Privacy
Last updated: 2026-07-19
Introduction
This policy describes the data we collect and how we handle it when you visit arclight.vn and when you use the More Than Code BETA operated by ArcLight. More Than Code is currently in BETA, with access granted by invitation. We handle personal data in line with Vietnam's Decree 13/2023/ND-CP on personal data protection.
More Than Code can also be self-hosted. For self-hosted deployments, the party running the instance is the controller of their own data; this policy applies to the instance operated by ArcLight at arclight.vn.
Data we collect
- When you sign up for early access or contact us: your email (required), plus your name, role, and message if you provide them.
- When you are invited and sign in to the BETA: account information via SSO (Google, GitHub, Azure AD/Microsoft) or email/password.
- When you use the service: your conversations with the agent, the files in your workspace, and your provider/MCP/skills configuration. Each user has an isolated workspace.
We do not use third-party advertising to track you.
How we use data
- To operate, maintain, and improve the service; authenticate and grant access; respond to your requests; and keep the system secure.
- To use your early-access email to invite you to the BETA and communicate about it. We do not send spam.
- When you run the agent, prompt content and files are sent to the model provider you configure (Anthropic via OAuth, or your own API key/baseUrl). Their processing is governed by that provider's terms.
We do not sell your personal data.
Storage & security
For the instance operated by ArcLight, data is stored in a PostgreSQL database on our infrastructure. Access is granted by invitation and gated by an SSO domain allow-list; each user has an isolated workspace, HOME, and configuration.
On deletion, we use soft-delete with a recovery window before permanent removal; when an account is deleted, its related data is deleted along with it (cascade). For self-hosted deployments, data resides on infrastructure controlled by the party running the instance.
Your rights
You may request access to, correction of, or deletion of the data associated with your account, and you may opt out of the early-access list at any time. To exercise these rights, contact[email protected].
Contact
For any privacy questions, please contact[email protected].