Privacy Policy

1. Overview

ArvoPeak ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. It applies to:

• The ArvoPeak website (arvopeak.com)
• ArvoPeak Shopify Apps (e.g. RankPilot: AI SEO Optimizer)
• ArvoPeak Chrome Extensions (free versions)
• ArvoPeak WordPress Plugins (free and premium)
• AI & SEO tools available via CachePlex.com
• Any associated support or communication channels

Please read this policy carefully. By using any of our products or services, you acknowledge the practices described here.

2. Who We Are

ArvoPeak is an independent software company. We build Shopify apps, WordPress plugins, Chrome extensions, and AI-powered web tools for individuals, businesses, and digital professionals. If you have any questions about this policy or how we handle your data, see Section 15 for contact details.

3. Data We Collect on Our Website

When you visit arvopeak.com or purchase a product, we may collect:

4. Chrome Extensions — Data Practices

4.1 Free Extensions (Broken Link Checker – SEO Audit Tool, SEO Checker & On-Page Audit Tool, LinkedIn Post Formatter — Bold, Italic & Bullets by ArvoPeak, Clipboard Manager - Copy History by ArvoPeak, PDF Local — Merge, Split, Compress & Sign PDFs Offline)

Our free Chrome extensions are built with a strict local-only architecture:

• No data leaves your browser. All scanning and analysis runs entirely within your browser using JavaScript. No page content, URLs, or scan results are transmitted to our servers.
• No account required. We do not collect email addresses or any identifying information from free extension users.
• No tracking. We do not use analytics, advertising SDKs, or any tracking technology within the extension itself.
• Permissions used: Extensions request only the browser permissions necessary for their core function (e.g., access to the active tab to read page content). Permissions are described in the Chrome Web Store listing for each extension.

4.2 Pro Extensions (Broken Link Checker – SEO Audit Tool, SEO Checker & On-Page Audit Tool, LinkedIn Post Formatter — Bold, Italic & Bullets by ArvoPeak, Clipboard Manager - Copy History by ArvoPeak, PDF Local — Merge, Split, Compress & Sign PDFs Offline)

These extensions offer an optional Pro upgrade, verified by your purchase email and license key rather than by creating an account with us. In addition to the local-only analysis described above, Pro extensions may:

• Connect to ArvoPeak servers to verify your license. This verification request includes the email address you used at purchase, your license key, and a non-identifiable device token. Your email address is used solely to match the license to your purchase record and enforce per-license activation limits. No browsing data, page content, or file content is included.
• Store historical scan scores locally in your browser's storage. If you opt into cloud sync (where available), this data is encrypted in transit and stored securely on our servers, linked to your account.
• SEO Checker & On-Page Audit Tool's Pro internal link check requests the links found on the page you are auditing directly from that same website, only when you click it, to report broken links and redirects. These requests go to the audited site, not to ArvoPeak, and send no cookies.

4.3 Lead Capture & Outreach AI by ArvoPeak

Lead Capture & Outreach AI by ArvoPeak lets you save lead and contact information that is visible to you while browsing — such as names, companies, job titles, email addresses, phone numbers, and public social or profile links.

Free tier — local-only, same as our other free extensions:

• Stored locally on your device. All captured leads are saved in your browser using Chrome's local storage. Nothing is sent to ArvoPeak or any server, and capture only runs when you click a button.
• You control your data. You can view, edit, export (as CSV), or delete your leads at any time from within the extension.
• No tracking. The extension does not use analytics, advertising SDKs, or any tracking technology, and it does not collect your browsing history or run any background scraping.

