Privacy Policy

Last updated: October 26, 2026

This Privacy Policy describes how ArcLight Strategies, LLC ("ArcLight," "we," "us," or "our") collects, uses, and shares information about you when you use the TrueProcessLab platform and services (the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide Directly

Account information: Name, business email address, company name, and password when you create an account
Billing information: Payment method details, billing address, and transaction history (processed and stored by Stripe — we do not store full card numbers)
Process map submissions: Process titles, descriptions, department labels, tags, notes, and video walkthrough links you submit through the Service
Messages: Communications you send through the in-platform messaging system with TrueProcessLab mappers
Team information: Email addresses of team members you invite to your workspace
Support communications: Messages you send to our support team

1.2 Information We Collect Automatically

Usage data: Pages visited, features used, actions taken, and time spent in the Service
Device information: Browser type, operating system, IP address, and device identifiers
Cookies and similar technologies: Session tokens, preference data, and analytics identifiers (see Section 5)

1.3 Information We Do Not Collect

We do not store or host your video recordings. Video links you submit remain on your chosen recording platform (Loom, Zoom, Google Meet, Microsoft Teams) and are subject to that platform's privacy practices
We do not sell your personal information to third parties

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and improve the Service
Create and manage your account and workspace
Process payments and manage subscriptions through Stripe
Deliver completed process maps and communicate with you about your submissions
Send transactional emails including account confirmations, status updates, and billing notifications
Respond to your support requests and communications
Monitor and analyze usage patterns to improve the Service
Detect and prevent fraud, abuse, and security incidents
Comply with legal obligations

2.1 Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, we process your personal data under the following legal bases:

Contract performance: Processing necessary to provide the Service under our Terms of Service
Legitimate interests: Usage analytics, security monitoring, and product improvement
Legal obligation: Compliance with applicable laws
Consent: Where we have obtained your consent, such as for optional marketing communications

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

3.1 Service Providers.

We share information with third-party vendors who assist us in operating the Service, including:

Stripe, Inc. — payment processing and subscription management
Base44 — platform infrastructure and hosting. On our current plan, Base44's terms allow it to use data stored in the Service, including process content and uploaded files, to train its own AI models. Until we move to a plan that excludes this, we put a company's content into the Service only after telling that company and getting its agreement
Email service providers — transactional email delivery
Anthropic, PBC — AI model provider (Claude): our primary provider for AI features, once they are turned on for your company
OpenAI — backup AI model provider (ChatGPT): used only if Anthropic is unavailable, once AI features are turned on for your company

All service providers are contractually required to protect your information. Except as described above for Base44, they may use it only for the purposes we specify.

3.2 Business Transfers.

If ArcLight Strategies is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and prominent notice on the Service before your information becomes subject to a different privacy policy.

3.3 Legal Requirements.

We may disclose your information if required to do so by law or in response to valid legal process, such as a court order or government request.

3.4 Protection of Rights.

We may disclose information when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of ArcLight, our users, or the public.

3.5 With Your Consent.

We may share your information for other purposes with your explicit consent.

4. Data Retention

We keep personal information only as long as we need it for the purpose we collected it for. Specifically:

Account data: Kept while your account is active. If your company turns your account off, we remove your account 12 months later, or sooner if your company asks. The process content you contributed stays with your company, credited to "Former user".
Process maps and content: Kept for the life of your company's subscription. When your company leaves, its people no longer have access to the Service. 30 days later we delete everything except billing records and audit logs, which we keep for the periods below, and confirm the deletion in writing.
Billing records: Kept for 7 years after the transaction, for tax and accounting.
Audit logs: Our log of actions TrueProcessLab staff take is kept for 3 years, and your company's access log (who opened your workspace, and when) for 2 years. Both identify people by account ID only.
Usage analytics: Pages visited and features used are kept for up to 12 months.
Support communications: Kept for up to 3 years.
Edited and deleted messages: When you edit or delete a message in the Service, the earlier text is kept for 3 years, visible only to TrueProcessLab staff, then deleted.
Uploaded files: Documents and recordings you upload for mapping are deleted 14 days after their review ends, unless your company chooses to keep them longer. The facts and short quotes taken from them stay in your process maps.

You may request deletion of your personal information at any time (see Section 7).

5. Cookies and Tracking

We use cookies and similar tracking technologies to operate and improve the Service.

Essential cookies

Required for the Service to function, including authentication session tokens and security cookies. These cannot be disabled.

Analytics cookies

Help us understand how the Service is used, which features are popular, and where users encounter issues. These are used to improve the Service.

Preference cookies

Remember your settings and preferences, such as your billing term selection.

You can control non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of the Service.

6. Data Security

We implement commercially reasonable security measures to protect your personal information, including:

Encryption of data in transit using TLS/HTTPS
Encrypted storage of sensitive data at rest
Access controls limiting employee access to customer data
Regular security reviews of our systems and practices

Despite these measures, no internet transmission or electronic storage is completely secure. We cannot guarantee absolute security of your data.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability.

You have the right to request a copy of the personal information we hold about you in a portable format.

7.2 Correction.

You may update your account information directly through the Settings page in the Service. For other corrections, contact us at privacy@trueprocesslab.com.

7.3 Deletion.

You may request deletion of your personal information by contacting us at privacy@trueprocesslab.com. Once we have verified the request, we delete your information from the live Service within 30 days, except what the law requires us to keep or Section 4 says we keep (such as billing records and audit logs).

If you use TrueProcessLab through your employer's account, your employer controls the information in its workspace and we process it on their behalf. We forward your request to your employer within 5 business days and tell you we have done so; we then act on your employer's instruction. Your employer can also ask us to remove a person directly.

7.4 Opt-Out of Marketing.

You may opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email. Transactional emails related to your account and Service (such as status updates and billing receipts) cannot be opted out of while your account is active.

7.5 California Residents (CCPA).

If you are a California resident, you have the right to know what personal information we collect, the right to delete your personal information, the right to opt-out of the sale of your information (we do not sell your information), and the right to non-discrimination for exercising your privacy rights. To exercise these rights, contact us at privacy@trueprocesslab.com.

7.6 EEA Residents (GDPR).

If you are located in the European Economic Area, you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and the right to data portability. You also have the right to lodge a complaint with your local data protection authority.

8. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child, please contact us at privacy@trueprocesslab.com.

9. Third-Party Links

The Service may contain links to third-party websites or services, including video recording platforms and integration partners. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you use in connection with TrueProcessLab.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email to the address associated with your account and update the "Last updated" date at the top of this page. Your continued use of the Service after the effective date of the changes constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

ArcLight Strategies, LLC
Privacy and Data Requests
Email: privacy@trueprocesslab.com
Support: support@trueprocesslab.com
Website: https://www.trueprocesslab.com