Legal
This Privacy Policy describes how Archiom.io ("Archiom", "we", "us", or "our") collects, uses, shares, and protects personal information when you visit our website, use our services, or interact with our products. This policy applies to all visitors, users, and customers of our platform worldwide.
When you visit the Archiom website, we automatically collect certain information about your device and browsing activity. This includes your IP address, browser type and version, operating system, referring URL, pages visited, date and time of visit, and general geographic location derived from your IP address. We use cookies and similar tracking technologies to collect this data.
If you arrive at Archiom through a referral link, affiliate program, or partner integration, we may collect information about the referring source. This data helps us understand how users discover our platform and allows us to properly attribute referrals to our partners.
When you create an Archiom account, we collect information you provide during registration, including your name, email address, company name, website URL, and billing information. If you sign up through a third-party authentication service (such as Google or GitHub), we receive basic profile information from that service.
Our Session Recording feature captures visitor interactions on client websites, including mouse movements, clicks, scrolls, and page navigation. All session recordings automatically mask sensitive form fields such as password inputs, credit card fields, and other fields marked as sensitive. Clients can configure additional masking rules to protect visitor privacy.
We use the information we collect to provide, maintain, and improve our services; to process transactions and send related notifications; to respond to your inquiries and support requests; to send marketing communications (with your consent); to detect and prevent fraud, abuse, or security incidents; and to comply with legal obligations.
When our clients install the Archiom tracking script on their websites, we collect data about their website visitors on their behalf. This data is owned by our clients and processed by Archiom as a data processor. We do not use client visitor data for our own purposes beyond providing the contracted services.
We process client visitor data solely to provide our analytics, heatmap, recording, A/B testing, and survey services. Data is processed in secure data centers with appropriate technical and organizational safeguards. We retain client visitor data according to the retention periods specified in each client's plan.
Archiom is designed to collect behavioral data, not personally identifying information (PII). Our tracking script does not collect names, email addresses, or other PII from client website visitors unless explicitly configured by the client. We strongly recommend that clients configure appropriate data masking to prevent inadvertent PII collection.
Archiom does not track individual visitors across multiple client websites. Each client's data is isolated and segregated. We do not create cross-site visitor profiles or share visitor data between different client accounts.
Client visitor data is retained according to the storage periods included in each plan: Starter plans retain 6 months of recordings storage, Plus plans retain 2 years, and Pro/Enterprise plans retain up to 2 years. Heatmap and analytics data is retained for the lifetime of the client's account. Clients can request deletion of their data at any time.
Archiom operates globally and may transfer personal data to countries other than the one in which it was collected. We ensure that all international data transfers comply with applicable data protection laws, including the use of Standard Contractual Clauses (SCCs) for transfers from the European Economic Area, UK, and Switzerland.
We implement industry-standard security measures to protect personal information, including encryption in transit (TLS) and at rest, regular security audits and penetration testing, access controls and authentication requirements, monitoring and logging of system access, and employee security training. We maintain SOC 2 Type II compliance.
Archiom's services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have inadvertently collected personal information from a child under 16, we will take steps to delete that information as promptly as possible.
The Archiom Review Funnel WordPress plugin is free and open source (GPL v2). It connects your self-hosted site to Archiom Cloud — connection is required for Google Business sync, the cloud dashboard, and cross-device customer/review mirroring. During setup you sign in with Google on archiom.io and receive a site-specific API key (arf_live_…). Customer records, review funnel responses, and Google review data you manage in WordPress are mirrored to your isolated tenant on Archiom Cloud (PostgreSQL, row-level isolation by account). A local copy remains on your WordPress server for performance and wp_mail delivery.
The included Archiom Cloud free tier has usage limits (for example, contacts and monthly review requests); paid Starter, Pro, and Agency plans — when available — raise or remove those limits and unlock cloud email, SMS, AI-assisted replies, and agency features. Plan status is returned to the plugin via our licence API.
The plugin calls archiom.io over HTTPS for account linking, plan entitlements, review sync, and customer sync. We act as a data processor for this mirrored business data; you (the site owner) remain the data controller. Export or delete cloud data from archiom.io/review-funnel/app/settings (Privacy & data) or the plugin Settings → Privacy tab; contact [email protected] to request full tenant erasure.
Google Places / Business Profile data is processed when you connect Google (Archiom-held API key on our servers). Optional BYOK Google usage in the plugin is disclosed in the plugin readme External services section.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by posting a prominent notice on our website or by sending you an email. Your continued use of the service after such changes constitutes your acceptance of the updated policy.
Depending on your location, you may have certain rights regarding your personal information, including the right to access, correct, delete, or port your data, the right to object to or restrict processing, and the right to withdraw consent. To exercise any of these rights, please contact our privacy team at [email protected]. We will respond to all legitimate requests within 30 days.
Archiom respects Do-Not-Track (DNT) browser signals. When we detect a DNT signal from a visitor's browser, we limit the data we collect to essential analytics only. We do not use DNT signals to identify or track individual visitors across websites.