Privacy Policy

1. Who We Are

Archuz ("we," "us," or "our") is an independent exam preparation service for AI governance and privacy professionals. We offer mock exams, study guides, and related resources for IAPP certifications (AIGP, CIPP/E, CIPM) and ISO 42001. Our website is located at www.archuz.com.

For any privacy-related questions, contact us at hello@archuz.com.

2. Information We Collect

Information you provide directly

• Email address — when you join the waitlist, create an account, or make a purchase.
• Payment information — handled entirely by Paddle. We never see or store your card details. Paddle's privacy policy applies to payment data.
• Communications — if you contact us by email, we retain that correspondence.

Information collected automatically

• Usage data — pages visited, time on site, referral source, and similar analytics, collected via Google Analytics 4 (GA4).
• Device and browser data — browser type, operating system, IP address (anonymised where required by law).
• Cookies — GA4 sets cookies to distinguish visitors and track sessions. See Section 6 for cookie details.

3. How We Use Your Information

We use the information we collect to:

• Deliver products and send purchase confirmations and download links.
• Send waitlist and product launch communications (you can unsubscribe at any time).
• Provide customer support when you contact us.
• Understand how visitors use the site so we can improve it (via GA4 analytics).
• Comply with legal obligations.

We do not use your information for automated profiling or decision-making that produces legal or similarly significant effects.

4. How We Share Your Information

We do not sell your personal information. We share data only in the following limited circumstances:

• Paddle — payment processing. Your payment information is handled entirely by Paddle.com Market Limited, our Merchant of Record. Paddle collects and processes payments on our behalf.
• Google Analytics — anonymised usage analytics. Google may process data in the US under applicable transfer safeguards.
• Legal obligations — we may disclose information if required by law, court order, or to protect our legal rights.
• Business transfers — if Archuz is acquired or merged, your data may transfer as part of that transaction. We will notify you in advance.

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or UK, our legal bases for processing your personal data are:

• Contract — to deliver the products and services you purchase.
• Legitimate interests — to send you relevant product updates and improve the site, where this does not override your rights.
• Consent — for waitlist communications, which you can withdraw at any time.
• Legal obligation — where required by applicable law.

6. Cookies

We use the following cookies:

• Google Analytics (_ga, _ga_*, _gid) — persistent analytics cookies that help us understand how visitors interact with the site. These are set by GA4 and expire after 2 years (_ga) or 24 hours (_gid).

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, or by adjusting your browser's cookie settings.

7. Data Retention

We retain your email address and order records for as long as necessary to provide our services and comply with legal obligations — typically up to 7 years for financial records. Waitlist records are deleted within 12 months of launch or upon your request, whichever comes first.

You can request deletion of your data at any time by emailing hello@archuz.com.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Data portability (receive your data in a structured format).
• Withdraw consent at any time (without affecting the lawfulness of prior processing).

To exercise any of these rights, email hello@archuz.com. We will respond within 30 days.

9. Data Security

We use industry-standard security measures including HTTPS encryption for all data in transit. Payment processing is handled by Paddle, our Merchant of Record, which is PCI-DSS compliant. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but take reasonable steps to protect your information.

10. Children's Privacy

Archuz is intended for professional adults preparing for professional certifications. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. For material changes, we will notify waitlist and registered users by email where practical.

12. Contact

For any privacy questions or to exercise your rights:

Archuz
Email: hello@archuz.com