Privacy policy.

This Privacy Policy explains how Arnold Systems, LLC, a California limited liability company (“Arnold Systems,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you visit arnoldsystems.io or use our subscription services (collectively, the “Services”). It also describes our practices regarding SMS text messaging — a topic with special requirements for wireless carriers and the U.S. messaging registry.

Plain-English summary (not legally binding): We don’t sell your data, and we never share your SMS opt-in data or phone numbers with anyone outside the people who help us deliver your service. If you cancel, you can export your data.

Important Notice Regarding Text Messaging Data

Arnold Systems, LLC ("we," "us," or "our") does not share customer opt-in information, including phone numbers and consent records, with any affiliates or third parties for marketing, promotional, or any other purposes unrelated to providing our direct services. All text messaging originator opt-in data is kept strictly confidential. See Section 4 below for the full SMS privacy disclosures.

1. Who This Policy Covers

This Policy applies to four categories of people:

• Visitors to our marketing website at arnoldsystems.io who browse our pages, read our content, or otherwise interact with the Site without submitting personal information;
• Prospects and leads — visitors who provide their information to us through a form, chat widget, demo request, scheduling tool, SMS opt-in, or other interaction on the Site, but who have not yet purchased a subscription;
• Subscribers who purchase our Services (“Customers”);
• Leads, prospects, and customers of our Customers (“End Users”) whose information passes through the Services on behalf of a Customer.

When we act as a service provider to a Customer (for example, when an End User opts in to receive SMS from a Customer’s business), the Customer is the data controller for that End User’s information and is responsible for providing that End User with its own privacy notice. We process that information on the Customer’s instructions.

2. Information We Collect

2.1 From Customers

• Identity and contact information: business legal name, DBA, EIN or tax identifier, owner/authorized representative name, email, phone, business address.
• Payment information: payment card details are collected and stored directly by Stripe; we receive only a tokenized reference and basic billing metadata (e.g., last four digits, billing zip, transaction status).
• Onboarding information: services offered, service areas, business hours, photos, logos, existing customer reviews, branding preferences.
• Account activity: logins, configuration changes, messages sent and received through the Services, call records, automation logs.

2.2 From website visitors, prospects, and leads

This section covers anyone who visits or interacts with our Site, whether they are browsing passively or actively submitting information — for example, by filling out a contact or demo-request form, using a chat widget, scheduling a call, downloading a resource, or opting in to receive SMS or email from us.

• Information voluntarily submitted through forms, chat widgets, scheduling tools, demo requests, content downloads, SMS or email opt-in flows, or by direct contact with us.
• Technical information automatically collected, including IP address, browser type and version, device type, operating system, referring URL, pages viewed, and timestamps.
• Cookies and similar tracking technologies (see Section 7).

2.3 From End Users

When an End User interacts with a Customer’s website, chat widget, missed-call text-back, review request, or other Customer-facing surface, we may collect information that the End User provides directly (such as name, phone number, email, address, service requested) and metadata about that interaction (such as the timestamp of opt-in, the IP address at the time of submission, and the source URL of the opt-in form). We process this information on behalf of the relevant Customer.

3. How We Use Information

We use the information we collect to:

• Provide, configure, operate, secure, and improve the Services;
• Build and host Customer websites and automations;
• Process payments and manage billing, renewals, and cancellations;
• Send transactional communications (account, billing, support, security, and service notices);
• Send marketing communications about our own services (to Customers and to people who have opted in), which you can opt out of at any time;
• Submit and maintain A2P 10DLC brand and campaign registrations on behalf of Customers, using business information they provide;
• Comply with legal obligations, respond to lawful requests, and exercise or defend legal claims;
• Detect, prevent, and respond to fraud, abuse, security incidents, or violations of our Terms.

4. SMS Text Messaging: Important Privacy Disclosures

This section applies to SMS text messaging sent or received through the Services, whether you are a Customer of Arnold Systems or an End User of one of our Customers.

4.1 We do not share opt-in data with anyone for marketing

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

For additional clarity: we do not sell, rent, trade, or otherwise share SMS opt-in data, phone numbers, or consent records with third parties or affiliates for their own marketing purposes. Subcontractor sharing is limited to vendors who help us deliver the Service (for example, the wireless carrier, the SMS platform, and our customer-service tools), and those vendors are contractually bound to use information only to provide their services to us.

4.2 How SMS opt-in works

When you opt in to receive SMS from Arnold Systems or from one of our Customers, you do so through a clearly labeled checkbox, form, or keyword-based opt-in flow that identifies the sender and describes the type of messages you will receive. We retain records of your opt-in (including the time, the language presented, and the source URL or channel) for compliance purposes.

4.3 Message frequency

Message frequency varies depending on your activity and the campaign you opted in to. For Customer-account communications from Arnold Systems, you should expect occasional messages (typically fewer than 10 per month). For End-User communications from a Customer’s business, frequency is set by that Customer and is described at the point of opt-in.

4.4 Standard message and data rates

Message and data rates may apply, based on your wireless plan with your carrier. Arnold Systems and the relevant Customer are not responsible for those carrier charges.

4.5 How to get help or stop messages

Reply HELP at any time for help. Reply STOP at any time to opt out; we will send a single confirmation and stop sending non-transactional messages to that number. Standard opt-out keywords (STOP, END, CANCEL, UNSUBSCRIBE, QUIT, and common variants) are honored automatically.

4.6 Carriers are not liable

Our SMS program works with all major U.S. wireless carriers, including AT&T, T-Mobile, Verizon, and most regional carriers. Carriers are not liable for delayed or undelivered messages.

4.7 Age restriction

You must be 18 years or older to opt in to our SMS program.

4.8 TCPA compliance

We comply with the Telephone Consumer Protection Act (TCPA), the CTIA Messaging Principles & Best Practices, and applicable wireless carrier and registry requirements regarding SMS communications.

5. How We Share Information

We share information only in the following limited ways:

• Service providers (subprocessors): vendors who help us operate the Services, including GoHighLevel (CRM and automation platform), Twilio (telephony and SMS), Mailgun (transactional and marketing email), Stripe (payment processing), and standard hosting and DNS providers. These providers are contractually limited to using information only to provide their services to us.
• Customers: when information is collected through a Customer’s website or campaign, that information is provided to the Customer as part of the Service we deliver to them.
• Legal compliance: when required by law, subpoena, court order, or other valid legal process, or when we reasonably believe disclosure is necessary to protect the rights, property, or safety of any person.
• Business transfers: in connection with a merger, acquisition, financing, restructuring, or sale of assets, subject to standard confidentiality protections.
• Aggregated and de-identified data: we may share aggregated or de-identified data that does not identify any individual.

We do not sell personal information for monetary consideration. We do not engage in cross-context behavioral advertising that would constitute a “sale” or “share” of personal information under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”).

6. How Long We Keep Information

We retain personal information for as long as it is needed to provide the Services and for a reasonable period thereafter to comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically: we retain account and billing records for at least four (4) years after account closure; SMS opt-in/opt-out records for at least four (4) years; and support communications for as long as reasonably necessary. When information is no longer needed, we delete, de-identify, or archive it under controls appropriate to its sensitivity.

7. Cookies and Tracking Technologies

Our marketing website uses cookies and similar technologies to remember preferences, measure traffic, and understand how visitors use the site. Most browsers let you refuse or delete cookies; doing so may affect site functionality. We do not respond to Do Not Track browser signals at this time, but we honor the disclosure obligations and opt-out rights described in Section 9.

8. Security

We use reasonable administrative, technical, and physical safeguards to protect the information we hold, including encryption in transit, access controls, vendor diligence, and operational monitoring. No system is perfectly secure, however, and we cannot guarantee absolute security. You are responsible for protecting your own account credentials.

9. California Privacy Rights

If you are a California resident, the CCPA gives you specific rights regarding personal information we collect about you. These rights apply only when Arnold Systems is acting as a “business” as defined in the CCPA (which generally excludes information we process on behalf of a Customer as a service provider).

Subject to verification and to applicable exceptions, you may request to:

• Know the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we have shared it;
• Delete personal information we have collected from you;
• Correct inaccurate personal information we maintain about you;
• Opt out of the “sale” or “sharing” of personal information (we do not sell or share personal information as those terms are defined under the CCPA);
• Limit the use of sensitive personal information (we do not use sensitive personal information for purposes that would trigger this right under the CCPA);
• Not be discriminated against for exercising your privacy rights.

To exercise these rights, email privacy@arnoldsystems.io. We will verify your identity using information already on file and respond within the timeframes required by the CCPA. You may also authorize an agent to make a request on your behalf; we may require verification of the agent’s authority.

If your information was provided to us by one of our Customers (for example, you submitted a contact form on a Customer’s website), please direct your request to that Customer. We will assist the Customer in fulfilling your request as required by law.

10. Children’s Privacy

The Services are intended for businesses and their representatives, and are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, please contact privacy@arnoldsystems.io and we will take appropriate steps to delete it.

11. Third-Party Links and Services

Our website and the Services may contain links to third-party websites, applications, and platforms (for example, Google Business Profile, Meta, Stripe). Those third parties operate under their own privacy practices, and we are not responsible for their content, policies, or practices.

12. International Visitors

The Services are intended for use within the United States, and our infrastructure is operated in the United States. If you access the Services from outside the United States, you do so on your own initiative and are responsible for compliance with local laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by updating the “Effective Date” at the top and, where appropriate, by email or in-product notification. Continued use of the Services after the effective date of an update constitutes acceptance of the updated Policy.

14. Contact Us

Arnold Systems, LLC

Privacy questions and requests: privacy@arnoldsystems.io

General support: support@arnoldsystems.io

Legal notices: legal@arnoldsystems.io

Website: https://arnoldsystems.io