 200
San Francisco, CA 94108

Contact: privacy@archil.com

Types of Data Collected

When you visit archil.com, we may collect the following types of data: usage data (page views, clicks, browsing history, session statistics), device and browser information, city-level location, and operating system information.

Through our visitor identification provider, RB2B, we may also collect professional identity information matched to your visit, such as your name, business email address, job title, employer, and professional profile (for example, LinkedIn).

When an automated agent or crawler (such as an AI assistant) requests a page, or when you arrive from a link in an AI assistant's answer, our server shares that request with Letter: the page requested, your IP address, and your browser's user agent and other request headers. Cookies and credentials are never shared.

This data is collected automatically through analytics and visitor identification tools when you use the site.

How We Process Your Data

Methods of Processing

We implement appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of your data. Processing is carried out using computers and IT tools following organizational procedures strictly related to the purposes indicated.

Place of Processing

Data is processed at the Owner's offices and at the facilities of third-party service providers in the United States. For transfers of personal data from the European Economic Area (EEA) to the United States, we rely on Standard Contractual Clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework. We maintain Data Processing Agreements with our subprocessors, including PostHog and Vercel.

Retention

We retain personal data for the following periods:

• Analytics data (PostHog): 24 months
• Session replay data (PostHog): 30 days
• Visitor identification data (RB2B): as long as needed for sales and marketing follow-up; RB2B's own retention is governed by its privacy policy

Data may be retained longer where required by applicable legal obligations or your consent.

Purposes of Processing

We collect data to provide and improve our services, comply with legal obligations, protect our rights, and detect malicious activity. Specifically, we use your data for:

• Website analytics
• Session recording and heat mapping
• Identifying the businesses and professionals who visit our site, for sales and marketing outreach
• Measuring how AI assistants and crawlers read our site, and which AI answers send visitors to it
• Security and fraud prevention

Services We Use

PostHog Product Analytics (PostHog, Inc.)

We use PostHog to understand how visitors use our site. PostHog acts as a data processor on our behalf and does not use your data for its own purposes.

Data processed: browser information, browsing history, clicks, device information, page views.
Retention: 24 months.
Processing location: United States.
PostHog Privacy Policy

PostHog Session Replay (PostHog, Inc.)

We use PostHog Session Replay to record and replay user sessions to identify usability issues.

Data processed: city-level location, clicks, device information, operating system, page views, usage data.
Retention: 30 days.
Processing location: United States.

RB2B Visitor Identification

We use RB2B to identify the businesses and professionals who visit our site so our team can follow up. RB2B is a third party that may also use this data for its own purposes, as described in its privacy policy.

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

For visitors in the United States, RB2B loads when you visit the site unless you have declined cookies or your browser sends a Global Privacy Control signal. For visitors outside the United States, RB2B loads only after you accept cookies. RB2B also runs on our documentation site, docs.archil.com, on the same terms: it follows the choice you make here, and if you have not made one, it loads there only for visitors in the United States.

Data processed: IP address, cookies, device and browser information, pages visited, and matched identity information (name, business email address, job title, employer, professional profile).
Retention: per RB2B's privacy policy.
Processing location: United States.
RB2B Privacy Policy

LetterVisit (Letter)

We use LetterVisit to count the AI assistants and crawlers that read our site and the visits that arrive from links in AI answers. Our server shares requests that look like they come from an automated agent, or from an AI answer, with LetterVisit; ordinary visits are not shared this way. A LetterVisit script also runs in your browser to count visits from AI answers. We do not use LetterVisit to identify visitors.

The script keeps information in your browser only with your consent. For visitors in the United States, that consent is assumed unless you decline cookies or your browser sends a Global Privacy Control signal. For visitors outside the United States, it applies only after you accept cookies.

Data processed: IP address, user agent and other request headers (never cookies or credentials), pages requested, referrer.
Retention: per Letter's privacy policy.
Processing location: United States.
Letter Privacy Policy

Vercel Analytics (Vercel, Inc.)

