Privacy Policy

1. What this policy covers

Archlify ("we") is a system design practice platform. This policy explains which personal data we process, why, who we share it with and how long we keep it.

It covers both uses of the platform: individual practice, in your personal account, and Archlify for companies, where a company invites candidates to a system design assessment as part of a hiring process (sections 5 to 9).

2. Data we collect

• Account: name, e-mail, profile picture and login provider data (Google or GitHub) when you sign in with them; and what you enter in your profile and onboarding, such as experience level, interests, goal, country, city and time zone.
• Submissions: diagrams, written explanations and answers sent for evaluation, and the feedback generated.
• Usage: pages visited, actions in the product, device and browser, measured with a product analytics tool.
• Technical errors: failure reports, such as the page, the browser and the error message, used to fix problems.
• Payments: transaction and package identifiers. Card details stay with the payment processor; we never receive them.

3. How we use your data

• To evaluate your submissions and generate feedback.
• To compute your Elo, achievements and leaderboard position, and to show your public profile when you choose to make it public.
• To improve the challenges and the evaluation.
• To send service e-mails (account confirmation, receipts, notices) and product e-mails. Every product e-mail has a link to stop receiving them.
• To prevent abuse, for example by limiting the number of submissions.

4. Providers that process data for us

We only share data with the providers that run the platform, and only what each function needs:

• Supabase: database, login and storage.
• Vercel: website hosting.
• Google and GitHub: login, when you choose to sign in with them.
• Stripe and Paddle: payment processing.
• Google Gemini: AI model that evaluates submissions and generates the defense questions. It receives the diagram, the explanation and the answers.
• Resend: e-mail delivery.
• PostHog: product usage analytics.
• Sentry: error monitoring.

Some of these providers are located outside Brazil. In those cases, the transfer follows each provider's data protection terms.

5. Hiring processes: who does what

When a company invites you to an assessment, the company decides why and how your data from that process is used. That makes the company the controller of that data.

Archlify processes that data on the company's behalf, as a processor: we run the assessment, generate the feedback and show the results to the company. We don't use hiring process data for any other purpose.

6. Hiring processes: candidate data

• Name and e-mail entered by the company in the invitation.
• The e-mail of the Archlify account used to accept the invitation, and the date and time of acceptance and consent.
• Diagram, written explanation, the defense questions generated for you and your answers.
• The AI evaluation: final score, per-dimension scores and written feedback.
• Start and submission times, and whether you submitted or the timer did.
• Integrity signals, described in section 7.

Taking part in a hiring process doesn't change your practice account: your Elo, credits, achievements, leaderboard position and portfolio stay the same.

7. Hiring processes: integrity signals

During the design and the defense questions, your browser records:

• How many times and for how long you leave the tab or window. Exits under 2 seconds are not recorded.
• How many characters you paste into the explanation and answers.
• How many characters you copy from the challenge statement.

We never record the pasted or copied content, or what you do outside the tab. There is no webcam, microphone or screen recording.

The company sees these records as signals to review. They don't change the score.

8. Hiring processes: who sees it, who decides and for how long

• Only the company that invited you sees your data from that process. Other companies and other candidates have no access.
• You see your score and per-dimension feedback when the process closes. Never your position in the ranking.
• The score is an AI-generated recommendation. The hiring decision belongs to the company and is made by people. Requests to review the decision should go to the company; if they reach us, we forward them.
• 90 days after the process closes, we delete your data from that process, including the feedback you see. We keep only how many people were invited and evaluated, without identifying anyone, for billing.
• Before that, you can request access, correction or deletion from the company or from us (section 13). Because the company is the controller, we let the company know about the request.
• Deleting your personal account doesn't delete the hiring process data, which belongs to the company. It follows the 90-day period or a deletion request.

9. Recruiter data

For company accounts, we process the name, job title, company, domain and work e-mail of the person who signs up. We use them to approve the sign-up, run the account and agree on billing, and keep them while the account exists.

10. How long we keep personal account data

Your personal account data is kept while the account exists. You can request account deletion at the e-mail in section 13. We delete the account and the data linked to it, except what we must keep by law.

Usage and error records stay with the analytics and monitoring providers for the period configured there.

11. Your rights (LGPD and GDPR)

At any time, you can:

• Confirm whether we process your data and access it.
• Correct incomplete or wrong data.
• Request deletion of your data.
• Receive your data in a machine-readable format.
• Know who we share your data with.
• Withdraw a consent you gave.

Send requests to the e-mail in section 13. We reply within 15 days.

12. Cookies and local storage

We use essential cookies for login and session, and to remember preferences such as language and quick access to your hiring processes.

We use PostHog, with cookies and browser local storage, to understand how the product is used. We don't use advertising cookies.

13. Contact

Privacy questions or requests: carlos@archlify.com.