We are committed to protecting your privacy and being transparent about how we collect, use, and safeguard your information.
Last updated: January 26, 2026
ARCNAT ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our retirement plan administration platform and services (the "Service").
As a compliance-first platform handling sensitive financial and personal information, we take data protection seriously. This policy applies to all users of our Service, including plan administrators, participants, and other authorized users.
Important Notice
By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.
When you create an account or register for our Service, we collect:
To provide retirement plan administration services, we process:
We automatically collect information about how you use our Service:
When you communicate with us or use our communication features:
We do not sell your personal information. We may share your information only in the following circumstances:
We implement industry-standard security measures to protect your information:
All sensitive data, including SSNs and passwords, is encrypted at rest and in transit using industry-standard encryption protocols.
We implement role-based access controls (RBAC), multi-factor authentication, and IP allowlisting to restrict unauthorized access.
Our infrastructure is hosted on AWS with enterprise-grade security, regular security audits, and compliance certifications.
All data access and modifications are logged in comprehensive audit trails for compliance and security monitoring.
Your Responsibility
While we take extensive measures to protect your data, you are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.
Depending on your location, you may have certain rights regarding your personal information:
How to Exercise Your Rights
To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within 30 days, or as required by applicable law.
Contact UsWe retain your information for as long as necessary to provide our services and comply with legal obligations:
Compliance Requirements
Due to the regulated nature of retirement plan administration, we must retain certain data for extended periods to comply with ERISA, IRS, and DOL requirements. This retention is necessary to protect your interests and ensure regulatory compliance.
Our Service is primarily hosted in the United States. If you are located outside the United States, your information may be transferred to, stored, and processed in the United States.
We ensure that appropriate safeguards are in place for international data transfers, including:
Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Data Protection Officer
For GDPR-related inquiries, you can reach our Data Protection Officer through the contact methods above.
This Privacy Policy is effective as of January 26, 2026 and applies to all users of ARCNAT.
ARCNAT is committed to protecting your privacy and maintaining the highest standards of data protection.