Privacy Policy

The Arch is a China innovation immersion program for founders, builders, investors, executives and institutions. This policy explains how The Arch team ("we", "us" and "our") handles personal information through www.thearch.global, including accounts, applications, program administration and payments.

For privacy questions or requests about your information, contact thearch@globalpropeller.com. Our Terms of Service explain the conditions for using the website and participating in the program.

When you choose "Continue with Google", Google shares your basic account information with our authentication provider, Supabase, so we can create or authenticate your The Arch account. This includes your Google account identifier, email address and email verification status, and basic profile details such as your name and profile picture, when available.

We use this information to identify you, display your account profile, keep your session secure, and connect you to your applications, orders and payment confirmations. Account identifiers and profile information are stored with your authentication record in Supabase.

We request only basic sign-in permissions: openid, email and profile. We do not receive your Google password or request access to Gmail messages, Google Drive files, Google Calendar or Google Contacts. We do not send email on your behalf through Google.

We do not sell Google user data, use it for advertising, or use it to train AI models. Our handling of Google user data follows the Google API Services User Data Policy, including applicable Limited Use requirements.

• Applications: your name, preferred contact email, alternate contact details, selected program and weeks, background and goals, and any additional information you submit. Please share only information relevant to your application; do not include passwords or payment card details.
• Program communications: enquiries, interview arrangements, application review records and information you provide when contacting our team or arranging participation.
• Orders and payments: your selected pass, price, currency, transaction identifiers, payment status, and refund requests and records. Stripe processes checkout details; we do not collect card numbers or security codes in our application forms.
• Referrals: the invite or discount code you use, its connection to your application, and related payment and commission records.
• Technical information: authentication cookies and operational or security logs. Our hosting, authentication and payment providers may process IP addresses, browser information, request timestamps and error details when delivering their services.

• Create and secure your account and provide access to your records.
• Review applications, arrange interviews and communicate decisions.
• Coordinate participation, accommodation, visits and other confirmed program services.
• Process payments, reconcile orders and review refund requests.
• Attribute referrals and administer partner commissions.
• Respond to enquiries, investigate abuse, resolve disputes and meet legal or accounting obligations.

Where applicable law requires a legal basis, we rely on providing the services you request, our legitimate interests in operating and securing those services, compliance with legal obligations, or your consent where required. If we propose a new use of Google user data, we will explain it and seek any required consent before that use begins.

We share information as needed for the purposes described in this policy:

• Supabase provides authentication and database infrastructure for account, application, order and referral records.
• Google provides sign-in and receives the information needed to authenticate your account. Our pages also load Google Fonts, which sends your browser's font requests to Google.
• Stripe processes payments and refunds and receives contact and order information needed for checkout and transaction records.
• Our team and service providers handle hosting, support and program operations. Relevant details may be shared with accommodation, transport or visit providers to arrange services you request.
• Your referring partner: if you submit an application with an invite or discount code, the associated partner can see your submitted name and contact email, selected program, application and payment status, program price, discount, paid and refunded amounts, and submission date to manage that referral. Clear the referral code before submitting if you do not want your application attributed to that partner.
• Legal and security recipients: we may disclose information when required by law or necessary to address fraud, security incidents or legal claims.

We do not sell personal information. Third-party services also process information under their own policies: Google, Supabase and Stripe.

We use authentication cookies to complete Google sign-in and keep you signed in. Blocking or clearing these cookies may prevent account features from working or require you to sign in again.

If you follow a referral link, we store an arch_referral_code cookie for up to 30 days to remember the invitation. It is cleared after a successful application submission. You can remove or change the prefilled code in the application form and manage stored cookies through your browser.

The website does not currently include advertising trackers or a separate analytics tracking tool. Google sign-in and Stripe checkout may use their own cookies or similar technologies under their respective policies.

We retain account and application information for as long as needed to provide the service, administer participation and address related enquiries. Payment, refund and referral records may need to be kept longer for accounting, legal obligations or disputes. When information is no longer needed, we delete or anonymize it; residual copies may remain in provider backups until those backups expire.

We use access controls and authenticated connections to protect records and restrict access to relevant accounts and authorized team members. No online service can guarantee absolute security.

The Arch operates a program in China and uses international service providers. Your information may be processed in China and other countries where our team and providers operate, which may have different privacy laws from your country. Where required, we use appropriate safeguards for these transfers and obtain any necessary consent. Contact us for information about the arrangements relevant to your data.

You can view your applications and orders in your account and edit eligible unpaid applications there. You can also ask us to access, correct or delete your personal information, close your account, or provide a copy of your records by emailing thearch@globalpropeller.com from your account email. We may need to verify your identity before acting on a request.

You can remove The Arch's Google access in your Google Account connections. Removing Google access does not automatically delete information already held by The Arch; contact us separately to request deletion. Deleting an account does not itself cancel a booking or create a refund entitlement.

Depending on your location, you may also have rights to object to or restrict processing, withdraw consent, receive a portable copy of your data, or complain to your local privacy authority. We handle requests within applicable legal time limits and explain any information we need to retain. Withdrawing consent does not affect processing already lawfully performed.

The website and program are intended for an adult professional audience and are not directed to children. If you believe a child has provided personal information without appropriate authorization, contact thearch@globalpropeller.com so we can review and address it.

We may update this policy as the service or our practices change. The date above identifies the latest revision. For material changes, we will provide an appropriate notice through the website or our account communications and obtain consent where required.

For questions about this policy or your data, write to The Arch team at thearch@globalpropeller.com.