Feb 12, 2026

Our Privacy Policy

At ARX Operations, we value the trust you place in us as your infrastructure partner. Transparency is the foundation of our "Shadow Operator" model. This Privacy Policy explains what data we collect, why we collect it, and how we handle your sensitive business metrics in compliance with the Law on Protection of the Person Regarding the Processing of their Personal Data (Law No. 8968) of the Republic of Costa Rica.

By using our website, requesting a "Free Audit," or entering a partnership with us, you provide your informed consent to the terms outlined here.

1. What We Collect

a. Information You Provide

When you request an audit or onboard as a partner, we collect:

  • Personal Identity: Name, email, phone number, and physical address.

  • Business Metrics (Sensitive): Current monthly revenue, follower counts, engagement rates, and historical sales data.

  • Platform Access: Read-only or Admin access to third-party tools (e.g., Instagram, Whop) necessary for our "Shadow" work.

b. Data from Website Usage

When you browse arxoperations.com, we automatically gather:

  • Device type, browser information, and IP address.

  • Interaction data (time spent on "Pricing" or "Process" pages).

  • Referring sources (e.g., if you came from a specific Instagram Story).

We use analytics tools (like Google Analytics) to understand site performance and improve your browsing experience.

2. Why We Use Your Information

In accordance with Article 4 of Law 8968, we only collect data with your express consent and for specific, legitimate purposes, including:

  • Forensic Audits: Calculating your "Revenue Leakage" and "Revenue Potential" based on the data you provide.

  • Revenue Infrastructure: Setting up accounts on your behalf (e.g., configuring Whop) to enable monetization.

  • Partnership Execution: Managing the daily operations of your community, email lists, and launch events.

  • Financial Compliance: Calculating revenue splits and tax obligations (IVA) in Costa Rica.

We will never sell your personal data or business metrics to data brokers or marketing agencies.

3. Who Has Access

We operate with a "Zero-Trust" architecture. Your data is only shared with the essential infrastructure providers required to run your business:

  • Financial Processors: Whop and Stripe (for processing payments and executing automatic revenue splits).

  • Automation Tools: Zapier and Supabase (for managing lead flows and database records).

  • Analytics: Google Analytics (for website performance).

All third parties are vetted to ensure they comply with international data protection standards compatible with Costa Rican law.

4. Your Rights (ARCO Rights)

Under Law 8968, you have specific ARCO Rights regarding your personal data:

  • Access (Acceso): You may request a report of all data we hold about you and your business at any time.

  • Rectification (Rectificación): You may request that we correct any inaccurate or incomplete data.

  • Cancellation (Cancelación/Supresión): You may request the deletion of your data from our servers, provided there is no active contract or legal obligation (e.g., tax records) requiring us to keep it.

  • Opposition (Oposición): You may refuse the processing of your data for specific purposes (e.g., marketing).

To exercise any of these rights, please contact our Data Protection Officer at contact@arxoperations.com. We will respond within 5 business days, as required by law.

5. Data Security

We implement "Shadow-grade" security measures to protect your intellectual property and revenue data, including:

  • Encryption: All sensitive data is encrypted in transit (TLS) and at rest (AES-256).

  • Access Control: Only authorized "Shadow Operators" assigned to your account can view your specific metrics.

  • NDA Compliance: All our internal staff are bound by strict Non-Disclosure Agreements regarding client revenue numbers.

However, no digital platform is immune to risks. You are responsible for maintaining the security of your own passwords and 2FA tokens.

6. Cookies & Tracking

We use cookies to:

  • Remember your preferences during the Audit process.

  • Track conversion rates from our landing pages.

  • Analyze site traffic to improve our "Shadow Stack" offerings.

You can disable cookies in your browser settings, though this may prevent the "Free Audit" tool from functioning correctly.

7. Children's Privacy

Some of our infrastructure (e.g., Supabase, Whop) is hosted on servers in the United States. By using our services, you consent to the transfer of your data to these secure international jurisdictions necessary for the execution of the service.

8. Policy Updates

We may revise this Privacy Policy to reflect changes in Costa Rican regulations or our business model. The updated version will always be posted here. Continued use of our services implies acceptance of the revised Policy.

Last updated: February 13, 2026

Contact

This policy is governed by the laws of the Republic of Costa Rica.

Have questions or concerns about your privacy?

📧 Email: contact@arxoperations.com

📍 Location: San José, Costa Rica

Team ARX Operations