Legal
Privacy Policy
Effective Date: July 19, 2026
This Privacy Policy ("Policy") describes how Infinite Arc AI, an Alberta, Canada corporation with its principal place of business at 330 5th Avenue SW, Suite 1800, Calgary, Alberta, Canada T2P 0L4 ("Company," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you use the VendAce mobile or web application (the "App"). This Policy explains our processing of that information and the choices and rights available to you.
1. Information We Collect
1.1 Account Information
- Email address
- Display name, first name, and last name
- Authentication credentials (stored securely via Firebase Authentication)
- Authentication provider information (if using Google Sign-In or Okta SSO)
1.2 Usage Data
- Audio recordings of your role-play sessions
- Transcripts of conversations generated during role plays
- Performance metrics and analytics from your training sessions
- App settings and preferences (e.g., audio wait time, hands-free mode, sales methodology selection)
- Device information and usage patterns
- Session starts, duration, activity timestamps, feature use, request volume, and concurrent-session information
1.3 Enterprise Account Information
- Company association and company ID (if linked to an Enterprise Customer)
- Role within the organization
- Performance data visible to authorized managers (when applicable)
1.4 Subscription and Payment Information
- Subscription tier and status
- Allowance grants, balances, usage, resets, and adjustments
- Payment method information (processed securely through Apple App Store, Google Play, or third-party payment processors)
- Transaction history and billing records
1.5 Technical Data
- Device identifiers
- App-instance identifiers and authentication events
- IP address
- App version and platform information
- Crash reports and error logs
- Request identifiers, timing, endpoint, model and provider usage, estimated or actual service cost, and rate-limit events
- Security and abuse-prevention signals, challenges, warnings, restrictions, and related review records
2. How We Use Your Information
We use the information we collect to:
- Provide and maintain the App's services
- Process your registration and authenticate your account
- Deliver personalized sales training role plays and feedback
- Generate performance analytics and insights
- Process subscription payments and manage your account
- Communicate with you about your account, updates, and support requests
- Improve our services, develop new features, and conduct research
- Comply with legal obligations and enforce our Terms and Conditions and Fair Usage Policy
- Authenticate official access, prevent fraud and account sharing, detect automation or attempts to bypass safeguards, apply rate limits, investigate misuse, and protect service availability
- Share performance data with Enterprise Customers (when you are linked to a company workspace)
3. How We Share Your Information
3.1 Enterprise Customers
If you accept an invitation to join an Enterprise Customer's workspace, authorized managers (supervisors, team leads, executives, administrators) may view your performance data and analytics for organizational evaluation purposes.
3.2 Service Providers
We may share your information with third-party service providers who assist us in:
- Cloud hosting and data storage (Firebase/Google Cloud)
- Payment processing (Apple, Google, Stripe)
- AI and machine learning services for generating responses and feedback
- Analytics and performance monitoring
- Authentication, security, fraud, and abuse prevention
These service providers are contractually obligated to protect your information and use it only for the purposes we specify.
3.3 Legal Requirements
We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of our users or others.
3.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
4. Data Storage and Security
4.1 Storage Location
Your data is stored on secure servers operated by Google Cloud Platform (Firebase) and may be processed in various locations worldwide. We implement appropriate safeguards to protect your data regardless of where it is stored.
4.2 Security Measures
We use industry-standard security measures, including:
- Encryption of data in transit and at rest
- Secure authentication protocols (Firebase Authentication)
- Access controls and authentication requirements
- Rate limiting, abuse monitoring, and security logging
- Regular security assessments and monitoring
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
5. Your Rights and Choices
5.1 Access and Correction
You can access and update your account information through the App's settings. You may also request access to your personal data by contacting us at info@infinitearcai.co.uk.
5.2 Data Deletion
You may delete your account at any time through the App's settings. When you delete your account:
- Your personal profile will be marked as inactive/deleted
- Access to your account will be immediately revoked
- Historical role-play data may remain visible to Enterprise Customers (if applicable) for contractual reporting purposes
- We may retain certain information as required by law or for legitimate business purposes (e.g., billing records, fraud prevention)
5.3 Email Communications
You can opt out of marketing emails by following the unsubscribe instructions in those emails. You may not opt out of transactional emails related to your account.
5.4 Location Data
The App does not collect precise location data. We may collect general location information (e.g., country) based on your IP address for analytics, account security, fraud prevention, and investigation of possible credential sharing or safeguard circumvention.
5.5 Fair Usage Decisions and Review
We may use automated signals to apply short-lived protective limits or flag activity for review. You may ask us to review a material restriction or suspension by contacting info@infinitearcai.co.uk. Where required by applicable law, decisions producing legal or similarly significant effects will not be based solely on automated processing without an available safeguard or human review.
6. Children's Privacy
The App is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately at info@infinitearcai.co.uk.
7. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country. By using the App, you consent to the transfer of your information to these countries.
8. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce our agreements
- Investigate fraud, abuse, account sharing, security incidents, and attempts to circumvent safeguards
- Support Enterprise Customer reporting requirements (when applicable)
When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal, accounting, contractual, fraud-prevention, security, dispute, or enforcement purposes. Retention periods depend on the nature of the record and the applicable obligation or risk.
9. Third-Party Services
The App integrates with third-party services, including:
- Firebase/Google Cloud: For authentication, data storage, and hosting
- Apple App Store / Google Play: For subscription management and payments
- AI Service Providers: For generating conversational responses and feedback
- Okta / Google Sign-In: For authentication (if you choose these options)
These services have their own privacy policies. We encourage you to review them. We are not responsible for the privacy practices of these third-party services.
10. California Privacy Rights
If you are a California resident, you have the right to:
- Request disclosure of the categories and specific pieces of personal information we collect
- Request deletion of your personal information
- Opt out of the sale of your personal information (we do not sell your personal information)
- Not be discriminated against for exercising your privacy rights
To exercise these rights, contact us at info@infinitearcai.co.uk.
11. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), you have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Erase your personal data ("right to be forgotten")
- Restrict processing of your personal data
- Data portability
- Object to processing of your personal data
- Withdraw consent at any time (where processing is based on consent)
To exercise these rights, contact us at info@infinitearcai.co.uk. You also have the right to lodge a complaint with your local data protection authority.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated Policy in the App
- Sending you an email notification (if you have provided an email address)
- Displaying a notice in the App
Your continued use of the App after the effective date of the updated Policy constitutes acceptance of the changes.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: info@infinitearcai.co.uk
Mail: Infinite Arc AI
330 5th Avenue SW, Suite 1800
Calgary, Alberta, Canada T2P 0L4
Last Updated: July 19, 2026