Legal Templates
Privacy policy paragraph
Copy-paste language disclosing the embedded ARCY AI SDK to your end users.
If you embed the ARCY AI SDK in your product, your end users' behavioral and session data is processed by ARCY AI, a third-party sub-processor acting on your instructions. Most privacy policies need a paragraph disclosing this. The text below is a starting point, not a finished document.
This is boilerplate, not legal advice. Have your own counsel review it before publishing, and adapt it to match how you've actually configured ARCY AI (which traits you pass, whether message-content storage is on, which AI modes are enabled).
What to paste
Third-Party Product Assistance (ARCY AI)
[Your Company Name] uses ARCY AI, a third-party service, to provide in-product
guidance, assistance, and support inside [Your Product Name]. When you use
[Your Product Name], ARCY AI's software collects certain data about your
session and interactions on our behalf, including:
- Session timestamps and the pages you visit within [Your Product Name]
- Structural details of your interactions (for example, that you clicked a
button, submitted a form, or navigated to a page), described by element
type, position, and label, not by the values you typed
- Progress through in-product guided flows, if used
- Conversation content, if you interact with the ARCY AI-powered assistant
("[Your Assistant Name]")
- An identifier and any account details we choose to share with ARCY AI
(such as [list the specific traits you pass, e.g. plan name, role])
ARCY AI masks sensitive input (such as passwords, form field values, and
patterns resembling emails, government IDs, or payment card numbers) in your
browser before this data is ever transmitted. ARCY AI acts as our
data processor for this purpose and does not sell your data or use it to
train its own AI models. For details on how ARCY AI itself processes data,
including your rights to access, correct, delete, restrict, port, or object
to this processing, see ARCY AI's own Privacy Policy at
https://arcyai.com/privacy (and, for data subjects in Turkey,
https://arcyai.com/kvkk).
You can ask us to disable this functionality for your account by contacting
[your support contact].Notes on filling this in
- Replace every
[bracketed]placeholder. If you haven't named the in-product assistant, drop that sentence or use a generic phrase like "the in-product assistant." - List only the traits you actually pass through
ARCYProvider(userId,role, and any custom traits). Don't describe data you don't send. - If you've turned off message-content storage in your ARCY AI workspace settings, say so, since it changes what's retained. See What ARCY collects for the underlying behavior.
- ARCY AI's own compliance posture (GDPR, CCPA, KVKK) is tracked honestly, not overstated, at Certification status. Don't claim a certification on ARCY AI's behalf that isn't listed there.