Pro subscription — adds network calls, used only when you take these specific actions:

• License verification. Your license email and key are sent to arvopeak.com to verify your subscription and read your remaining AI credits — on activation, when you open the side panel, Lead Manager or Pro page, after you return from buying a credit top-up, and roughly once every 24 hours in the background. No lead or page data is included in this check.
• AI actions (page summary, fit check, drafted outreach). Only when you click an AI action, the relevant page content (title, URL, a capped excerpt of selected text and meta description) and lead details are sent to arvopeak.com, which proxies the request to OpenAI to generate the result. This never happens automatically or in the background — only on your explicit click. ArvoPeak does not hold or bundle an OpenAI key inside the extension; all AI calls are relayed server-side.
• OpenAI. OpenAI processes AI requests as our service provider under its API data terms, which state that API data is not used to train its models by default and may be retained for a limited period for abuse monitoring. Only the content of the action you clicked is sent — never your full lead list.
• AI request log. For each AI action, arvopeak.com keeps a record of the action type, the credits it used, the generated result, token usage, your IP address and a random install identifier created by the extension. We use it to count your AI credits, to return the same result if a request is retried instead of charging it twice, and to detect abuse. It is not used for advertising or shared with anyone other than OpenAI, which processes the request itself.
• Subscription record. To run your subscription, arvopeak.com stores your email address, a one-way hash of your license key (never the key itself), your Paddle customer and subscription IDs, your plan, its status and renewal date, and your AI credit balances (monthly credits used and any purchased top-up credits).
• AI credit top-ups. When you buy extra credits, the checkout carries a signed, short-lived reference that tells us which subscription to add them to — your license key is never placed in a link or sent to Paddle. We record the pack, the number of credits, the amount paid and the Paddle transaction ID, so a payment can't be credited twice.
• Billing. Subscription and credit top-up payments are processed by Paddle, our merchant of record. Paddle collects your payment and billing details directly; ArvoPeak does not receive or store your card details.

Applies to both tiers:

• Your responsibility, not ours. Lead Capture & Outreach AI by ArvoPeak is a general-purpose browser tool — we don't build, configure, or endorse it for use on any specific website, platform, or data source, and we have no visibility into what you capture or where. You are solely responsible for deciding what data to capture, from which sites, and how you use, store, and contact those individuals afterward — including compliance with applicable privacy laws (e.g., GDPR, CCPA), anti-spam laws (e.g., CAN-SPAM), and the terms of service of any website you use the extension on.
• Permissions used: The extension requests only the permissions needed for its core function, such as access to the active tab to read visible page content when you trigger a capture, plus (Pro only) permission to contact arvopeak.com for license checks and AI actions. Pro follow-up reminders use Chrome's alarms and notifications permissions: an hourly check of your locally stored follow-up dates, run entirely on your device, shows at most one reminder a day — no data is sent anywhere for this. Permissions are described in the Chrome Web Store listing.

4.4 PDF Local — Merge, Split, Compress & Sign PDFs Offline

PDF Local lets you merge, split, reorder, rotate, compress, fill, and sign PDF files you choose to open in it. Because these are your own documents — often contracts, IDs, forms, or other sensitive files — we designed the extension so we never have access to them, in either the Free or Pro tier:

• Documents never leave your device. Every operation runs entirely inside your browser using WebAssembly bundled inside the extension. No file, filename, or page content is ever uploaded, cached remotely, or transmitted to ArvoPeak or anyone else — this holds for both Free and Pro use.
• No remotely loaded code. All processing logic ships inside the installed extension package; nothing is fetched from a CDN at runtime.
• Signatures stay local. A drawn, typed, or uploaded signature you create for the "Fill & Sign" feature is stored only in your browser's local storage for reuse and is never uploaded.
• Pro license verification only sends your license key. As described in Section 4.2, activating Pro sends your email and license key to arvopeak.com to verify your purchase — your PDF files and their contents are never included in that request.
• No telemetry. We do not log or analyze which operations you run, how many files you process, or anything else about your usage.

5. WordPress Plugins — Data Practices

5.1 Free Plugins (WordPress.org)

Free plugins distributed through WordPress.org do not collect any data by default. Any data processing (for example, storing plugin settings) occurs entirely within your own WordPress installation and database — under your control.