We use Vercel Analytics for privacy-friendly, aggregated website performance metrics. Vercel Analytics does not use cookies and does not collect personal identifiers that can track users across applications.

Data processed: page URL, referrer, device type, operating system, browser, geolocation (country/region level).
Processing location: United States.
Vercel Analytics Privacy Policy

Fonts

We use the Inter and IBM Plex Mono typefaces. These fonts are self-hosted and served directly from our infrastructure — no data is transmitted to Google or any third party for font delivery.

Cookies

We use cookies for website analytics via PostHog and for visitor identification via RB2B. PostHog does not set cookies until you give explicit consent through our cookie banner. RB2B sets cookies when you visit if you are in the United States, and only after you accept cookies if you are elsewhere. If you decline cookies or if your browser sends a Global Privacy Control (GPC) signal, no tracking cookies are set and RB2B is not loaded on subsequent pages. PostHog will continue to collect anonymized, non-identifiable analytics data (such as page views and usage patterns) without cookies, but this data cannot be linked to you across sessions.

LetterVisit keeps information in your browser on the same terms as RB2B: when you visit if you are in the United States, and only after you accept cookies if you are elsewhere, and never after you decline or with a Global Privacy Control signal.

When you accept or decline, we store your choice in a cookie named archil_consent on archil.com and its subdomains, so docs.archil.com can honor it too. It contains only your choice and expires after one year.

You can change your cookie preferences at any time using the "Cookie Preferences" link in our footer.

Legal Basis for Processing (GDPR)

If you are in the European Economic Area, we process your personal data under the following legal bases:

• Consent (Art. 6(1)(a)) — Website analytics, session replay, and visitor identification. You provide consent via our cookie banner and may withdraw it at any time.
• Contract (Art. 6(1)(b)) — Processing necessary for the performance of a contract with you or to take pre-contractual steps at your request.
• Legal obligation (Art. 6(1)(c)) — Processing necessary for compliance with a legal obligation to which we are subject.
• Legitimate interest (Art. 6(1)(f)) — Security monitoring and fraud prevention, where our interest does not override your fundamental rights and freedoms.

Your Rights Under GDPR

If you are in the European Economic Area, you have the right to:

• Withdraw consent at any time
• Object to processing of your data
• Access your data and obtain copies
• Verify and rectify inaccurate data
• Restrict processing of your data
• Request erasure of your personal data
• Receive your data in a structured, machine-readable format
• Lodge a complaint with a data protection authority

We do not engage in automated decision-making or profiling that produces legal effects concerning you.

Your Rights Under CPRA (California)

If you are a California resident, the California Privacy Rights Act (CPRA) provides you with the following rights:

• Right to Know — request information about what personal data we collect, use, and disclose
• Right to Delete — request deletion of your personal data
• Right to Correct — request correction of inaccurate personal data
• Right to Opt-Out of Sale/Sharing — opt out of the sale or sharing of your personal data
• Right to Limit Use of Sensitive Personal Information — limit how we use sensitive personal data

We do not sell your personal information for money. However, our use of RB2B discloses information about your visit to RB2B, which may use it for its own purposes. This may be considered a "sale" or "sharing" of personal information under California law. You can opt out at any time by declining cookies, by changing your preference with the "Cookie Preferences" link in our footer, by visiting https://app.retention.com/optout, or by emailing privacy@archil.com. We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we automatically opt you out of tracking and do not load RB2B.

Children's Privacy

Our site is not directed to children under the age of 13, and we do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly.

Exercising Your Rights

To exercise any of the rights described above, contact us at privacy@archil.com. Requests are free of charge and will be addressed within the following timeframes:

• GDPR requests: within one month
• CPRA requests: within 45 days

Subprocessors

We use the following subprocessors to deliver our services. We maintain Data Processing Agreements with each subprocessor. This list may be updated with notice.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "last updated" date. We encourage you to review this page periodically.