Reactor
Privacy Policy
Last modified date: September 4, 2024
ARC Labs AG (referred to below as “ARC”) is an AI safety and research company dedicated to creating reliable, interpretable, and controllable AI systems.
This Privacy Policy outlines how we collect, use, disclose, and manage your personal data when you use our website and other services where ARC Labs AG acts as a data controller. This includes your interactions with Reactor.ai and other products for personal use (referred to as "Services") or when ARC Solutions provides commercial customers and their end users access to our commercial products, such as the Reactor Team plan ("Commercial Services").
This Privacy Policy does not cover situations where ARC acts as a data processor and handles personal data on behalf of commercial customers using ARC’s Commercial Services—such as when personal data is included in Inputs (defined below). In such cases, the commercial customer is the data controller, and you should review their policies for details on how they handle your personal data.
This Privacy Policy also details your privacy rights. Additional information on your rights and how to exercise them can be found in the “Rights and Choices” section.
If you are located in Canada, please refer to Section 8 of this Privacy Policy.
If you are located in Brazil, please refer to Section 9 of this Privacy Policy.
Collection of Personal Data
We collect the following categories of personal data:
Personal Data You Provide Directly
- Identity and Contact Data: ARC collects identifiers such as your name, email address, and phone number when you create an ARC account or request information about our Services. We may also generate indirect identifiers (e.g., "USER12345").
- Payment Information: We collect payment information if you choose to purchase ARC products and services.
- Inputs and Outputs: Our AI services allow you to submit various media formats (such as text, files, documents, photos, and images) along with associated metadata (“Prompts” or "Inputs") that generate responses (“Outputs” or “Completions”). If your Inputs include personal data, this information may be included in the Outputs.
- Feedback on Your Use of Our Services: We value your feedback, including ideas, suggestions, or ratings of Outputs in response to Inputs ("Feedback"). If you rate an Output using tools like thumbs up/thumbs down icons, we store the related conversation as part of your Feedback.
- Communication Information: If you communicate with us, including through social media, we collect your name, contact details, and the contents of your messages.
Personal Data We Receive Automatically from Your Use of the Services
When you use our Services, we automatically collect certain technical data (“Technical Information”), including:
- Device and Connection Information: With your device or browser’s permission, we automatically receive information about how and when you access our Services. This may include details like device type, operating system, browser type, mobile network, IP address, and other unique identifiers.
- Usage Information: We collect data about how you use the Services, such as access times, browsing history, search data, clicked links, viewed pages, and other activity.
- Log and Troubleshooting Information: We collect log files and error reports to monitor how our Services perform. If an error occurs, we may collect information about the error, its timing, and the application's state at the time.
- Cookies & Similar Technologies: We and our service providers use cookies, scripts, and similar technologies ("Cookies") to manage our Services, recognize users, customize experiences, analyze usage, and enhance safety. For more details on how we use these technologies and your options, please see our Cookie Policy.
Personal Data We Collect or Receive to Train Our Models
ARC acquires personal data from third-party sources to train our models, using data from:
- Publicly available information on the internet.
- Licensed datasets from third-party providers.
- Data provided by users or crowd workers.
We take measures to minimize the privacy impact on individuals during the training process. Learn more here.
Permissible Uses of Personal Data Under Applicable Laws
We will only use your personal data in accordance with applicable laws and rely on the following grounds where permitted:
- Contractual Necessity: We process personal data to perform our contract with you (e.g., processing Identity and Contact Data, Inputs, Outputs, and Payment Information to provide Services). If no contract exists, such as for end users of our Commercial Services, we rely on legitimate interests.
- Legitimate Interests: We process data for our legitimate interests or those of third parties, provided these interests do not override your rights. This includes improving our services, conducting research, marketing, enforcing our terms, and protecting rights.
- Consent: With your consent, which you can withdraw at any time.
- Legal Obligations: To comply with legal requirements.
We do not use Inputs or Outputs to train our models unless:
- You opt in for your conversations to be shared with us (in which case we may use them to enhance our ability to detect and enforce our Usage Policy, including model training for Trust and Safety purposes).
- You’ve explicitly reported materials to us (e.g., through feedback mechanisms).
- You’ve explicitly opted in to use your Inputs and Outputs for training purposes.
We use your personal data for various purposes based on the type of data and the applicable legal basis:
How We Disclose Personal Data
ARC may disclose personal data to the following third parties for the purposes outlined in this Policy:
- Affiliates & Corporate Partners: We share personal data among our affiliates and related entities.
- Service Providers & Business Partners: We may disclose personal data to service providers and business partners for purposes such as hosting, compliance, research, and data processing.
We may also disclose personal data in specific situations, including:
- Significant Corporate Events: During mergers, transactions, bankruptcy, or similar events involving business assets.
- Third-Party Websites and Services: Our Services may direct you to third-party websites, apps, and services. Interactions with these third parties are governed by their privacy policies, not ours.
- Legal and Regulatory Requirements: We may disclose personal data to comply with legal obligations, enforce our rights, protect safety, prevent fraud, or respond to governmental requests.
- With Consent: We will disclose personal data when you provide consent.
Rights and Choices
Depending on your location and applicable law, you may have certain rights regarding your personal data:
- Right to Know: You may have the right to know what personal data processes about you.
- Access & Data Portability: You may request a copy of your personal data and, in some cases, transfer it to another service.
- Deletion: You may request the deletion of personal data collected from you, subject to certain exceptions.
- Correction: You may request corrections to inaccurate personal data, though we cannot guarantee the factual accuracy of Outputs.
- Objection: You may object to processing your personal data, including for direct marketing.
- Restriction: You may restrict the processing of your personal data in certain circumstances.
- Withdrawal of Consent: You can withdraw consent where processing is based on consent.
- Automated Decision-Making: ARC does not engage in automated decision-making that significantly affects you.
To exercise these rights, contact us at contact@arc.ai.
Data Transfers
Your personal data may be transferred outside the European Economic Area (EEA) and the UK when you use our Services. We ensure an adequate level of data protection through:
- Adequacy Decisions: Transfers to countries recognized by the European Commission as providing adequate data protection.
- Standard Contractual Clauses: We use approved contractual clauses for transfers to countries without an adequacy decision.
Data Retention and Data Lifecycle
ARC retains your personal data as long as necessary for the purposes outlined in this Privacy Policy. When no longer needed, data is securely deleted or anonymized.
Children
Our Services are not directed at individuals under 18, and we do not knowingly collect data from minors. If you become aware of such data being provided, contact us at contact@arc.ai for investigation and deletion.
Supplemental Disclosures for Residents of Canada
For residents of Canada, additional disclosures apply, including:
- Consent: By agreeing to this Privacy Policy, you consent to the collection, use, and disclosure of your personal data as outlined.
- Cross-Jurisdictional Transfers: Your data may be processed outside Canada, in jurisdictions with different data protection laws.
Supplemental Disclosures for Residents of Brazil
For residents of Brazil, additional disclosures apply, including:
- Legal Bases: We may rely on different grounds for processing, such as legal rights or the need to comply with Brazilian law.
- Data Subject's Rights: Additional rights under the LGPD, including access, correction, and data portability, among others.
Changes to Our Privacy Policy
ARC may update this Privacy Policy periodically. We will notify you of any significant changes and update the effective date. Please review this policy regularly.
Contact Information
If you have questions or concerns about this Privacy Policy or your personal data, contact us at contact@arc.ai.
Under many countries' laws, you have the right to lodge a complaint with the appropriate supervisory authority in your jurisdiction.
