Privacy Policy
Last updated: February 7, 2026
Arceus LLM ("we," "us," or "our") is operated by Sait Burak Yücekaya, a sole proprietorship registered in Turkey. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI chatbot service accessible through WhatsApp (the "Service"), our website, or any related services.
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
1. Information We Collect
1.1 Information You Provide
- WhatsApp Phone Number: When you message us on WhatsApp, we receive your phone number as provided by the WhatsApp Business API.
- Messages & Attachments: Text messages, images, documents, voice notes, and other files you send to the Service.
- Email Address: If you sign up for early access or our waitlist via the website.
- Consent Records: Your opt-in consent to receive messages, including timestamp and method of consent.
1.2 Information Collected Automatically
- Usage Data: Interaction timestamps, message counts, and model preferences.
- Device & Browser Data: When visiting our website, we may collect IP address, browser type, operating system, and referring URL via cookies and similar technologies.
- Cookies: We use essential cookies to operate the website and, with your consent, analytics cookies to understand usage patterns. See Section 7 for details.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Provide the Service: Process your messages through third-party AI language models and deliver responses via WhatsApp.
- Account Management: Manage your usage, enforce rate limits, and handle billing.
- Communications: Send service-related notifications, updates, and promotional messages (only with your explicit consent).
- Improvement: Analyze aggregate usage patterns to improve the Service (no individual messages are used for training).
- Legal Compliance: Comply with applicable laws, regulations, and legal processes.
3. How We Share Your Information
We do not sell your personal data. We may share information with the following parties:
- AI Model Providers: Your message content is sent to third-party AI providers (such as OpenAI, Anthropic, Google, Meta) to generate responses. These providers process data under their own privacy policies and data processing agreements.
- WhatsApp / Meta Platforms: The Service operates through the WhatsApp Business API. WhatsApp processes message metadata in accordance with the WhatsApp Business Data Processing Terms.
- Service Providers: Hosting, analytics, and infrastructure providers who assist in operating the Service, bound by confidentiality agreements.
- Legal Requirements: When required by law, regulation, or legal process, or to protect our rights and safety.
4. Data Retention
- Messages: We retain your message history for up to 90 days to provide context-aware conversations. After this period, messages are automatically deleted.
- Account Data: Phone number and preferences are retained for as long as you actively use the Service. Inactive accounts are purged after 12 months.
- Email Addresses: Waitlist emails are retained until we launch or you unsubscribe, whichever comes first.
- Consent Records: Opt-in records are retained for as long as required by law (minimum 3 years).
5. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encrypted data transmission (HTTPS/TLS)
- Access controls and authentication for internal systems
- Regular security reviews
While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
6. Your Rights
Depending on your jurisdiction, you may have the following rights:
6.1 Under GDPR (EU/EEA Residents)
- Access: Request a copy of your personal data.
- Rectification: Request correction of inaccurate data.
- Erasure: Request deletion of your personal data ("right to be forgotten").
- Restriction: Request restriction of processing.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests or for direct marketing.
- Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing.
6.2 Under KVKK (Turkey Residents)
Under the Turkish Personal Data Protection Law (KVKK, Law No. 6698), you have the right to learn whether your data is processed, request information about processing, learn the purpose of processing, know third parties to whom data is transferred, request correction or deletion, and object to automated decisions.
6.3 Under CCPA (California Residents)
- Right to know what personal information is collected and how it is used.
- Right to delete personal information.
- Right to opt out of the sale of personal information (we do not sell data).
- Right to non-discrimination for exercising your rights.
To exercise any of these rights, contact us at contact@arceus.it.com. We will respond within 30 days.
7. Cookies & Tracking Technologies
Our website uses the following types of cookies:
- Essential Cookies: Required for the website to function (e.g., cookie consent preference). These do not require consent.
- Analytics Cookies: Help us understand how visitors use the website. Deployed only with your explicit consent.
You can manage your cookie preferences at any time by clearing your browser cookies and revisiting the site. The cookie consent banner will reappear.
8. WhatsApp Messaging & Opt-In
By initiating a conversation with Arceus LLM on WhatsApp, you consent to receive AI-generated responses to your queries. If you opt in via our website, you additionally consent to receive:
- Service updates and announcements
- Product news and feature releases
- Promotional offers
You may opt out at any time by:
- Sending "STOP" to our WhatsApp number
- Emailing contact@arceus.it.com
Opt-in consent checkboxes on our website are never pre-checked, and we maintain records of all consent as required by the WhatsApp Business Policy and applicable regulations.
9. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence, including the United States (where AI model providers operate). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) where required by GDPR.
10. Children's Privacy
The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.
11. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.
13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
- Data Controller: Sait Burak Yücekaya
- Business Name: Arceus LLM
- Address: Turkey
- Email: contact@arceus.it.com
- WhatsApp: +90 539 587 3678