How Arka AI collects, uses, and protects information — and your rights as a data subject.
This Privacy Policy is currently in effect. Enterprise platform data practices are additionally governed by a separate Data Processing Agreement (DPA) executed with each customer. For questions, contact success@arkainc.ai.
Arka AI, Inc. ("Arka AI," "we," "us," or "our") is committed to protecting the privacy and security of information entrusted to us. This Privacy Policy describes how we collect, use, disclose, and protect information in connection with our website (arkainc.ai), our Enterprise Outcome Operating System platform, and our managed services.
Arka AI operates in two distinct capacities:
This Policy applies primarily to our role as Data Controller. If you are an end user of an Arka AI enterprise customer, please refer to that customer's privacy notice for information about how your data is handled.
Arka AI, Inc. is a Delaware corporation with principal operations in Southbury, Connecticut, United States. We build and operate a governed AI execution platform that helps enterprises deliver measurable business outcomes through policy-bound Digital Workers, human oversight, and sealed evidence on every cycle.
For privacy inquiries, contact us at:
Arka AI, Inc.
146 Willow Creek Estates Dr, Southbury, Connecticut 06488, USA
success@arkainc.ai
When you visit our website, we may automatically collect:
In delivering our managed services, we process business data provided by our enterprise customers. This may include operational data, workflow inputs, and personnel information processed as part of mission execution. We process this data solely on behalf of and under the instructions of our customers, as governed by our Data Processing Agreement. We do not use this data for any purpose other than delivering the contracted services.
We use the information we collect to:
For individuals in the European Economic Area (EEA) or United Kingdom (UK), our legal bases for processing personal data include:
Arka AI does not sell your personal data. We do not share personal data with third parties for their own marketing purposes.
We may share information with the following categories of recipients:
A current list of subprocessors is available upon request at success@arkainc.ai.
We may share information with attorneys, accountants, and other professional advisors under confidentiality obligations.
In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction. We will provide notice of any such change and, where required by law, obtain consent.
We may disclose information where required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Arka AI, our customers, or others.
Arka AI is headquartered in the United States. If you are located outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.
For transfers of personal data from the EEA or UK, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) as approved by the European Commission. To obtain a copy of applicable transfer mechanisms or to request more information, contact us at success@arkainc.ai.
We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including providing services, complying with legal obligations, resolving disputes, and enforcing agreements.
General retention guidelines:
When data is no longer required, we securely delete or anonymize it in accordance with our data lifecycle procedures.
If you are located in the EEA or UK, you have the following rights regarding your personal data:
If you are a California resident, you have the following rights:
To exercise any of these rights, contact us at success@arkainc.ai. We will respond within the timeframes required by applicable law — 30 days for GDPR requests and 45 days for CCPA requests, with a possible extension of an additional 45 days where reasonably necessary.
Our website uses cookies and similar tracking technologies to operate and improve the site. We use the following categories of cookies:
We do not use advertising cookies or cross-site behavioral tracking cookies.
You can control or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website.
Arka AI implements enterprise-grade security measures to protect information against unauthorized access, alteration, disclosure, or destruction:
In the event of a data breach affecting your personal data, we will notify affected parties and applicable regulators as required by law — within 72 hours for EEA supervisory authorities under GDPR where required, and within applicable timeframes under other regulations.
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
Arka AI does not use customer data to train, fine-tune, or improve AI foundation models — ever.
Your business logic, proprietary data, workflows, and execution outcomes remain isolated within your environment and are never aggregated to improve services for other customers. This commitment is enforced architecturally through our multi-tenant isolation design and contractually through our customer agreements.
Our platform and services are designed exclusively for enterprise use and are not directed at children under the age of 13 (or 16 in the EEA/UK). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under the applicable age threshold, we will delete it promptly. If you believe we may have collected such information, please contact us at success@arkainc.ai.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised effective date. For material changes, we will provide additional notice as appropriate — for example, by email notification to active customers or a prominent notice on our website.
Your continued use of our website or services after any update constitutes acceptance of the revised policy. We encourage you to review this page periodically.
For privacy questions, requests to exercise your rights, subprocessor lists, data processing agreements, or concerns about our data practices, please contact us:
Arka AI, Inc.
146 Willow Creek Estates Dr, Southbury, Connecticut 06488, USA
success@arkainc.ai
For EEA or UK residents, you also have the right to lodge a complaint with your local data protection supervisory authority. A list of EU data protection authorities is available at edpb.europa.eu.
This Privacy Policy is governed by and construed in accordance with the laws of the State of Delaware, USA, without regard to its conflict of law provisions. Nothing in this section limits your statutory rights under applicable data protection law, including GDPR or CCPA.