Privacy Policy

Arca Savings LLC · Effective Date: April 25, 2026

THE SHORT VERSION

You type in a balance and an APY. We do math and show you options. We don’t touch your bank account. We don’t store your financial data after your session ends. We don’t currently earn money from any links on the site. We don’t sell your personal information. We are a Connecticut LLC and Connecticut law governs these terms.

Read the full policy below.

This Privacy Policy describes how Arca Savings LLC, a Connecticut limited liability company ("Arca," "we," "us," or "our") collects, uses, and shares information about you when you use the Arca Savings website and platform (the "Service"). By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Who We Are

Arca Savings LLC is a financial information and comparison company, not a bank, financial institution, broker-dealer, or investment advisor. We do not hold, custody, transmit, or have any access to your funds or bank accounts. Our Service helps you understand how much additional interest income you could potentially earn by moving savings to a higher-yield account, based on information you provide to us directly.

Company — Arca Savings LLC

State of Organization — Connecticut

Contact — privacy@arcasavings.com

Website — arcasavings.com

Effective Date — April 25, 2026

2. Information We Collect

We collect a minimal amount of information. Here is what we collect, and how:

2a. Information You Enter to Use the Service

To generate a savings comparison, you manually enter:

Your approximate current savings account balance (a number)
Your current savings account interest rate / APY (a number)

We use this session data solely to perform the interest calculation and display a comparison. This data is held in memory during your active session only and is not stored by Arca after your session ends. We do not ask for, and you should not enter, your account number, Social Security Number, bank login credentials, or any other sensitive personal identifiers.

2b. Information You Voluntarily Provide

You may optionally provide:

Your email address — if you choose to receive rate change alerts or other communications from Arca. This is strictly opt-in and is not required to use the Service.
Feedback, survey responses, or support communications — if you choose to contact us.

2c. Information Collected Automatically

When you visit the Service, we and our service providers may automatically collect:

IP address and approximate geographic location (city / state level)
Browser type, operating system, and device type
Pages visited, time spent on pages, and navigation paths
Referring URL (the website that sent you to ours)
Cookies and similar technologies (see Section 5)

This information is used to maintain and improve the Service, understand how users interact with it, and detect security incidents.

2d. Arca Copilot Interaction Data

If you use the Arca Copilot (our AI-powered chat assistant), we may collect and retain:

The text of your questions and messages submitted to the Copilot
The Copilot's responses to those messages
Timestamps, session identifiers, and other metadata associated with each conversation

This conversation data may be used for quality assurance, safety review, customer support, and improvement of the Copilot and the Service more broadly. To the extent permitted by our agreement with our AI model provider, conversation data may also be used to evaluate and refine the underlying AI model.

Your Copilot inputs are transmitted to and processed by Anthropic, PBC, our third-party AI model provider, in order to generate responses. This processing is governed by Anthropic's usage policies in addition to this Privacy Policy. We do not sell Copilot conversation data to third parties, and we do not use it to serve targeted advertising.

**Reminder: **Do not share sensitive personal information — such as Social Security Numbers, account numbers, passwords, or detailed financial credentials — with the Copilot. The Copilot is not designed to receive or securely store such information.

2e. Information We Do NOT Collect

To be explicit about what we do not collect:

Bank account numbers or routing numbers
Bank login credentials (username / password) of any kind
Social Security Numbers or government-issued ID numbers
Credit card or payment card information
Sensitive personal information such as health data, biometric data, race or ethnicity, or precise geolocation
Real-time financial account data from any bank — there is no bank-linking integration

**Note on Future Changes: **If Arca enters into affiliate arrangements with financial institutions in the future, we may begin receiving limited data back from those institutions (such as confirmation that an account was opened) for commission tracking purposes. This policy will be updated, and you will be notified, before any such changes take effect.

3. How We Use Your Information

We use the information we collect for the following purposes:

To operate the Service — performing the savings comparison calculation and displaying results during your session
To send you communications you have opted into, such as rate change alerts
To respond to support requests or feedback you send us
To improve our platform, calculations, and user experience
To detect, investigate, and prevent fraud, abuse, and security incidents
To comply with applicable legal obligations
To generate aggregated, de-identified analytics and market research that cannot be used to identify you individually

We do not use your information for behavioral advertising, targeted advertising, or profiling for marketing purposes. We do not sell your personal information.

4. How We Share Your Information

4a. Service Providers

We may share information with trusted third-party service providers who help us operate the Service. As of the Effective Date, these include:

Cloud infrastructure and hosting providers (such as Vercel and Cloudflare) — who host and deliver the Service
Analytics providers (such as Google Analytics) — who help us understand site usage in aggregate
Email service providers — solely to send communications you have opted into
AI service providers (such as Anthropic) — where applicable, for computation assistance using only session-level, non-identifying inputs

These providers are not authorized to use your information for their own purposes and are required to protect it appropriately.

4b. Third-Party Financial Institutions (Links Only — Current State)

The Service displays links to third-party financial institutions (HYSA providers). As of the Effective Date, these are informational links only. Arca does not share your session data, email address, or any other personal information with those institutions when you click a link. Any information you provide after clicking through to a third-party site is governed entirely by that institution’s own privacy policy.

If this changes in connection with future affiliate arrangements, this policy will be updated to describe exactly what data, if any, is passed to partner institutions and for what purpose.

4c. Legal Requirements and Safety

We may disclose your information if required by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Arca, our users, or the public.

4d. Business Transfers

If Arca is involved in a merger, acquisition, or sale of substantially all of its assets, your information may be transferred as part of that transaction. We will notify you via the Service or by email before your information becomes subject to a different privacy policy, and you will be given an opportunity to request deletion of your information.

