Data Protection

Privacy Policy

Effective Date: November 1, 2026 · Last Updated: November 2026

1. Information We Collect

When you interact with ArcherITS, request a B2B SaaS deployment, or utilize our API routing middleware, REDSTONE ARCHER HOLDCO LLC collects:

• Corporate Identity & Contact Details: Company legal name, authorized representative name, business email address, and physical billing address.
• Technical & Telemetry Data: IP addresses, browser user-agent, operating system, API request headers, endpoint latencies, and system diagnostics required for network health and security monitoring.
• API Provisioning Credentials: Authenticated client API tokens (stored with one-way salted hashing or AES-256 encryption at rest).

2. How We Use Your Information

We use collected data solely for legitimate business operations:

• To provision and maintain dedicated compute nodes, cross-connect fiber routing, and telemetry streams;
• To authenticate API calls and protect infrastructure against denial-of-service (DDoS) and unauthorized intrusion;
• To generate B2B invoicing and communicate service announcements or technical SLAs;
• To comply with legal obligations, corporate recordkeeping, and data protection statutes.

3. Third-Party Service Providers & Sub-Processors

We do not sell, rent, or monetize your corporate information. We engage select, tier-1 sub-processors strictly to deliver infrastructure:

• Paddle.com (Merchant of Record): Manages international payment execution, automated sales tax/VAT calculation, and fraud monitoring. Subject to Paddle's Privacy Policy at paddle.com/legal/privacy.
• Equinix Data Centers (CH2, Chicago): Physical facility co-location and dedicated rack security.
• Cloudflare: DNS routing, TLS encryption, and edge DDoS mitigation.

4. Data Security & Encryption Standards

ArcherITS implements institutional-grade physical and electronic safeguards:

• All web and API traffic is strictly encrypted using TLS 1.3 / HTTPS.
• Direct Equinix CH2 cross-connect routing operates inside physically isolated cages with biometric access controls.
• Telemetry feeds are processed in volatile RAM with zero persistent trade order logging on public cloud disks.

5. International Compliance (GDPR, CCPA, & Global Rights)

Under global data protection frameworks (including the European Union General Data Protection Regulation and the California Consumer Privacy Act), clients and authorized contacts have the right to:

• Request access to the personal data we hold about you;
• Request the rectification of inaccurate or incomplete corporate records;
• Request the erasure of your personal data ("right to be forgotten"), subject to statutory tax and financial retention laws;
• Object to or restrict the processing of your technical data.

To exercise any of these rights, transmit a request to info@archerits.com. We respond to all verified inquiries within thirty (30) days.

6. Cookies and Tracking Technologies

Our website utilizes only essential technical session cookies required for portal authentication and CSRF defense. We do not deploy third-party advertising trackers, cross-site profiling scripts, or social network tracking pixels.

7. Data Controller Contact Information

The designated Data Controller responsible for your data under this policy is: