Security
How we handle your data.
Plain answers to the questions a software buyer asks before signing.
Where your data lives.
SalesARC runs on Supabase in a US region. Each customer is a team; every record is scoped to that team and enforced by row-level security in the database, not just in the application.
Who can see it.
Your team’s users, and SalesARC staff who administer your account as part of a Perform or ArcClaw™ engagement. Access is logged. We never use one customer’s data to serve another.
Sending reputation.
Outbound sends from a dedicated subdomain of your domain, never from a shared pool, so another customer’s behavior cannot affect your deliverability. New channels ramp gradually; every address is verified before send; suppression lists are enforced at send time.
Signed documents.
Propose e-signatures carry an audit trail — who viewed, when, from where, and the signed hash. The signed PDF is filed to the contact record and stays there.
Billing.
Payments run through Stripe. Card numbers never touch SalesARC systems.
Exports and deletion.
Export your contacts, sequences, quotes and reports on every tier, at any time. Ask us to delete your team’s data and we will, with written confirmation. If an ArcClaw™ engagement ends, you may keep the CRM at $199/mo rather than export.
Subprocessors.
Supabase (database and auth), Vercel (hosting), Stripe (billing), HubSpot (marketing and forms), Resend (email sending), Twilio (SMS and voice), ZeroBounce (email verification).