1. Who we are
VA ARCUS is a specialised AI automation studio that builds voice, WhatsApp, and webchat agents for dental clinics in the United Arab Emirates, Turkey, Australia, and worldwide. References to “we”, “us”, or “ARCUS” in this policy refer to VA ARCUS.
2. Information we collect
2.1 Information you submit
- Contact details (name, clinic name, email, WhatsApp/phone, country).
- Order and checkout details, including selected plan, clinic website URL, and business phone number.
- Invoice email, preferred billing currency, and any notes you add.
- Free-form messages you send through our contact, demo, or sales channels.
2.2 Information collected automatically
- Standard server logs (IP address, browser type, referrer, timestamp).
- Privacy-friendly analytics about how visitors navigate the site.
- Cookies strictly necessary for security, language, and session preferences.
2.3 Information processed on behalf of clinics
When ARCUS agents operate inside your clinic's phone, WhatsApp, or webchat channels, we may process patient identifiers (name, date of birth, contact details), conversation transcripts, voice recordings, and appointment metadata. The clinic remains the controller of this data; VA ARCUS acts as a processor under a separate Data Processing Agreement.
3. How we use information
- To respond to inquiries, demos, and quotes.
- To deliver, operate, and improve the ARCUS AI agents you license.
- To issue manual Payoneer invoices and provide customer support.
- To detect fraud, abuse, and security incidents.
- To comply with legal, tax, and regulatory obligations.
4. Legal bases
Depending on your jurisdiction, we rely on one or more of the following lawful bases: contract performance, our legitimate interests in operating and securing the service, your consent (for marketing communications), and compliance with legal obligations.
5. Sharing & sub-processors
We share information only with vetted sub-processors that help us deliver the service: cloud hosting providers, telephony providers, WhatsApp Business API providers, model inference providers, email delivery, and analytics. A current list is available on request. We do not sell personal data.
6. International transfers
Because we serve clinics on multiple continents, your information may be processed in countries outside your own. Where required, we use Standard Contractual Clauses or equivalent safeguards to protect cross-border transfers.
7. Retention
We retain inquiry and account data for as long as you remain a customer or until the purpose of collection is satisfied. Conversation transcripts and recordings are retained according to the retention policy configured by your clinic, with a default of 12 months unless otherwise agreed.
8. Security
We apply administrative, technical, and physical safeguards including encryption in transit and at rest, least-privilege access controls, audit logging, and routine vulnerability reviews. No system is perfectly secure; please report any security concerns to business@vaarcus.com.
9. Your rights
- Access, correct, or delete personal data we hold about you.
- Object to or restrict certain processing.
- Withdraw consent for marketing at any time.
- Request portability of data you provided to us.
To exercise these rights, email business@vaarcus.com. We respond within 30 days.
10. Cookies
We use a small number of cookies for security, session, and language preferences. You can block non-essential cookies through your browser settings; the site will continue to function.
11. Children
VA ARCUS is a business-to-business service and is not directed at children under 16. We do not knowingly collect personal data from children.
12. Updates to this policy
We may update this policy from time to time. We will notify customers of material changes via email or through the dashboard. The “Last updated” date above always reflects the most recent revision.
13. Contact us
For privacy questions or requests, contact us at business@vaarcus.com or via WhatsApp at +92 309 7473581.