Privacy Policy

This Privacy Policy explains how Mushik LLC ("we," "us," or "our") handles information within Arvo Desking (the "Service"). It covers two kinds of data: information about you as a subscriber, and client information you choose to enter into the Service to run your business.

1. Information We Collect About You

• Account information: name, email, and password (stored as a salted hash, never in plain text).
• Usage information: basic activity within the Service (such as login times) needed for security and support.
• Billing information: if you're on a paid plan, payment details are handled by our payment processor — we do not store full card numbers ourselves.

2. Client Information You Enter

As part of using the Service, you may enter information about your own clients — which can include name, contact details, income, date of birth, address, and credit-related information — in order to build quotes and manage deals. This information is entered and controlled by you, not by us. We store it on your behalf so the Service can function, and we do not use it for our own marketing, nor do we sell it.

3. How We Use Information

• To operate, maintain, and improve the Service.
• To authenticate accounts and keep the Service secure (rate-limited logins, hashed passwords, session expiry).
• To communicate with you about your account, support requests, or changes to the Service.
• To comply with legal obligations.

4. When We Share Information

We don't sell personal information. We may share information with:

• Service providers who host infrastructure or process payments on our behalf, under confidentiality obligations.
• Third-party data providers if you enable integrations (for example, vehicle inventory or incentive/residual data lookups) — only the data needed to perform that lookup is sent.
• Law enforcement or regulators where required by law.

5. Data Security

We use industry-standard safeguards including HTTPS in transit, hashed (PBKDF2) password storage, and rate-limited authentication. No system is perfectly secure, and we can't guarantee absolute security, but we work to protect information appropriately given the sensitivity of the data the Service handles.

6. Data Retention

We retain account and client data for as long as your account is active, or as needed to provide the Service. If you close your account, you may request deletion of your data, subject to any legal retention requirements.

7. Your Choices and Rights

Depending on where you live, you may have rights to access, correct, or delete personal information we hold, or to object to certain processing. To exercise these rights — for your own account information, or on behalf of a client whose data you've entered — contact us at sales@arvodesking.com. California residents may have additional rights under the CCPA; EU/UK residents may have rights under GDPR-equivalent law depending on your circumstances.

8. Cookies and Sessions

We use a signed session cookie to keep you logged in. We do not use third-party advertising trackers.

9. Children's Privacy

The Service is intended for business use by adults (auto brokers and dealers) and is not directed at children. We do not knowingly collect information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date above.

11. Contact

Questions about this Privacy Policy or how your data is handled? Reach us at sales@arvodesking.com.

This document is a general starting template and has not been reviewed by an attorney. Because this Service stores real client financial and personal data (income, date of birth, credit information), we recommend having this policy reviewed by a licensed attorney familiar with your state's (and any applicable international) privacy law before relying on it for a live product.