Privacy Policy

• Identity data — name, email address, and Microsoft Entra ID account details when you sign in to the product.
• Usage data — approval requests you submit or act on, comments, audit trail entries, and role assignments within the app.
• Files — documents attached to approval requests, stored in private cloud object storage.
• Technical data — basic logs such as timestamps and error information needed to operate and secure the service.
• Marketing site — if you email us or submit a demo request, we process the contact details you provide.

We use this information to:

• Authenticate you via Microsoft and operate approval workflows
• Send Teams notifications related to requests assigned to you
• Provide audit trails and admin controls for your organisation
• Secure, troubleshoot, and improve the service
• Respond to demo and sales enquiries

Depending on your organisation’s configuration, Chainline may use Microsoft Graph to read directory profile information, support people search, and send Teams chat messages with deep links back to the app. Access is limited to the permissions consented by your tenant administrators.

We do not sell personal information. Data may be processed by subprocessors that host infrastructure (for example application hosting, database, and object storage) and by Microsoft as part of your organisation’s Microsoft 365 estate. In dedicated deployments, customer data remains under the customer’s tenant and deployment boundaries.

Request, file, and audit data are retained according to the customer’s deployment and contractual terms. Marketing enquiry data is retained only as long as needed to respond and manage the relationship.

We use Microsoft SSO, role-based access controls, HTTPS, private object storage, and short-lived signed file URLs. See our Security overview for more detail.

Privacy questions: hello@arcloops.io