Privacy Policy

1. Introduction

Agentic Leisure ("we", "us", "our") operates Arcus and is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. This policy complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy legislation.

2. Information We Collect

We collect the following types of information:

Account Information

• Your name and email address when you register
• Your restaurant or property name
• Password (stored encrypted — we never see your plain-text password)

Business Data You Import

• Booking and occupancy history
• Staff profiles and role information
• Services, packages, and pricing
• Property details and operating hours

Usage Data

• Number of forecasts generated
• Pages visited and features used
• Date and time of logins

Payment Information

• Credit pack purchases and transaction history
• Your Stripe customer ID
• We do not store your card number, expiry date, or CVC — all card data is handled exclusively by Stripe

3. How We Use Your Information

We use your information solely to provide and improve the Service:

• To generate AI-powered operations forecasts using your business data
• To manage your account and credit balance
• To process payments through Stripe
• To send transactional emails such as payment confirmations
• To monitor platform health and fix technical issues
• To improve the accuracy and quality of our AI forecasting

4. How We Share Your Information

We do not sell your personal information or business data to any third party. We share information only in the following limited circumstances:

• Anthropic: Your business data is sent to Anthropic's Claude API to generate forecasts. Anthropic processes this data under their own privacy policy and does not use your data to train their models.
• Stripe: Payment information is shared with Stripe to process transactions. Stripe is PCI-DSS compliant and handles all card data securely.
• Supabase: Your data is stored on Supabase's secure, encrypted database infrastructure.
• Legal requirements: We may disclose information if required by law or to protect our legal rights.

5. Data Storage and Security

Your data is stored on secure, encrypted servers provided by Supabase. We implement industry-standard security measures including encrypted connections (HTTPS), encrypted data at rest, and access controls. However, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

6. Data Retention

We retain your account data and business imports for as long as your account is active. If you close your account we will delete your personal information within 30 days, except where retention is required by law. Anonymised usage statistics may be retained indefinitely.

7. Your Rights Under PIPEDA

As a Canadian resident you have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you
• Correction: You may request that we correct inaccurate information
• Withdrawal of consent: You may withdraw consent to our use of your data, which will result in account closure
• Deletion: You may request deletion of your account and associated data

To exercise any of these rights, contact us at support@agenticleisure.com.

8. Cookies and Analytics

Arcus uses essential cookies to maintain your login session. We do not use advertising or tracking cookies. We may use analytics tools to understand how the Service is used in aggregate — this data is anonymised and cannot be used to identify individual users.

9. Children's Privacy

The Service is not directed at persons under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice within the Service. Your continued use of Arcus after changes take effect constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact our Privacy Officer at:

You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca if you believe your privacy rights have been violated.