Privacy Policy

How we collect, use, and protect your information.

Effective Date: March 24, 2026

Bureaucromancy Labs LLC, doing business as B2CMMC ("we," "us," or "our"), operates the b2cmmc.com website and provides the Arcana-GRC software product. This Privacy Policy describes what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

1.1 Future Purchase Transactions

Arcana-GRC is not currently available for purchase. When sign-ups open, purchases will be processed by Freemius, Inc., a third-party payment processor. We will not directly collect or store payment card information. Freemius handles all payment data subject to their own privacy policy. We will receive your name, email, and license details from Freemius to fulfill your order.

1.2 Email Communications

If you contact us at [email protected], we retain the content of your correspondence to respond to your inquiry and for our records.

1.3 Automatically Collected Information

Our website is hosted on Cloudflare Pages. Cloudflare may collect standard web server logs (IP addresses, request timestamps, pages visited) as part of their infrastructure services. We do not use third-party analytics tools, tracking pixels, or advertising cookies on this website.

2. How We Use Your Information

We use the information we collect to:

  • Respond to inquiries and provide customer support
  • Send transactional communications related to any future purchase or license
  • Protect against abuse, fraud, and unauthorized access

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Arcana-GRC Software (Self-Hosted)

Arcana-GRC is a self-hosted product designed to run entirely within your own infrastructure. We do not collect, access, transmit, store, or process any data you enter into Arcana-GRC. All compliance documentation, system security plans, assessment data, and other content remains exclusively on your systems.

4. Data Storage and Security

We use industry-standard security measures to protect any information you send us, including HTTPS encryption for all data in transit and Cloudflare’s standard infrastructure protections.

5. Data Retention

We retain email correspondence and any future purchase records for the duration of our business operations or as required by applicable law. If you wish to request deletion of your personal information, contact us at [email protected].

6. Third-Party Services

We use the following third-party services:

  • Cloudflare (Pages, Workers) — website hosting and content delivery
  • Freemius — payment processing and license management (used once sign-ups open)
  • Google Fonts — web fonts loaded from Google servers

Each of these services has its own privacy policy governing how they handle data.

7. Cookies

This website does not set first-party cookies for tracking or analytics. Cloudflare may set cookies necessary for security and infrastructure protection. These are functional cookies, not used for advertising or tracking.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Request access to the personal information we hold about you
  • Request correction or deletion of your personal information
  • Object to or restrict processing of your personal information
  • Request a portable copy of your personal information

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of our website after changes constitutes acceptance of the updated policy.

11. Contact

For questions about this Privacy Policy or our data practices, contact us at:

Bureaucromancy Labs LLC / B2CMMC
Email: [email protected]
Website: b2cmmc.com