Privacy Policy

Arrow Intelligence Inc. (“Arrow,” “we,” “us,” or “our”) values your trust. We are committed to protecting your privacy and the sensitive information you share with us to navigate your immigration journey.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (https://witharrow.ai) and our AI-powered immigration services (collectively, the “Services”). This policy applies to users in all countries.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

We collect information to provide your personalized immigration roadmap and to improve our Services.

2.1 Information You Provide to Us

• Account Information: When you register, we collect your name, email address, password, and phone number.
• Immigration & Profile Data: To generate your roadmap, we collect detailed personal history, including date of birth, citizenship, and country of residence; education history, employment history, and travel history; and family information (marital status, children, etc.).
• Sensitive Personal Information: Given the nature of immigration services, you may provide data considered “sensitive” under applicable laws (such as GDPR or CCPA), including racial or ethnic origin, criminal history (for inadmissibility checks), health information (relevant to medical admissibility), and government ID numbers (Passport, Social Security, National ID).
• Payment Information: We collect billing details and credit card information. Note that payment processing is handled by third-party payment processors (e.g., Stripe); Arrow does not store your full credit card number on our servers.
• Communications: Content of emails or support tickets you send to us.

2.2 Information Collected Automatically

• Usage Data: We collect data on how you interact with our Services, such as pages visited, time spent, and features used.
• Device Data: IP address, browser type, operating system, and device identifiers.
• Cookies and Tracking Technologies: We use cookies to manage user sessions and remember your preferences.

We use your data for the following specific purposes:

• Service Delivery: To run our AI algorithms against your profile to generate your personalized immigration roadmap, assess eligibility, and create document checklists.
• AI Processing: Your input data is processed by our AI models to generate your specific outputs. We prioritize your privacy: We do not use your Sensitive Personal Information to train public-facing AI models in a way that could expose your data to other users.
• Communication: To send you your roadmap, important updates regarding immigration laws (as promised in our Terms), and security alerts.
• Attorney Collaboration: If you purchase a service including attorney consultation, we use your data to brief the independent attorney on your case.
• Legal Compliance: To verify your identity and comply with applicable laws (e.g., sanctions checks).
• Improvement: To analyze usage trends and improve the accuracy of our platform (using aggregated, anonymized data where possible).

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data based on the following legal grounds:

• Contractual Necessity: To provide the Services you purchased (the immigration roadmap).
• Consent: You explicitly consent to the processing of your Sensitive Personal Information (e.g., health or criminal history) when you input it into the platform for the purpose of receiving immigration guidance. You may withdraw consent at any time, though this will stop the Services.
• Legitimate Interests: For security, fraud prevention, and product improvement.
• Legal Obligation: To comply with tax and accounting laws.

We do not sell your personal data. We share your information only in the following circumstances:

• Service Providers: We share data with trusted third-party vendors who help us operate the Services, including cloud hosting providers (e.g., AWS, Google Cloud), AI model providers (under strict data privacy agreements), and payment processors.
• Independent Attorneys: If (and only if) you purchase a package that includes attorney review, we share your relevant file with the partner attorney so they can advise you.
• Legal Requirements: We may disclose information if required by law, subpoena, or if we believe legally required to comply with law enforcement or protect our rights.
• Business Transfers: If Arrow is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Arrow Intelligence Inc. is based in the United States. If you access the Services from outside the US, please be aware that your information will be transferred to, stored, and processed in the United States.

For EEA, UK, and Swiss Users: The United States may not have data protection laws as comprehensive as those in your country. However, we take measures to ensure your data is protected, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission or reliance on the EU-U.S. Data Privacy Framework where applicable.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy.

• Active Accounts: We keep your data while your account is active to allow you to update your roadmap or download documents.
• Inactive Accounts: We may retain data for a period of time to comply with legal obligations (e.g., tax records) or resolve disputes.
• Deletion: Upon your request (subject to legal exceptions), we will delete your personal data from our active databases.

We employ industry-standard organizational, technical, and physical safeguards to protect your personal information, including encryption in transit (TLS/SSL) and encryption at rest. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have specific rights regarding your personal information:

• Access: You have the right to request a copy of the data we hold about you.
• Correction: You may ask us to fix inaccurate or incomplete data.
• Deletion: You may ask us to delete your personal information (“Right to be Forgotten”).
• Portability: You may ask to receive your data in a structured, machine-readable format.
• Restriction/Objection: You may object to our processing of your data for certain purposes.

To exercise these rights, please contact us at support@witharrow.ai.

9.1 Notice to California Residents (CCPA/CPRA)

If you are a California resident, the CCPA grants you specific rights. We do not “sell” or “share” your personal information (as defined by CCPA) for cross-context behavioral advertising. You have the right to limit the use of your Sensitive Personal Information to only what is necessary to perform the Services.

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child, please contact us immediately, and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. If we make material changes, we will notify you via email or a prominent notice on our website.

If you have questions about this Privacy Policy or our data practices, please contact us at: