Skip to content

Privacy

Privacy policy.

The short version: we collect what we need to reply to you, build and host your site, and run this website. We don't sell any of it, and you can ask us to see, fix, or delete it.

Last updated · September 6, 2026

Who we are

0ARCH is a software studio based in Miami, Florida, operated by Joseph Rodriguez. We are the controller of the information described here. This policy covers the website at 0arch.io, including the website offer sold at 0arch.io/site. Apps we publish (Sayo, 0Daily, Deadweight) have their own policies on their own pages. Questions or requests: privacy@0arch.io.

What we collect and why

Contact form. Your name, email, and any optional company, phone, website, timeline, project type, or description you submit. We use it to evaluate and reply to your inquiry.

Chat assistant.The messages you type. Conversations are stored to operate and improve the assistant and to follow up if you ask us to. A necessary, HTTP-only cookie keeps your chat session together for up to 30 days. Contact details are collected only through the separate handoff form after you choose to send it. Please don't put personal or sensitive information in chat.

Website orders. If you buy a website, we collect your business name, your name, your cell number, your email, what your business does, anything you want on the site, up to six photos, and your domain choice. We use them to build, launch, host, and edit your site, to text you about your order, and to send receipts. We keep the photos and answers for as long as we host your site plus 90 days.

Payments.Card details are entered directly into Stripe's secure form and go to Stripe, not to us. We receive a payment reference, the card brand and last four digits, your email, and a record that you accepted the website terms (date, time, and the IP address you accepted from). Stripe keeps your card on file so the monthly care plan can be charged, as described in the terms.

Text messages. We text order customers about their order only: preview links, questions, launch, and edits. We do not send marketing texts. Reply STOP to any message to opt out; we will then contact you by email instead.

Analytics.We use Google Analytics to measure site use. We do not run advertising tags and do not use your data for ad targeting. In the EU, EEA, UK, and Switzerland the tag loads only after you choose "Accept"; elsewhere it is on by default and you can turn it off at any time via "Privacy choices" in the footer. When active, Google may set cookies and collect pages visited, device and browser details, referral or campaign information, and approximate location. Details are in our cookie policy.

Security and attribution. We process IP address, user agent, referrer, timestamps, and UTM campaign values for abuse prevention, rate limiting, request routing, and understanding where an inquiry came from. Cloudflare Turnstile processes browser and device signals to tell people from automated traffic.

Preferences.Theme, language, and consent choices are stored in your browser. They stay on your device and don't identify you.

Our legal basis

We process your information to perform a contract with you (replying to an inquiry, building and hosting your site, taking payment), for our legitimate interests (securing the site, measuring what works, keeping business records), to meet legal obligations (tax and accounting records), and, for analytics in regions that require it, with your consent.

Who we share it with

We share information only with providers that help us run the service, and only what they need:

  • Cloudflare: hosting, storage of forms, chats, orders and photos, bot protection, and the AI model behind the chat assistant.
  • Stripe: payment processing, receipts, and the monthly care plan.
  • Google: Analytics (when active) and Workspace email for notifications and replies.
  • A domain registrar, to register your domain in your name.
  • A text-messaging carrier, to send order texts to the number you gave us.

These providers may process data outside your state or country under their own contractual safeguards. We also disclose information if the law requires it, to protect our rights or safety, or to a successor if 0ARCH is sold or reorganized (we would tell you). We do not sell your personal information and we do not share it for targeted advertising.

How long we keep it

WhatUsed forKept
Contact form inquiriesReplying, follow-upUp to 2 years after last contact
Chat transcriptsOperating and improving the assistantUp to 12 months, or deleted with the linked inquiry
Website order details and photosBuilding, hosting, editing your siteWhile we host the site, plus 90 days
Payment records and receiptsAccounting, tax, disputes7 years, as the law requires
Terms acceptance recordProof of what you agreed to7 years
Security logs (IP, user agent)Abuse preventionUp to 90 days
Analytics dataMeasuring site usePer Google Analytics settings, 14 months

You can ask us to delete earlier. Legal, tax, or security obligations may require us to retain limited records longer.

Your rights and choices

Wherever you live, you can ask what we have about you, ask us to correct it, ask us to delete it, ask for a copy in a usable format, or object to how we use it. Email privacy@0arch.io from the address you used with us; we may ask a question to confirm it is you. We answer within 30 days and we do not treat you differently for asking. If you are in the EU, UK, or Switzerland you can also complain to your local data protection authority. If you are in California or another U.S. state with a privacy law, the same rights apply and you may use an authorized agent.

Analytics is optional. Choose "Decline" in the consent banner or use "Privacy choices" in the footer at any time. The site's core features work without analytics cookies. We honor the Global Privacy Control browser signal as an opt-out of analytics.

Texts: reply STOP. Care plan: cancel at 0arch.io/site/cancel.

Security

Everything travels over HTTPS. Data is stored on Cloudflare infrastructure with access limited to the people who need it, behind passkey or password-plus-session login with an audit log. Card numbers never touch our systems. No method is perfect; if a breach affects your information we will tell you and any client we act for without undue delay, and within the time the law requires.

Children

The site is for businesses and isn't directed at children under 13 (or under 16 where that is the rule). We don't knowingly collect their information; if you think we have, email us and we will delete it.

Changes

If this policy changes, we'll update this page and the date at the top. Material changes get a clear note here, and order customers get an email.