Privacy Policy

Last updated: April 27, 2026

1. Introduction

Arena Global Network ("we," "us," or "our") is committed to protecting the privacy of individuals who use our online platform and services. This Privacy Policy describes how we collect, use, share, and protect your personal information when you access our website, applications, and tools (collectively, the "Platform").

By using the Platform, you consent to the practices described in this Privacy Policy. Please also review our Terms of Service, which govern your use of the Platform.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using the Platform, including:

• Account information: name, email address, phone number, mailing address, date of birth, and preferred language.
• Identity information: nationality, immigration identifiers (e.g., Alien Registration Number, USCIS Online Account Number), and related personal details necessary for case management.
• Documents: files you upload, such as identity documents, financial statements, and legal forms.
• Communications: messages sent through the Platform via email, SMS, or WhatsApp.
• Payment information: billing details provided during payment transactions (processed by Stripe; we do not store full card numbers).

2.2 Information Collected Automatically

When you access the Platform, we may automatically collect:

• Device and browser information: IP address, browser type, operating system, and device identifiers.
• Usage data: pages viewed, features used, login timestamps, and session duration.
• Cookies and local storage: used to maintain your session, remember language preferences, and store display settings (such as dark mode). We do not use tracking cookies for advertising purposes.

2.3 Information from Government APIs

When you use the Case Status Online feature, you provide a USCIS receipt number. We transmit this number to the USCIS Case Status API to retrieve your case status information. Please see Section 6 for details on how this data is handled.

3. How We Use Your Information

We use the information we collect to:

4. How We Share Your Information

We do not sell your personal information. We may share information with:

• Service providers: third-party processors that help us operate the Platform, including payment processing (Stripe), email delivery (Google Workspace), SMS and voice (Twilio), electronic signatures (DocuSign), and cloud hosting. These providers are contractually bound to use your data only to perform services on our behalf.
• Government APIs: when you use the Case Status Online feature, your receipt number is transmitted to the USCIS API. No other personal information is sent to USCIS through this feature.
• Legal requirements: we may disclose information when required by law, subpoena, court order, or to protect our rights, safety, or property.

We do not share your personal data with third parties for their marketing purposes.

Impact on Others: Immigration and legal case files often contain information about family members, beneficiaries, dependents, and co-petitioners. Sharing case data may therefore affect individuals other than the account holder. We treat all such third-party information with the same protections as your own personal data. You should obtain consent from any family members or other individuals whose personal information you submit through the Platform before doing so.

We do not permit any third party to use or disclose your personal information — including de-identified, anonymized, or pseudonymized data — for any purpose other than the specific service they provide on our behalf, unless we first obtain your active, affirmative consent. All third-party service providers are contractually bound to these restrictions and to the terms of this Privacy Policy. You may opt out of any optional data sharing at any time by contacting us at office@arenaglobal.org.

5. Data Security

We implement administrative, technical, and physical safeguards to protect your information, including:

• Encryption of data in transit (TLS/HTTPS) and at rest (AES-256 for sensitive fields).
• Role-based access controls limiting data access to authorized personnel.
• Multi-factor authentication for user accounts.
• Token-based file access with time-limited URLs (no direct file system exposure).
• Regular security reviews and monitoring.

While we take reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Breach Notification: In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay — and no later than 72 hours after we become aware of the breach — by email to the address associated with your account. Our notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps we are taking to address it, including any actions you should take to protect yourself.

6. USCIS Case Status Data

The Case Status Online feature allows users to check the status of a USCIS case by entering a receipt number. This section describes how we handle data associated with this feature, in compliance with the USCIS Case Status API Terms of Use.

6.1 Data Transmitted

When you submit a receipt number, only the receipt number is transmitted to the USCIS Case Status API via a secure, authenticated connection (OAuth 2.0 over HTTPS). No other personal information (name, address, email, etc.) is sent to USCIS through this feature.

6.2 Data Received

USCIS returns case status information, which may include:

• Current case status (e.g., "Case Was Approved") in English and Spanish
• Status description text
• Form type (e.g., I-130, I-485)
• Date filed and last updated date
• Case status history (dates and status changes)

6.3 Data Storage and Retention

• Session display: case status results are displayed to you in real time and are not cached on our servers beyond the duration of the request.
• Timeline tracking (authorized users): if you are an authorized Platform user and a USCIS receipt number is associated with your case, the receipt number and status updates may be stored in your case timeline for ongoing tracking purposes. This data is retained as long as the case remains active and is deleted when the case is closed or upon your request.
• No bulk storage: we do not maintain a database of USCIS case status results. Each query is a live request to the USCIS API.

