Security
How we handle your data.
Plain answers to the questions a software buyer asks before signing.
Where your data lives.
SalesARC runs on Supabase in a US region. Each customer is a team; every record is scoped to that team and enforced by row-level security in the database, not just in the application.
Who can see it.
Your team’s users, and SalesARC staff who administer your account as part of a Perform or ArcClaw™ engagement. Access is logged. We never use one customer’s data to serve another.
Sending reputation.
Outbound sends from a dedicated subdomain of your domain, never from a shared pool, so another customer’s behavior cannot affect your deliverability. New channels ramp gradually; every address is verified before send; suppression lists are enforced at send time.
Signed documents.
Propose e-signatures carry an audit trail — who viewed, when, from where, and the signed hash. The signed PDF is filed to the contact record and stays there.
Billing.
Basic and Standard tiers are paid by card at checkout through Stripe; your card details are held by Stripe and never touch SalesARC systems. Perform and every Enterprise tier are invoiced directly against your signed quote. There is no annual billing.
Exports and deletion.
Export your contacts, sequences, quotes and reports on every tier, at any time. Ask us to delete your team’s data and we will, with written confirmation. If an ArcClaw™ engagement ends, you may keep the CRM on its entry tier rather than export.
Subprocessors.
These vendors process your data on our behalf.
- Supabase — database and sign-in; holds every record, playbook and file.
- Vercel — hosts the apps and this website.
- Stripe — billing; receives your card and billing details.
- Resend — sends your email; receives each message and its recipient.
- Twilio — sends your texts and checks whether a number is a mobile; receives the number and the message.
- ZeroBounce — verifies email addresses; receives the address.
- Anthropic — the AI that writes and scores; receives the playbook text, call transcripts and contact details a feature is working on.
- Apollo — finds and verifies contacts; receives a name, company and website to match.
- ElevenLabs — the voices in SalesARC University and the Dojo; receives the script and what is said in practice calls.
- OpenAI, Perplexity and Serper — AI visibility checks; receive a brand name, a website address and the buyer questions asked.
- Jina — reads public web pages for List Lab; receives the web address you give it.
Only when you connect them: Google or Microsoft (your calendar, so booking links read your free times and add the meeting), and Zoom, Fathom, Fireflies or Read.ai (we read your call transcripts from them; we send them nothing).
On this marketing website, HubSpot receives what you type into our forms. We are confirming each AI vendor’s data-use terms in writing and will state them here when we have them.