A clear approach to firm information.

Information Arc Echo processes

The public waitlist records a firm name, business email, consent time and optional plan-interest context. It does not create a subscription, authentication account or workspace.

For the free Content Blueprint, Arc Echo reads a bounded set of public pages and stylesheets from a website the visitor confirms they are authorised to analyse. It temporarily stores the submitted domain, structured findings, confirmed profile and generated report. Reports that are not emailed are retained for seven days. When a private report link is requested, the structured report remains available for up to 90 days. Arc Echo does not retain the raw website-page copy in its database.

The private workspace may process firm profiles, content drafts, approval decisions, brand assets, imported marketing context and operational notification preferences for invited development users.

Content Blueprint email and consent

A business email is requested only after the visitor has seen a useful blueprint preview. If report delivery is requested, Resend receives the email address and private report link in order to send that message. The link is a bearer link: anyone holding it can view and forward the report until it expires or is revoked. The compact PDF executive summary is generated only when requested from the report. Joining the pre-launch waitlist is a separate, optional consent and is not required to receive the Blueprint.

Service analytics

Arc Growth counts successful public-page requests using Cloudflare Analytics Engine. These aggregate records contain the normalised page route, date, referrer domain, country, broad device class and recognised-bot classification. They do not contain an IP address, query string, full referrer, raw browser identifier, cookie or persistent visitor ID and are available only within Cloudflare's rolling analytics window.

Public sales and Insights pages may also load Cloudflare Web Analytics, a privacy-first browser beacon used to understand page views, visits, navigation and website performance. It is not loaded on private Blueprint reports or the authenticated Login, Workspace or Admin service, and Arc Growth does not use it to create a persistent visitor profile.

The Content Blueprint also creates a random session identifier in the browser's session storage so Arc Growth can understand where firms leave the free planning journey. It records the normalised firm domain, completed funnel stages, landing page, referrer domain, campaign parameters, broad device class, country when supplied by the hosting network, Blueprint version, broad failure category, email-delivery status and any explicit waitlist-consent time. The identifier ends with the browser session and is not used to recognise a visitor across later sessions or other websites.

Blueprint funnel records are retained for up to 12 months and are available only to the Platform Owner through protected reporting. They do not contain the visitor's IP address, raw browser identifier, complete submitted URL, business email address, website copy, generated Blueprint text or private report access token. Development, automated-test and recognised-bot records are excluded from production metrics. Waitlist consent is never inferred from Blueprint use or report delivery.

Authenticated workspace activity records a throttled last-seen time and selected product milestones, such as onboarding completion, content creation, review requests and publishing. Workspace visits are limited to one event per user in each 15-minute period and product events are retained for up to 12 months. These records support aggregate product, adoption and reliability reporting; the owner dashboard does not expose draft text, imported source content, private assets or approval comments.

Blueprint firm validation

Blueprint funnel records are retained for up to 12 months. The Platform Owner can review activity grouped by normalised submitted firm domain to validate demand, manually classify relevant UK advice firms and reversibly exclude internal, duplicate or irrelevant activity from firm-level validation counts. Development, automated-test and recognised-bot records remain excluded from production validation metrics. Anonymous session totals are not changed by these manual firm exclusions.

The owner-only view may show the latest business email only while that address is separately retained for a requested Blueprint delivery or a consented waitlist record. It does not copy the address into analytics or extend its retention. An email-submitted flag can remain after the address is no longer available, and waitlist consent is never inferred from Blueprint use or report delivery.

Service providers

Configured deployments may use Supabase for authentication, private storage and Content Blueprint funnel measurement, OpenAI for structured website interpretation and content planning, Resend for requested report and operational email, and Calendly for signed-in support bookings. Website material supplied to OpenAI is treated as untrusted evidence rather than instructions and is used to prepare the requested findings and plan. Stripe remains configured for future launch work but is not used by the public Blueprint or waitlist.

Control and contact

Members control personal reminders and operational-email categories in Login & Security. To update or remove waitlist details, withdraw consent, revoke a Blueprint link, or ask a data question, email hello@arcecho.co.uk.