Privacy Policy

Last updated: April 2026

Overview

ArrowShield, Inc. ("ArrowShield," "we," "our," or "us") provides an AI Security Posture Management platform. This Privacy Policy explains what information we collect, how we use it, and the choices you have with respect to your information.

Information we collect

We collect information in the following ways:

Information you provide. When you sign up for our waitlist, request a demo, or contact us, we collect your name, email address, company name, job title, and any other information you choose to provide.

Platform data. When you use our product, we collect data about your AI agent configurations, security events, and usage patterns. This data is used solely to operate and improve the platform and is never used to train third-party AI models.

Automatically collected data. We collect standard web analytics data including IP address, browser type, pages visited, and time spent on pages. We use Google Analytics and Vercel Analytics for this purpose.

How we use your information

  • To provide and operate our platform and services
  • To communicate with you about your account and our product
  • To send product updates and security notifications
  • To analyze and improve our platform
  • To comply with legal obligations

Data sharing

We do not sell your personal information. We share your information only with:

  • Service providers who help us operate our platform (under data processing agreements)
  • Law enforcement or regulators when required by applicable law
  • Acquirers or successors in the event of a merger or acquisition

Data security

We implement industry-standard security measures including encryption in transit and at rest, access controls, and regular security reviews. See our security page for details. No system is perfectly secure; if you believe your information has been compromised, contact us at security@arrowshield.io.

Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data. To exercise these rights, contact us at privacy@arrowshield.io. We will respond within 30 days.

If you are in the European Economic Area, you have rights under the GDPR including the right to object to processing and the right to data portability. If you are in California, you have rights under the CCPA.

Data retention

We retain personal information for as long as necessary to provide our services and comply with legal obligations. When you close your account, we delete or anonymize your personal data within 90 days, except where retention is required by law.

Contact

Questions about this policy? Email privacy@arrowshield.io. ArrowShield, Inc. is located in Austin, Texas.