5.2 Premium Plugins

Premium WordPress plugins sold via arvopeak.com may include a license verification system. When your WordPress site checks for updates or validates a license, it sends a request to our update server that includes:

• Your license key
• Your site URL (to enforce per-site license limits)
• Plugin version and WordPress version (for compatibility checks)

We do not collect any visitor data from your WordPress site, and no data about your site's users is transmitted to us.

6. How We Use Your Data

We use the data we collect exclusively for the following purposes:

• Delivering the products and services you purchased
• Sending license keys, order confirmations, and invoices
• Providing customer support
• Sending product update notifications and security advisories
• Notifying waitlist members of product launches (with your consent)
• Fraud detection and prevention
• Meeting our legal and tax obligations
• Improving our products based on aggregate, anonymized usage patterns

We will not use your data for advertising, profiling, or selling to third parties.

7. Data Sharing

We do not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Payment processors (Paddle) to handle transactions securely. They are bound by their own privacy policies and PCI-DSS compliance obligations.
• AI provider (OpenAI) — only for Lead Capture & Outreach AI Pro, and only the page and lead content of an AI action you click, to generate that result (see Section 4.3).
• Email service providers used to send transactional emails (order confirmations, license keys, support replies). These providers process email addresses only to deliver messages.
• Legal compliance — if required by law, court order, or governmental authority, we may disclose data as legally required.
• Business transfers — if ArvoPeak is acquired or merged, your data may be transferred as part of that transaction. You will be notified via email and/or a notice on our website.

8. Cookies & Tracking

Our website uses the following types of cookies:

• Strictly necessary cookies — session management, security (CSRF tokens), and shopping cart state. These cannot be disabled as they are required for the site to function.
• Functional cookies — remember your preferences (e.g., currency, language). These are optional.
• Analytics cookies — we use privacy-first analytics (such as self-hosted Matomo or Plausible, where applicable) that do not track individuals across sites and do not share data with advertising networks. Where we use Google Analytics, it is configured with IP anonymization enabled.

You can control cookie preferences through your browser settings. Disabling cookies may affect some site functionality.

9. Third-Party Services

Our website and products may link to or integrate with third-party services. These services have their own privacy policies and we are not responsible for their practices. Relevant third parties include:

• Google Chrome Web Store — for extension distribution. Subject to Google's Privacy Policy.
• WordPress.org — for free plugin distribution. Subject to WordPress.org's Privacy Policy.
• Payment processors — Paddle.
• AI provider — OpenAI, for Lead Capture & Outreach AI Pro's AI actions. Subject to OpenAI's Privacy Policy and API data terms.
• Support desk software — if we use a helpdesk tool to manage support tickets.

10. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this policy, or as required by law:

• Customer records (name, email, order history) — retained for 7 years for tax and accounting compliance.
• Support correspondence — retained for 2 years after your last interaction.
• License keys and activation records — retained for the lifetime of your license plus 2 years.
• Lead Capture & Outreach AI subscription, credit and AI request records — retained while your subscription is active and for up to 2 years after it ends. Payment records follow the 7-year customer-record rule above.
• Waitlist sign-ups — retained until you unsubscribe or the relevant product launches, whichever comes first.

When data is no longer needed, we securely delete or anonymize it.

11. Security

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include HTTPS encryption, access controls, and secure server configuration.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights and freedoms, we will notify you as required by applicable law.

12. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Correction — request that we correct inaccurate or incomplete data.
• Deletion — request that we delete your personal data ("right to be forgotten"), subject to legal retention obligations.
• Portability — request your data in a machine-readable format.
• Objection / Restriction — object to or request restriction of processing in certain circumstances.
• Withdraw consent — where processing is based on consent (e.g., waitlist emails), you may withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

If you are in the EEA or UK and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local data protection authority.

13. Children's Privacy

Our products and services are not directed at children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you via email (if we hold your email address) or a prominent notice on our website. Your continued use of our products after any update constitutes acceptance of the revised policy.

15. Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or how we handle your data, please contact us:

• Email: [email protected]
• Website: https://www.arvopeak.com/contact