Privacy Policy

ARCFORGE, LLC ("ARCFORGE," "we," "us," or "our") operates Setup Vault (the "App"). This policy explains what personal information we collect when you use the App, why we use it, how it is shared, and the choices available to you.

Setup Vault is a tool for storing and sharing CNC setup information. You should not enter sensitive information that is not needed to use the App.

Account and identity:

• Email address and sign-in provider information.
• Your name and profile image when supplied by Google or Apple Sign-In.
• Your Firebase Authentication user ID, which is an internal identifier.

Setup and organization data:

• CNC setups, tool lists, cutting data, notes, drawings, and other content you create or upload.
• Photos and other files stored in Firebase Cloud Storage, including metadata needed to display them.
• Organization membership, invitations, roles, and audit or activity information associated with shared content.
• Locally stored drafts, preferences, and exported PDFs on your device.

Purchases and subscriptions:

• RevenueCat customer identifiers, subscription status, entitlements, product identifiers, and renewal or expiration information.
• Transaction and receipt information provided by the Apple App Store and, where applicable, Google Play. Apple or Google processes your payment. We do not receive your full payment card number.

Device and technical information:

• Device model, operating-system version, and app version when needed to support the App.
• Technical logs needed to keep authentication, synchronization, and subscription features working. These logs may be associated with an account or device and are not necessarily anonymous.

AI features:

• Images submitted for OCR, including text or other content visible in those images. An image you choose to save remains part of your Setup Vault files. An image sent only for OCR is processed to return text.
• Voice recordings and audio submitted for voice-note analysis, resulting transcripts, any device transcript supplied as a cross-check, and summaries or uncertainty markers returned by the service.
• Copilot prompts and messages, together with setup context you choose to provide. This context can include setup names, tools, materials, notes, and cutting data, plus generated responses.

We use information to:

• Authenticate you and secure your account.
• Store, back up, and synchronize setups and files through Firebase Firestore and Firebase Cloud Storage.
• Run OCR, voice transcription and summarization, and Copilot features through Replit-managed OpenAI-compatible AI services. These features use the content needed to answer your request. Do not submit information you do not want processed by an AI service.
• Provide organization collaboration, invitations, permissions, and customer support.
• Confirm purchases and maintain subscription entitlements through RevenueCat and the relevant app store.
• Investigate errors, prevent abuse, and improve reliability.
• Send service messages such as invitations, security notices, and responses to support requests.

We do not sell personal information, use it for targeted advertising, or share it with third parties for their own marketing.

We share information only as needed to provide Setup Vault, comply with law, or protect the App and its users:

• With service providers acting on our instructions, including Google Firebase for Authentication, Firestore, Cloud Storage, and technical operations; RevenueCat for subscription management; Replit-managed OpenAI-compatible AI services for OCR, voice processing, and Copilot; and Resend for email delivery.
• For invitations and other service emails, Resend receives the recipient email address and the email content needed to deliver the message. This can include the inviter, organization name, role, and links.
• With members of an organization when you place content in that organization, according to its roles and permissions.
• With Apple or Google to validate transactions and manage subscriptions.
• When required by law or reasonably necessary to prevent fraud, enforce our rights, or protect users and the public.
• In a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

These providers process information under their own privacy policies and service terms. Processing may occur in the United States or other countries where we or our providers operate. We do not represent that every transfer is to a particular location or that every provider offers the same deletion timeline.

We generally keep account, setup, and file data while your account or the relevant organization remains active. You can delete content using the App where those controls are available, and you can request account or personal-data deletion by contacting us. We process requests within a reasonable period, but timing can vary based on the data, backups, technical dependencies, and applicable law. We do not promise a fixed deletion period. Information may remain where needed for legal, security, fraud-prevention, dispute-resolution, or financial-record purposes.

AI request content is sent to the relevant Replit-managed OpenAI-compatible service to fulfill the request. Audio files are handled as temporary input by our analysis endpoint rather than as Setup Vault setup files. Transcripts, summaries, and Copilot conversations may remain on your device or in your account if you save them. Provider-side logs, safety records, or backups may persist according to the provider's terms and retention practices. Deleting content in Setup Vault may not immediately delete those provider records.

Content owned by an organization may remain with that organization after an individual member leaves or deletes their account. An organization owner cannot delete their account while they own an organization. Ownership must first be transferred to another eligible member. Contact us if an owner cannot complete that transfer.

Deleting your Setup Vault account does NOT cancel an Apple subscription. Manage or cancel an Apple subscription in your Apple ID subscription settings. Deleting the App or account does not stop Apple billing.

Account deletion requests deletion of the matching RevenueCat customer profile. RevenueCat and Apple may retain transaction records as required for accounting, refunds, fraud prevention, or law.

Data is encrypted in transit using TLS, and Firebase data is encrypted at rest by Google. Firebase Security Rules restrict setup and file access to the authenticated account or authorized organization members. No internet service can guarantee absolute security.

Depending on where you live, you may request access to, correction of, or deletion of your personal information, or object to or restrict certain processing. To make a request, email us from the address associated with your account. We may need to verify your identity and may retain information where required by law.

Setup Vault is not directed to children under 13 or the applicable minimum age where the user lives. We do not knowingly collect personal information from children.

We may update this policy and will change the date above. We will provide notice of material changes where practical.

Questions, privacy requests, and deletion requests may be sent to support@setupvault.us.

This policy is provided by ARCFORGE, LLC. Setup Vault uses Apple's standard licensed application end-user license agreement. This page is not a custom Terms of Use.