Privacy Policy

1. What this policy covers

This policy explains how ArchonVLabs handles personal information when you visit the website, create an account, purchase Premium access, complete lessons, use ArchonCode, or use features that connect with Omni Terminal.

2. Information we collect

• Account information: your name, email address, account identifier, login status, and authentication events supplied by Auth0.
• Subscription information: Stripe customer, subscription, product and price identifiers; subscription and payment-related status; paid-period end dates; and records of billing notifications needed to update access and handle repeat notifications safely. Your unique ArchonVLabs account identifier is sent to Stripe to link a checkout and subscription to the correct signed-in account. Payment details entered in Stripe checkout or its customer portal are handled by Stripe; ArchonVLabs does not receive or store your complete card number or card security code.
• Learning information: lesson progress, completed labs, saved preferences, and activity needed to operate your dashboard.
• Technical information: IP address, browser type, device information, requested pages, timestamps, and security or error logs.
• Messages: information you include when contacting support or sending feedback.

3. ArchonCode and Omni Terminal data

ArchonCode may save work and mission report drafts in your browser's local storage so they remain available when you return. These platform autosaves are separated by signed-in account on the same browser. Browser storage is not a backup: clearing browser data, using another browser or device, or losing access to the device can make local drafts unavailable. Downloaded project ZIP files stay on your device unless you choose to move or share them. Omni Terminal imports projects into a local, isolated session on your own computer. Do not place real passwords, API keys, payment data, or other confidential information in training projects.

3A. OmniTerminal desktop application

OmniTerminal is the downloadable desktop companion used to run local training projects and security tools. This section applies when you install or use it, in addition to the account, security and privacy-rights information elsewhere in this policy.

• Local projects and tool activity: importing a project gives the application access to the ZIP you select and its extracted training files. Running a backend or tool can process source code, commands, target addresses, request and response content, and terminal output on your computer. Tool output and local logs can contain personal or sensitive information if you include it in a project or command.
• Network connections: a localhost training backend runs on your computer, but not every action in OmniTerminal stays offline. Installing WSL, downloading tools or dependencies, visiting a website, or running a tool against a network address can contact Microsoft, software repositories or the destination you choose. Those services receive connection information, such as your IP address, and any data sent in the request, under their own privacy practices.
• Website accounts and billing: downloading or using the companion does not replace the website's Auth0 sign-in or Stripe subscription management. Account and billing processing is described in the other sections of this policy.
• Files and retention: your original downloaded ZIP, exported files, installed tools and WSL environment may remain on your device after a lab ends. Ending a temporary session is not the same as deleting every related file or uninstalling the application. Review and remove files you no longer need; uninstalling the Windows app may not remove a separately installed WSL environment.
• Support and sharing: if you send us terminal output, screenshots, logs or project files for help, we process the information you provide to investigate and respond. Remove passwords, API keys, authentication cookies, tokens and real personal records before sharing. Contact archonsfeedback@gmail.com for privacy questions or deletion requests concerning information you have sent us.

Use fictional records in training projects. Only inspect systems and traffic you own or have permission to test, and consider what a tool will send or record before running it.

4. How we use information

We use account identifiers, subscription records and learning information to perform our contract with you: signing you in, linking payments to your account, providing Premium access, remembering learning progress and providing subscription management. Our backend checks subscription status and the paid-through time; Auth0 authenticates your identity but does not decide whether you have paid.

We use security and technical records for our legitimate interests in preventing account abuse, maintaining one active sign-in session per account, investigating faults and protecting the service. We retain records required for applicable accounting, tax and other legal obligations. If we introduce optional processing that requires consent, we will ask for that consent separately.

5. Services that process information

Auth0 provides account authentication. Stripe provides payment checkout, subscription billing and the customer portal. ArchonVLabs stores the account-to-subscription link, subscription access state and learning progress in its backend storage. Our hosting and database providers deliver those backend services; the production deployment is designed to use Netlify.

When you choose Settings → Manage Subscription, our backend uses your saved Stripe customer and subscription identifiers to check ownership and request a temporary portal session for your signed-in account. You can manage cancellation, payment methods and invoices in Stripe's portal. Stripe sends verified billing notifications back to ArchonVLabs so account access can be updated.

Providers also handle information under their own terms and privacy notices: Okta/Auth0, Stripe, and Netlify. We may also disclose information where legally required or necessary to protect users and the service.

6. Cookies and local storage

ArchonVLabs uses essential cookies or similar storage to keep you signed in, protect authentication flows, remember access status, and preserve local editor work. Optional analytics or advertising technologies will require an appropriate notice and consent choice before they are introduced.

7. Retention and security

We keep personal information only as long as reasonably needed for the purposes described above, including account operation, transaction records, security, dispute handling, and legal requirements. We use access controls, secure authentication, encrypted connections, and restricted secrets, but no online service can guarantee absolute security.

Cancelling Premium stops future renewal at the end of the paid period; it is not an account-deletion request. Account, learning and necessary billing records are not automatically erased just because access expires. Retention decisions depend on whether the account is still needed, outstanding billing or support issues, security investigations, and applicable legal record-keeping requirements. To request account or data deletion, contact us using the address below.

8. Your choices and rights

Depending on where you live, you may ask to access, correct, delete, restrict, or export your personal information, or object to certain processing. You may also withdraw consent where processing depends on consent. Some records may be retained where the law requires it. Where UK data protection law applies, you may raise a concern with the Information Commissioner's Office.

To cancel subscription renewal, sign in and choose Settings → Manage Subscription. Confirm cancellation in Stripe's portal; Premium remains available until the paid-period end shown there. Contact archonsfeedback@gmail.com if you need assistance or want to make a privacy rights request. Signing out does not cancel billing, and cancelling renewal does not itself erase your account.

9. Children

ArchonVLabs is not intended for children under 13. Younger learners must not create an account. Where local law requires parental or guardian consent for older children, that consent must be obtained before using the service.

10. Changes and contact

We may update this policy as ArchonVLabs changes. The latest version and its update date will appear on this page. Privacy questions or rights requests can be sent to archonsfeedback@gmail.com.