This Privacy Policy explains how Capilleh LLC (doing business as “ArbiEngine”, “we,” “us”) collects, uses, shares, and safeguards information when you use our websites, apps, APIs, and services (the “Services”).
1. Scope & Roles
We act as a controller for our own business data and a processorfor Customer Data you instruct us to process (e.g., listings, inventory, orders) in connected platforms. Additional terms may apply via data processing agreements or order forms.
2. Information We Collect
| Category | Examples | Sources |
|---|---|---|
| Account & Contact | Name, email, phone, company, role | You; your organization |
| Credentials | Hashed passwords, MFA secrets/tokens, API keys | You; your organization |
| Commerce Data | Inventory, listings, SKUs, orders, prices, notes, channels | You; connected marketplaces; your systems |
| Usage & Device | Logs, IP, user-agent, identifiers, cookies, crash/perf metrics | Your devices; analytics providers |
| Support & Comms | Tickets, emails, chat transcripts, feedback | You; your users |
3. How We Use Information
- Provide, operate, secure, and improve the Services you request.
- Process and synchronize listings, inventory, and orders at your direction.
- Develop features, analytics, and models; perform troubleshooting and support.
- Detect, prevent, and investigate fraud, abuse, and security incidents.
- Comply with law, enforce agreements, and communicate service/ security updates.
- With consent or as permitted by law, send product updates or marketing (opt-out any time).
4. How We Share Information
- Processors/Vendors. Hosting, analytics, support, email, payment, monitoring.
- Integrations. At your direction, we share with connected marketplaces and apps.
- Legal & Safety. To comply with law or protect rights, safety, and integrity.
- Business Transfers. In a merger, acquisition, financing, or sale of assets.
- Aggregated/De-identified. We may use and publish non-identifying statistics and benchmarks (“Aggregates”). We do not re-identify Aggregates.
5. Cookies & Similar Technologies
We use cookies and similar tech for authentication, preferences, analytics, and performance. You can control cookies in your browser; some features may break if disabled.
6. Data Retention
We retain information as long as reasonably necessary for the purposes above and to meet legal, accounting, and security requirements. Retention varies by data type, account status, and regulation.
7. Security
We implement reasonable administrative, technical, and physical safeguards. No method is 100% secure. You are responsible for secure user management, MFA, API key hygiene, and configuration of connected platforms.
8. International Transfers
Where information is transferred internationally, we use appropriate safeguards (e.g., contractual clauses) where required by law.
9. Your Choices & Rights
- Access/Correct/Delete your personal information, subject to legal limits.
- Marketing Opt-out via unsubscribe links in emails.
- CCPA/CPRA (California). You may have rights to know, delete, correct, and opt out of certain sharing. We do not “sell” personal information as defined by CPRA.
- EEA/UK/Swiss (GDPR). Where applicable: access, rectify, erase, restrict, object, portability, and the right to lodge a complaint. Where consent is the basis, you may withdraw it.
10. Children’s Privacy
The Services are not directed to children under 16, and we do not knowingly collect their data.
11. Do Not Track & Global Privacy Controls
We honor legally recognized browser signals where required and will adapt as standards evolve.
12. Changes to this Policy
We may update this Policy from time to time. Material changes will be posted with a new “Last updated” date and become effective when posted unless stated otherwise.
13. Contact Us
Jurisdiction
This Policy and any disputes are governed by the laws of the State of New York and handled as set forth in our Terms of Service.