Privacy policy
What we collect, why we collect it, and the control you keep over it — written to be read, not skimmed past.
Last updated: 3 October 2026
1Who we are
WholeArc Intelligence ("WholeArc", "we", "us", "our") is WholeArc’s practice for studying intelligent systems, including agents, memory, integrations, search and the products built around them. We are based in Bangalore, India. This policy explains what personal data we collect when you visit www.wholearc.ai or write to us, and what we do with it.
We act as a data controller for personal data collected through this website and in correspondence with us. If we ever process personal data on someone else’s behalf, that processing is governed by a separate written agreement rather than by this policy.
2Information we collect
We keep collection to what we actually need:
- Information you give us. Your name, email address, and anything you write in the contact form or an email, including any other details you choose to share.
- Material you send us. Notes, links, documents, or other material you choose to share when you write to us.
- Technical information. IP address, browser and device type, operating system, referring page, and pages viewed, collected automatically when you visit the site.
- Communications. Records of correspondence with us.
We do not knowingly collect sensitive personal data (such as health, biometric, or financial account data) through this website, and we ask that you do not send it to us through web forms.
3How we use your information
- To read and reply to your message, and to continue a conversation you have started with us.
- To operate, secure, and improve this website.
- Where you have opted in, to send you occasional writing or announcements. Every such email carries an unsubscribe link.
- To comply with legal, tax, accounting, and regulatory obligations.
We do not sell your personal data, and we do not use what you send us to train publicly available artificial intelligence models.
4Legal bases for processing
Where the EU or UK GDPR applies, we rely on the following bases: legitimate interests (to reply to you, run and secure this website, and understand site usage), consent (for optional cookies and email updates), and legal obligation (for tax and statutory records). Where India's Digital Personal Data Protection Act, 2023 applies, we process personal data on the basis of your consent or a legitimate use permitted under that Act.
5Cookies and analytics
This site uses cookies that are strictly necessary to make pages load and function correctly. It also uses Google Analytics 4 to understand which pages are useful — this sets cookies in your browser and sends Google a record of the pages you view, your approximate location derived from a truncated IP address, and basic device and browser information.
Analytics is off until you accept it. No analytics script is loaded and no analytics cookie is set unless you choose Accept on the consent banner. Your choice is stored locally in your browser, not on our servers, and we do not use analytics data to build advertising profiles or share it with advertising networks.
You can change your mind at any time — reopen the cookie banner to grant or withdraw consent. You can also block or delete cookies through your browser settings, though blocking strictly necessary cookies may break parts of the site.
6Third parties and sub-processors
We share personal data only with providers who help us run this website and our correspondence, and only to the extent they need it. These typically include website and email hosting, analytics, and cloud infrastructure. To display this site, your browser also loads fonts from Google Fonts, which means Google receives your IP address and browser details when you visit. Each is bound by contract to protect the data and to use it only on our instructions. Messages sent through the contact form on this site are delivered to our inbox by FormSubmit (formsubmit.co), which receives the name, email address and message you enter in order to forward them to us.
We may also disclose information where we are legally required to do so, or where it is necessary to establish, exercise, or defend legal claims. If our business is reorganised or acquired, data may transfer as part of that transaction, subject to this policy.
7Artificial intelligence tools and your content
Our work involves studying and building with intelligent systems, including third-party models. We do not paste personal data or confidential material you send us into consumer artificial intelligence tools. Where we use a third-party model provider, we use tiers that contractually exclude the data from provider training.
Artificial intelligence outputs can be inaccurate. Anything we publish or send you that was produced with artificial intelligence assistance is reviewed by a person first.
8International transfers
We are based in India and use service providers in other countries, so your data may be processed outside your home jurisdiction. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses together with any additional measures the transfer requires.
9How long we keep it
Messages and correspondence are kept for up to 24 months after our last exchange, unless the law requires us to keep them longer. Website analytics data is kept in aggregated form. When data is no longer needed, we delete or anonymise it.
10Security
We use access controls, encryption in transit, least-privilege permissions, managed devices, and vendor review to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal data and poses a risk to you, we will notify you and the relevant authority as required by law.
11Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, ask us to delete it, restrict or object to certain processing, receive it in a portable format, withdraw consent, and nominate another person to exercise your rights in the event of death or incapacity (under India's DPDP Act).
To exercise any of these, email hello@wholearc.com. We will respond within the timeframe the applicable law requires, and we may need to verify your identity first. If you are unhappy with our response, you may complain to your local supervisory authority or, in India, to the Data Protection Board.
12Children
This website is intended for adults and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.
13Changes to this policy
We may update this policy as our work or the law changes. The revision date at the top of this page always reflects the current version. Material changes will be flagged on this page before they take effect.
14Contact us
Questions, requests, or complaints about privacy can be sent to:
WholeArc Intelligence
Bangalore, India
hello@wholearc.com