Enterprise Data Privacy Protocol & TDPSA Framework Privacy Policy & Data Protection

1. Entity & Scope

This Privacy Policy describes how Arcos Multimedia Group, LLC ("Arcos Multimedia", "we", "us", or "our"), a company organized under the laws of the State of Texas with its principal operations located in Austin, Texas, collects, utilizes, stores, and protects personal information when you visit our website (arcosmultimedia.com), communicate with us through our contact or consultation forms, or engage our web architecture, Generative Engine Optimization (GEO), and AI automation services.

We are committed to maintaining the highest ethical standards of digital privacy. We comply strictly with applicable state and federal United States data protection regulations, including the Texas Data Privacy and Security Act (TDPSA) (Tex. Bus. & Com. Code Ann. § 541.001 et seq.) and the Telephone Consumer Protection Act (TCPA).

2. Categories of Personal Data We Collect

In accordance with data minimization principles, we only collect personal information that is adequate, relevant, and reasonably necessary to evaluate, scope, engineer, and deliver our bespoke agency services:

• Direct Inquiry Data: Your full name, business email address, company name, website URL, project timeline, budget requirements, and custom message details provided via our consultation forms.
• Mobile Phone & Communication Preferences: Telephone numbers and preferred contact channels (Email, SMS Text Message, or Phone Call) explicitly submitted for project discovery, consultation scheduling, or client support.
• Technical & Telemetry Data: IP addresses, browser types and versions, operating system details, referring URLs, pages visited, time spent per section, and interaction telemetry collected automatically via web server logs and privacy-preserving analytics.
• Client Project Assets: Copy, brand guidelines, digital photography, credentials, and API tokens provided by contracted clients for the sole purpose of implementing bespoke web platforms and AI automations.

Sensitive Data Notice: We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, genetic data, biometric identifiers for identification, precise geolocation coordinates from mobile GPS, or personal financial account credentials through public web browsing.

3. Purpose of Processing

We process your personal data strictly for legitimate business and contractual purposes:

• To evaluate project scopes, prepare architectural proposals, and conduct strategic discovery calls.
• To deliver, maintain, host, and optimize custom web applications, Generative Engine Optimization pipelines, and AI lead automation workflows.
• To communicate project status, deliver invoices, and provide ongoing technical support under signed agreements.
• To secure our infrastructure against malicious intrusion, distributed denial-of-service (DDoS) attempts, and fraudulent activity.
• To satisfy statutory recordkeeping and compliance obligations under Texas state law.

4. Mobile Phone & SMS Privacy (TCPA / 10DLC Disclosures)

When you provide a phone number and select "Text Message (SMS)" or "Phone Call" as your preferred contact method on our consultation form:

• Consent Purpose: You provide express consent for Arcos Multimedia Group, LLC to contact you directly via SMS text messages or phone calls strictly regarding your consultation inquiry, project status, or scheduled appointments.
• Message Frequency: Message frequency varies depending on the active stage of your inquiry or project onboarding. We do not engage in automated blast promotional marketing.
• Message & Data Rates: Standard message and data rates applied by your wireless carrier may apply.
• Opt-Out Mechanism (Revocation of Consent): You may opt out of SMS communications at any time by replying STOP, UNSUBSCRIBE, or QUIT to any text message received from us. You may reply HELP for assistance.
• Non-Mandatory: Consent to receive SMS text messages is not a condition of purchasing any services or entering into a contract with Arcos Multimedia Group, LLC.

5. Texas Consumer Rights (TDPSA Compliance)

Under the Texas Data Privacy and Security Act (TDPSA), Texas consumers are granted specific, enforceable rights regarding their personal data. As a Texas-registered enterprise, Arcos Multimedia Group, LLC honors these rights for all eligible users:

• Right to Confirm & Access: You have the right to confirm whether we are processing your personal data and to access such data in a readable format.
• Right to Correct: You have the right to request the correction of inaccuracies in your personal data, taking into account the nature of the data and the purpose of the processing.
• Right to Delete: You have the right to request the deletion of personal data provided by or obtained about you.
• Right to Data Portability: You have the right to obtain a copy of your personal data in a portable, readily usable format to transmit to another controller.
• Right to Opt Out: You have the right to opt out of the processing of your personal data for purposes of: (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects.

How to Submit a TDPSA Request

To exercise any of your Texas consumer privacy rights, submit a verified request through our designated privacy channel:

• Online Submission: Open our Consultation Modal and designate "Privacy / TDPSA Request" in the project brief.
• Mailing Address: Arcos Multimedia Group, LLC — Privacy Officer, Austin, Texas, United States.

We will respond to authenticated consumer requests within forty-five (45) days of receipt, as mandated by the TDPSA. If an extension of up to 45 additional days is reasonably necessary due to complexity, we will notify you within the initial period. If your request is denied, we will provide instructions for filing an appeal.

6. Third-Party Service Providers & Subprocessors

We only share personal data with trusted, enterprise-grade subprocessors who assist us in operating our platform, managing infrastructure, and fulfilling client contracts. These processors are contractually bound to maintain strict confidentiality and security:

• Hosting & Edge Infrastructure: Tier-1 cloud providers (e.g., Vercel, Netlify, Cloudflare, Apache/LiteSpeed web servers) for website delivery, DDoS mitigation, and SSL encryption.
• Transactional Email & Telephony Relays: Certified SMTP mail transfer agents and A2P 10DLC registered telecommunications providers for transactional routing.
• AI Model APIs: When contracted to deploy custom AI automations (e.g., OpenAI, Anthropic, Google Cloud Vertex), client data is handled in strict compliance with enterprise API terms (where data is not used for foundational LLM training).
• Legal & Law Enforcement: We may disclose personal data if required by subpoena, court order, or applicable Texas or federal law.

7. Cookies, Telemetry & Universal Opt-Out (GPC)

Our website utilizes minimal, security-first cookies and local storage tokens:

• Strictly Necessary Storage: Local storage is used exclusively for site functionality (such as remembering your chosen reading preference between "Plain English" and "Tech Pro" mode).
• Analytics Telemetry: Aggregated, privacy-focused telemetry to evaluate page load speeds, Core Web Vitals, and accessibility metrics.
• Global Privacy Control (GPC): In compliance with the TDPSA (mandatory since January 1, 2025), our infrastructure recognizes and honors universal browser opt-out signals such as the Global Privacy Control (GPC). If your browser transmits a GPC signal, all non-essential analytics tracking is automatically suppressed.

8. Data Security & Retention Protocols

We implement robust physical, administrative, and technical safeguards designed to protect personal information from unauthorized access, loss, misuse, or alteration:

• All web traffic is transmitted via high-grade TLS 1.3 / SSL encryption.
• Client credentials, API tokens, and private repositories are stored in encrypted vaults with zero plain-text storage.
• We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our client agreements.

9. Children's Online Privacy (COPPA Notice)

Our website and services are exclusively designed for commercial enterprises, corporate decision-makers, and adults aged eighteen (18) and older. We do not knowingly solicit, collect, or process personal data from children under the age of thirteen (13) pursuant to the Children's Online Privacy Protection Act (COPPA). If you believe a child has provided us with personal data, please contact us immediately for prompt deletion.

10. Contacting Our Privacy Officer

If you have questions, comments, or requests regarding this Privacy Policy or our data handling practices under Texas law, please contact our team:

We reserve the right to modify this Privacy Policy periodically to reflect technological advances, service modifications, or legislative updates in Texas or federal law. All revisions become effective upon posting with an updated "Last Updated" timestamp.