Black Banner ARC (“we”, “us”, “our”) operates the Notify Arc mobile application and related services (the “App”).
This Privacy Policy explains how we collect, use, store, share, and protect personal and institutional information
when you use the App & website. By using the App & Website you agree to the practices described here.
If you do not agree, please do not use the App & Website.
1. Information We Collect
We collect the minimum information necessary to operate the App and provide institutional, educational,
payroll and store services. Categories of information we collect include:
- Account & Contact Information: name, email address, phone number, username, and account
authentication data.
- Institutional & Educational Data: institution/school name, class, section, subject, role
(student / teacher / admin), and related profile fields.
- Verification Documents: institutional registration or accreditation documents submitted by
authorized users for identity verification.
- Media & Files: documents, photos, or other media you upload (assignments, ID scans,
invoices).
- Transaction & Payment Metadata: order IDs, timestamps, billing name/address, payment
metadata (we do not store full card numbers).
- Device & Usage Data: device type, operating system, crash reports, analytics, and
notification tokens.
- Optional / Future Signals: non-sensitive data for personalization, e.g. browsing activity
or order history.
2. How We Use Information
- Provide core App functionality (class management, notices, institutional features).
- Account creation, authentication, and verification.
- Verify institutional identity using submitted documents.
- Operate and personalize the in-app store.
- Process payments through authorized providers.
- Send alerts, receipts, and confirmations.
- Improve and secure the App through analytics and fraud detection.
- Comply with legal obligations and respond to lawful requests.
3. Personalized Advertising & Opt-Out (Future Use)
Notify Arc may in the future offer personalized advertisements. If enabled, we will use non-sensitive signals
such as browsing activity and order history under strict contractual rules. You will always have an in-app
opt-out control to disable personalized ads.
4. Sharing & Disclosure
We share data only as required to operate the App or comply with law:
- With Institutions or School Admins.
- With Payment Providers and Banks.
- With Logistics or Fulfillment Partners.
- With Verification Vendors and Service Providers.
- With Legal Authorities when required.
We do not sell personal data to unrelated third parties.
5. Payments & E-Store
All payments are processed by third-party providers. Notify Arc does not store raw card or bank
credentials.
We act as a facilitator for payments and cannot unilaterally reverse bank actions or guarantee
refunds.
Products sold in the store are provided by independent sellers; buyers must follow seller refund policies.
6. Verification Documents — Collection, Use & Retention
- Purpose: confirm institutional identity and eligibility.
- Consent: explicit consent required at upload.
- Security: encrypted storage and access logging.
- Retention: normally 3 years after account termination unless law requires longer.
- Deletion: deletable upon request when no legal retention obligation exists.
7. Data Retention & Deletion
Data is retained only as long as needed to provide services or meet legal duties.
- Transaction records: ~7 years (audit/tax).
- Verification documents: ~3 years post-termination.
- Account and class data: while account is active.
8. Data Security & Breach Response
Security Measures
We apply encryption, access controls, audit logging, and staff security training.
Breach Response
- Contain and mitigate incidents.
- Investigate and assess impact.
- Notify affected users and regulators promptly.
- Assist users with protective steps.
Notify Arc is not liable for breaches beyond our control but will assist users and authorities.
9. Children’s Privacy
For users under 13 (or local consent age), data is handled under school administrator control with parental
consent where required.
10. Permissions & Device Features
- Camera & Storage for uploads.
- Notifications for alerts and orders.
- SMS OTP using secure APIs (no general SMS read).
- Advertising ID — only if ad personalization is later enabled.
11. Your Rights
- Access or correct your personal data.
- Request deletion or withdraw consent.
- Request restriction or portability where applicable.
Contact: support@notifyarc.com.
12. International Transfers
Your data may be processed in Bangladesh or other countries where our processors operate. We apply contractual
and technical protections to maintain adequate safeguards.
13. Changes to This Privacy Policy
We may update this Policy periodically. Updates will appear in the App and on our website with a revised
effective date. Continued use signifies acceptance of changes.