Privacy Policy

Data controller

ArchSupply Utilities is operated by Monmaks d.o.o., a company registered in Montenegro ("Monmaks", "we", "us"). Monmaks d.o.o. is the data controller responsible for personal data processed through the Service. You can contact us about privacy at privacy@archsupply.com.

Data we collect and why

Our tools run in your browser. Files you upload for conversion, signing or local preview stay on your device and are not sent to our servers, unless you explicitly choose to publish a flipbook. Depending on how you use the Service, we may process:

• Account data (email, display name, hashed password, plan), used to create and secure your account and provide the Service. Legal basis: performance of contract.
• Published flipbook content and metadata (PDF file, page count, expiration, view counts), used to host and serve flipbooks you publish. Legal basis: performance of contract.
• Support messages you send us via the contact form or email, used to reply and provide support. Legal basis: legitimate interests.
• Security and abuse-prevention data (hashed IP addresses, rate-limit counters), used to protect the Service against fraud and abuse. Legal basis: legitimate interests.
• Anonymous usage analytics (page views, device type, approximate location, interaction heatmaps), used to understand and improve the Service. Legal basis: legitimate interests / consent where required.

Payments

Paid subscriptions are sold and processed by our reseller Paddle.com, the Merchant of Record. When you purchase Utilities Pro, Paddle collects and processes your billing information (name, billing address, payment details, tax identifiers) under its own privacy notice. Monmaks receives from Paddle a limited set of information needed to provision your subscription (such as customer ID, subscription status and plan).

Google Analytics

We use Google Analytics 4 to collect anonymous, aggregated statistics such as page views, referrers, approximate location, device type and browser. Analytics data is processed by Google and governed by Google's Privacy Policy.

Microsoft Clarity

We use Microsoft Clarity to capture anonymous behavioural metrics (heatmaps and session recordings) to understand how visitors interact with the site. Clarity data is processed by Microsoft and governed by Microsoft's privacy policy. See clarity.microsoft.com for details.

Cookies

Google Analytics and Microsoft Clarity set cookies to distinguish anonymous users and measure sessions. We also use essential cookies and local storage to keep you signed in and remember your preferences. We do not use cookies for advertising. You can block cookies in your browser settings or use browser extensions to opt out of analytics.

Who we share data with

We share personal data only with categories of recipients needed to run the Service: hosting and infrastructure providers, our Merchant of Record (Paddle) for payments, subscription management, tax compliance and invoicing, analytics providers (Google, Microsoft), professional advisers where necessary, and public authorities where required by law.

International transfers

Some of our service providers are located outside Montenegro, the UK and the EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions where applicable.

Data retention

We retain account data for as long as your account is active and for a reasonable period afterwards to comply with legal obligations and resolve disputes. Published flipbooks are deleted at their expiration date or when you delete them. Analytics data is retained according to the standard retention settings of Google Analytics and Microsoft Clarity.

Security

We apply appropriate technical and organisational measures to protect personal data, including TLS in transit, encryption at rest for stored files, hashed passwords, hashed IP addresses for abuse prevention and row-level access controls on our database. No system is 100% secure and we cannot guarantee absolute security.

Your rights

Depending on your jurisdiction (including under the GDPR and comparable laws), you may have the right to access, rectify, erase, restrict or port your personal data, to object to processing, to withdraw consent, and to lodge a complaint with a supervisory authority. To exercise these rights, contact us at privacy@archsupply.com. We aim to respond within one month.

Contact

For privacy questions, email privacy@archsupply.com or use our contact page.

See also our Terms of Use, Refund and Cancellation Policy and Disclaimer.