Privacy Policy

Last updated June 25, 2026

1. Who we are

BuyerArc is a B2B lead-generation and sales-outreach platform operated by AxonAI LLC (“we”, “us”). This policy explains what we collect, how we use it, and the choices you have. Questions? Email contact@buyerarc.com.

2. Information we collect

  • Account & contact data — your name, work email, company, and password (stored hashed).
  • Billing data — plan, invoices, and subscription status. Card payments are handled by Stripe; we do not store full card numbers.
  • Campaign data — the offer, targeting, and instructions you configure for your campaigns.
  • Mailbox access — with your authorization, we connect to your Microsoft 365 mailbox to send outreach and read replies on your behalf. Access tokens are encrypted at rest.
  • Prospect data — business-contact information (e.g. name, role, company, business email) discovered through third-party sources to build your lead lists.
  • Usage & device data — log data, IP address, and basic analytics used to operate and secure the service.

3. How we use your information

To provide and operate the platform, process payments, generate and send outreach, classify replies, protect deliverability and security, provide support, and comply with legal obligations. We do not sell your personal information.

4. Service providers & sub-processors

We share data with vetted providers strictly to run the service:

  • Microsoft Graph — sending and reading email from your connected mailbox.
  • Apollo & Google Maps — sourcing and enriching business-contact data.
  • OpenAI — drafting and classifying email content (campaign context and message text may be processed to generate output).
  • Stripe — payment processing and subscription billing.
  • Cloud hosting & infrastructure — to run the application and database.

5. Outreach & the people you contact

When you run campaigns, you act as the sender and data controller for the prospects you contact; AxonAI LLC acts as your processor. We honor unsubscribe requests, maintain a permanent suppression list so opted-out or bounced contacts are never re-contacted, and include the required sender identification in every message. You are responsible for having a lawful basis to contact prospects and for complying with applicable laws (see our Terms).

6. Cookies

We use strictly-necessary cookies to keep you signed in and secure your session. We do not use advertising cookies.

7. Data retention

We retain account, campaign, and lead data for as long as your account is active and as needed to provide the service, then delete or anonymize it within a reasonable period unless a longer retention is required by law (e.g. invoices for tax records). You can request deletion at any time.

8. Security

We encrypt sensitive secrets at rest (including mailbox tokens), enforce role-based access controls and tenant isolation, and keep a tamper-evident audit log of privileged actions. No system is perfectly secure, but we work to protect your data.

9. Your rights

Depending on your location (e.g. GDPR / UK GDPR / CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these, contact contact@buyerarc.com.

10. International transfers

We and our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.

11. Children

The service is for business use and is not directed to anyone under 18. We do not knowingly collect data from children.

12. Changes & contact

We may update this policy and will revise the “last updated” date above; material changes will be communicated where appropriate. Contact us at contact@buyerarc.com.