6.4 Data Sharing

USCIS case status data retrieved through the Platform is not shared with any third party. It is displayed only to the user who submitted the query or to authorized staff members managing the associated case.

6.5 Access Controls

The Case Status Online feature is protected by an access code and is available only to authorized users. Rate limits are enforced to prevent abuse. We comply with all USCIS API usage requirements, including rate limits and permitted use restrictions.

7. Data Retention

We retain personal data according to the following schedule:

When data is no longer needed, it is securely deleted or anonymized.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: request a copy of the personal data we hold about you.
• Correction: request that inaccurate or incomplete data be corrected.
• Deletion: request that your personal data be deleted, subject to legal retention obligations.
• Restriction: request that we limit how we use your data.
• Data portability: request your data in a structured, machine-readable format.
• Objection: object to certain types of data processing.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at office@arenaglobal.org. We will acknowledge your request within 30 days. Data deletion will be completed within 45 days of your confirmed request, except for data subject to legal retention obligations (see Section 7). We will notify you when deletion is complete.

Account Closure: To permanently close your account, email us at office@arenaglobal.org with the subject line "Account Closure Request." Upon verification of your identity, we will deactivate your account within 5 business days and permanently delete your personal data within 45 days, except for records we are required to retain by law (e.g., payment records, legal filings). You will receive a confirmation email when the process is complete.

8.1 Connecticut Residents

Under the Connecticut Data Privacy Act (CTDPA), Connecticut residents have the right to access, correct, delete, and obtain a copy of their personal data, as well as the right to opt out of targeted advertising and the sale of personal data. We do not sell personal data or use it for targeted advertising.

8.2 California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the following rights:

• Right to Know (Cal. Civ. Code §1798.100): you may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the third parties with whom it is shared.
• Right to Delete (Cal. Civ. Code §1798.105): you may request deletion of your personal information, subject to certain exceptions (e.g., completing a transaction, security purposes, legal obligations).
• Right to Opt Out (Cal. Civ. Code §1798.120): we do not sell personal information as defined by the CCPA. There is nothing to opt out of.
• Right to Limit Use of Sensitive Personal Information (Cal. Civ. Code §1798.121): we use sensitive personal information (e.g., immigration identifiers) only as necessary to provide our services and do not use it for inferring characteristics or targeting.
• Right to Non-Discrimination (Cal. Civ. Code §1798.125): we will not discriminate against you for exercising your CCPA rights.
• Authorized Agent: you may designate an authorized agent to submit requests on your behalf. We will require written proof of authorization.

To submit a CCPA request, email office@arenaglobal.org with "CCPA Request" in the subject line. We will respond within 45 days (extendable by an additional 45 days with notice).

9. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will delete it promptly.

10. International Data Transfers

Your data is primarily stored and processed in the United States. If you access the Platform from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

11. Third-Party Links

The Platform may contain links to third-party websites or services (e.g., USCIS.gov, Stripe). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. Business Transfer or Closure

If Arena Global Network is acquired, merges with another company, or ceases operations, your personal data may be transferred as part of that transaction. We will notify you by email at least 30 days before any such transfer takes effect. The acquiring entity will be required to honor the commitments made in this Privacy Policy, or you will be given the option to:

• Request a secure export/download of your personal data, or
• Request permanent deletion of your personal data before the transfer occurs.

If the Platform is shut down without a successor, we will notify you at least 30 days in advance and provide a data export. All personal data will be securely deleted within 90 days of the shutdown date.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. For material changes (changes that affect how we collect, use, or share your data), we will:

• Email you a plain-language summary of what changed and why, at least 14 days before the change takes effect.
• Require your affirmative consent (via a checkbox or in-app confirmation) before the new policy applies to your data. You may also close your account at any time if you do not agree to the updated policy.

For non-material changes (e.g., typo corrections, clarifications that do not affect your rights), we will update the "Last updated" date and post a notice on the Platform.

14. Contact

For questions or concerns about this Privacy Policy, please contact us at: