A clear approach to firm information.

Information Arc Echo processes

The public early-access list records a firm name, business email, explicit consent time and acquisition context. It does not create a subscription, authentication account or workspace. After registration, a visitor may separately provide optional product-research answers such as their role, firm size, current workflow, content challenge, desired support and willingness to pay.

For the free Content Blueprint, Arc Echo reads a bounded set of public pages and stylesheets from a website the visitor confirms they are authorised to analyse. It temporarily stores the submitted domain, structured findings, confirmed profile and generated report. Reports that are not emailed are retained for seven days. When a private report link is requested, the structured report remains available for up to 90 days. Arc Echo does not retain the raw website-page copy in its database.

The private workspace may process firm profiles, content drafts, approval decisions, brand assets, imported marketing context and operational notification preferences for invited development users.

Content Blueprint email and consent

A business email is requested only after the visitor has seen a useful Blueprint. If report delivery is requested, Resend receives the email address and private report link in order to send that message. The link is a bearer link: anyone holding it can view and forward the report until it expires or is revoked. The compact PDF executive summary is generated only when requested from the report.

The report form includes an unchecked option to join Arc Echo early access. Selecting it, or using the separate post-delivery action, is an explicit consent choice. Report delivery continues independently if early-access registration fails, and requesting an emailed report alone never supplies marketing consent. Optional research is shown only after registration and is linked through a short-lived grant rather than an anonymously writable lead identifier.

Service analytics

Arc Echo counts successful public-page requests using Cloudflare Analytics Engine. These aggregate records contain the normalised page route, date, referrer domain, country, broad device class and recognised-bot classification. They do not contain an IP address, query string, full referrer, raw browser identifier, cookie or persistent visitor ID and are available only within Cloudflare's rolling analytics window.

Public sales and Insights pages may also load Cloudflare Web Analytics, a privacy-first browser beacon used to understand page views, visits, navigation and website performance. It is not loaded on private Blueprint reports or the authenticated Login, Workspace or Admin service, and Arc Echo does not use it to create a persistent visitor profile.

The Content Blueprint creates a random visitor identifier in local storage and a random session identifier in session storage so Arc Echo can distinguish events, visits and return journeys through the free planning funnel. The visitor identifier expires after 12 months without activity and can be removed by clearing site data. Arc Echo does not use cookies, IP addresses, browser fingerprinting or cross-site identifiers for this purpose.

Blueprint analytics records the normalised firm domain, completed funnel stages, bounded step labels, landing page, referrer domain, first- and latest-touch campaign parameters, broad device and browser class, country when supplied by the hosting network, Blueprint version, processing duration, broad failure category, email-delivery status and any explicit early-access consent time. It does not store website copy, generated report text, access tokens or complete submitted URLs.

When a visitor explicitly joins early access, Arc Echo may link that anonymous Blueprint visitor identifier to the consented sales lead so the Platform Owner can understand the earlier funnel journey. The owner-only Event explorer exposes diagnostic event metadata, not private Blueprint content.

Blueprint funnel records are retained for up to 12 months. Development, automated-test and recognised-bot records are excluded from production metrics. Early-access consent is never inferred from Blueprint use or report delivery.

Authenticated workspace activity records a throttled last-seen time and selected product milestones, such as onboarding completion, content creation, review requests and publishing. Workspace visits are limited to one event per user in each 15-minute period and product events are retained for up to 12 months. These records support aggregate product, adoption and reliability reporting; the owner dashboard does not expose draft text, imported source content, private assets or approval comments.

Blueprint firm validation

Blueprint funnel records are retained for up to 12 months. The Platform Owner can review activity grouped by normalised submitted firm domain to validate demand, manually classify relevant UK advice firms and reversibly exclude internal, duplicate or irrelevant activity from firm-level validation counts. Development, automated-test and recognised-bot records remain excluded from production validation metrics. Anonymous session totals are not changed by these manual firm exclusions.

The owner-only view may show the latest business email only while that address is separately retained for a requested Blueprint delivery or a consented early-access record. It does not copy the address or optional research answers into analytics or extend their retention. An email-submitted flag can remain after the address is no longer available, and early-access consent is never inferred from Blueprint use or report delivery.

Service providers

Configured deployments may use Supabase for authentication, private storage and Content Blueprint funnel measurement, OpenAI for structured website interpretation and content planning, Resend for requested report and operational email, and Calendly for signed-in support bookings. Website material supplied to OpenAI is treated as untrusted evidence rather than instructions and is used to prepare the requested findings and plan. Stripe remains configured for future launch work but is not used by the public Blueprint or early-access list.

Control and contact

Members control personal reminders and operational-email categories in Login & Security. To update or remove early-access details, withdraw consent, revoke a Blueprint link, or ask a data question, email hello@arcecho.co.uk.