Privacy Policy

Arcanea Labs BV (“we”, “us”, “our”), trading as FrankX, is the data controller responsible for your personal data.

Data you provide directly

• Email address and name (newsletter signup, purchases)
• Payment information (processed by Stripe/Paddle — we do not store card details)
• Messages you send us via contact forms

Data collected automatically

• Pages visited and interactions (via Vercel Analytics — privacy-focused, no cookies)
• Device type, browser, and approximate location (country level)
• IP address (anonymized, not stored long-term)

We share your data only with trusted service providers who process data on our behalf:

All US-based processors operate under EU Standard Contractual Clauses (SCCs) for international data transfers.

Under the General Data Protection Regulation, you have the right to:

• Access — Request a copy of the personal data we hold about you
• Rectification — Ask us to correct inaccurate or incomplete data
• Erasure — Request deletion of your personal data (“right to be forgotten”)
• Restriction — Ask us to restrict processing of your data
• Portability — Receive your data in a structured, machine-readable format
• Object — Object to processing based on legitimate interests
• Withdraw consent — Withdraw consent at any time (e.g., unsubscribe from newsletter)

To exercise any of these rights, email privacy@frankx.ai. We will respond within 30 days.

We use minimal cookies:

We do not use marketing cookies or third-party tracking cookies. Vercel Analytics is privacy-focused and does not use cookies for tracking individual users.

Some of our service providers are located in the United States. We ensure adequate data protection through EU Standard Contractual Clauses (SCCs) with each provider. You can request copies of these agreements by contacting us.

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (HTTPS/TLS), access controls, and regular security reviews.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority:

We may update this privacy policy from time to time. We will notify you of significant changes via email or a notice on our website. The “last updated” date at the top indicates the most recent revision.