An overview of how ArcPixel protects your account, your portfolio content, and your payments. For the full list of who we share data with, see our Sub-processors page.
1. Encryption
All traffic to and from ArcPixel — including this website, the application, and published portfolios — is encrypted in transit via HTTPS/TLS. Custom domains connected to your portfolio are also served over TLS. Sensitive data such as passwords is never stored in plain text (see Section 4).
2. Infrastructure & sub-processors
ArcPixel runs on a small, deliberately limited set of infrastructure providers — currently Hetzner and DigitalOcean for application and database hosting, and Cloudflare for file storage (R2) and network protection. The full list, with purpose and data handled, is on our Sub-processors page.
3. Access control & audit logs
Access to production infrastructure and customer data is limited to the people who need it to operate the service. Changes to your account or portfolio data — such as sign-in, password changes, and publishing — are recorded in audit logs to support security investigations and accountability.
4. Authentication
Passwords are hashed and never stored in plain text. ArcPixel supports Google OAuth for sign-in, and optional two-factor authentication (TOTP) with backup codes for accounts that want an additional layer of protection.
5. Payment security
Payments are handled entirely by Paddle, our merchant of record. ArcPixel never receives or stores your card details — Paddle's checkout is PCI-compliant, and all billing, tax, and receipt handling happens on their infrastructure.
6. Compliance posture
Our Privacy Policy and Data Processing Agreement are written to align with the EU General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act, 2023 (DPDP Act), including a named grievance officer contact and defined data-subject rights.
7. Reporting a vulnerability
If you believe you've found a security vulnerability in ArcPixel, please report it to support@arcpixel.iowith as much detail as possible. We ask that you give us a reasonable opportunity to investigate and address the issue before disclosing it publicly, and we won't pursue action against good-faith reports made in that spirit.
8. Contact
Questions about security or this page can be sent to support@arcpixel.io.