4e. What We Will Never Do

Sell your personal information to data brokers, advertisers, or any other third party
Share your financial comparison session data with any third party for marketing purposes
Use your information to serve targeted advertising on other platforms

5. Cookies and Tracking Technologies

We use cookies and similar technologies for the following limited purposes:

Essential / Session — Required for the Service to function (e.g., maintaining session state during your comparison). Cannot be disabled without breaking the Service.

Analytics — Help us understand how users navigate the site in aggregate (e.g., which pages are visited most). Data is collected in aggregate and anonymized where possible. Can be disabled via your browser settings.

Future: Affiliate Tracking — Not currently in use. If Arca adds affiliate links with compensation arrangements in the future, we may use click-tracking cookies to attribute referrals. This policy will be updated before any such cookies are deployed.

You can manage cookie settings through your browser. Note that disabling essential cookies may prevent the Service from functioning correctly.

Connecticut residents: We honor the Global Privacy Control (GPC) signal in accordance with Connecticut’s data privacy law. If your browser sends a GPC signal, we will treat it as an opt-out of any sale or sharing of your personal data for purposes of cross-context behavioral advertising.

6. Data Retention

Session data (balance, APY entered by you) — Held in memory during your session only. Not stored after session ends.

Email address (if provided) — Until you unsubscribe or request deletion, plus 30 days for processing.

Usage / analytics data — Up to 24 months, then aggregated and anonymized.

Support communications — Up to 3 years for legal and compliance purposes.

Aggregated / de-identified data — Indefinitely. Cannot be used to identify you.

7. Data Security

We implement commercially reasonable security measures to protect the limited information we collect, including:

TLS/HTTPS encryption for all data transmitted to and from the Service
No persistent storage of any financial data you enter
Access controls limiting who within Arca (currently a very small team) can access any stored user data
Regular review of security practices as the Service evolves

No security system is completely impenetrable. We cannot guarantee the absolute security of your information. If a security incident occurs that affects your personal information, we will notify you as required by applicable Connecticut and federal law.

8. Your Privacy Rights

8a. General Rights (All Users)

Regardless of where you reside, you may:

Request access to the personal information we hold about you
Request correction of inaccurate information
Request deletion of your personal information (subject to legal retention requirements)
Opt out of marketing emails at any time by clicking “Unsubscribe” in any email or contacting privacy@arcasavings.com

To exercise any of these rights, contact us at privacy@arcasavings.com. We will respond within 45 days.

8b. Connecticut Residents — Connecticut Data Privacy Act (CTDPA)

If you are a Connecticut resident, you have the following rights under the Connecticut Data Privacy Act (Conn. Gen. Stat. §§ 42-515 et seq.), as amended:

Right to Access: You may request confirmation of whether we process personal data about you, and access to that data.
Right to Correct: You may request correction of inaccuracies in your personal data.
Right to Delete: You may request deletion of personal data we have collected about you.
Right to Data Portability: You may request a copy of your personal data in a portable, readily usable format.
Right to Opt Out: You may opt out of the processing of your personal data for purposes of targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. As of the Effective Date, Arca does not engage in any of these activities, but this right will be honored if our practices change.
Right to Contest Automated Decisions: If we use automated decision-making in a way that produces legal or similarly significant effects concerning you, you have the right to contest the decision and request human review.

Connecticut residents may also submit requests via the Global Privacy Control (GPC) signal. We honor GPC signals as an opt-out of sale and sharing for cross-context behavioral advertising.

To submit a CTDPA rights request: email privacy@arcasavings.com with the subject line “CTDPA Rights Request” and a description of your request. We will verify your identity and respond within 45 days, with a possible 45-day extension if reasonably necessary. If we deny your request, you may appeal by replying to our denial email. If your appeal is denied, you may contact the Connecticut Attorney General’s office.

Note on Thresholds: The CTDPA currently applies to controllers processing personal data of 35,000 or more Connecticut consumers (effective July 1, 2026). Arca may not currently meet this threshold, but we are committed to honoring these rights regardless of whether we are technically obligated to do so.

8c. California Residents — CCPA / CPRA

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the rights to know, delete, correct, and opt out of the sale or sharing of your personal information. As noted above, Arca does not sell or share personal information. To exercise your California rights, contact privacy@arcasavings.com.

8d. Other State Residents

Residents of Virginia (VCDPA), Colorado (CPA), Texas, Oregon, Montana, and other states with comprehensive privacy laws have similar rights to access, correct, delete, and port their personal data, and to opt out of targeted advertising and data sales. Contact privacy@arcasavings.com to exercise these rights.

9. Children’s Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from anyone under 13. The Service is also not directed to individuals under 18 in connection with any financial product recommendations. If you are a parent or guardian and believe your child has submitted information through the Service, please contact us at privacy@arcasavings.com, and we will delete it promptly.

10. Links to Third-Party Sites

The Service contains links to third-party financial institutions and informational websites. This Privacy Policy applies only to the Arca Savings Service. When you navigate to a third-party site, that site’s own privacy policy governs how your information is collected and used. We are not responsible for the privacy practices of third-party sites.

11. Changes to This Privacy Policy

We will update this Privacy Policy as our Service and business practices evolve. Changes we consider material — particularly the introduction of affiliate compensation arrangements, new categories of data collection or sharing, or changes to your legal rights — will be communicated by posting an updated policy on the Service with a new Effective Date and, where we have your email address, by direct email notice.

Your continued use of the Service after the updated policy takes effect constitutes your acceptance of the changes.

12. How to Contact Us

For questions, concerns, or rights requests related to this Privacy Policy, please contact us:

Email — privacy@arcasavings.com

Legal inquiries — legal@arcasavings.com

State of Organization — Connecticut, USA

Response time — We aim to respond to all requests within 45 days