PRIVACY POLICY

Effective Date: August 14, 2025

Arky values your privacy. This Privacy Policy explains what information we collect when you use our websites, applications, and related services (collectively, the “Services”), and how we use, retain, protect, and share that information. By using the Services, you agree to this Policy.

Your use of the Services is also subject to our Terms of Use, which incorporate this Policy. Terms not defined here have the meanings given in the Terms of Use.

1. Changes to This Policy

We may update this Policy to reflect changes to our Services or legal requirements. For material changes, we will provide notice via our website, email, or other reasonable means. Your continued use of the Services after the effective date means you accept the updated Policy.

2. Scope

This Policy applies to personal data we process in connection with the Services. It does not cover the practices of third parties that we do not own or control.

3. Personal Data We Collect

We may collect:

  • Profile and contact details: name, email address, username.
  • Device and technical data: IP address, device identifiers, browser/OS information, timestamps.
  • Usage data: pages visited, feature usage, edit history, clickstream.
  • User-provided content: documents and text you create, feedback, support inquiries.
  • AI inputs/outputs: prompts you submit and AI-generated results returned to you.

4. How We Use Personal Data

We use personal data to:

  • Create and manage accounts and provide the Services.
  • Respond to inquiries and provide support.
  • Personalize features and improve usability and performance.
  • Analyze usage, detect errors, and maintain security.
  • Improve AI features using de-identified and aggregated data.
  • Send service notices and, if you have consented, marketing communications.
  • Comply with applicable laws and respond to lawful requests.

5. How We Collect Personal Data

We collect data when you:

  • Register for or use the Services and enter information directly.
  • Communicate with us by email or other channels.
  • Use the Services, which automatically generate logs and technical data.
  • Use OAuth sign-in (e.g., Google, GitHub), which provides us limited account information per your settings.

6. How We Share Personal Data

We do not sell personal data. We may share limited data:

  • With service providers that operate infrastructure, authentication, analytics, support, and similar functions on our behalf.
  • For legal reasons when required by law or lawful request.
  • In a business transfer (e.g., merger or acquisition), after notice is provided.

7. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, analyze usage, and improve performance and security. You can control cookies through your browser settings. Disabling cookies may limit certain features.

8. Children’s Privacy

The Services are not directed to children under 14. We do not knowingly collect personal data from children under 14 without consent from a parent or legal guardian. If we learn we have collected such data, we will delete it promptly.

9. Data Security

We apply appropriate technical and organizational safeguards to protect personal data, including encrypted storage, access controls, security logging, and regular backups. No method of transmission or storage is completely secure.

10. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy or as required by law. When retention ends, we delete or irreversibly anonymize the data.

11. Your Rights

You may exercise the following rights regarding your personal data:

  • Access and review
  • Correction / rectification
  • Deletion (erasure)
  • Restriction (suspension) of processing

Submit requests via email at help@arky.so or through in-product settings.

12. Data Protection Officer (DPO) and Contact

  • Data Protection Officer: Jaeho (CTO & DPO)
  • Primary intake channel: help@arky.so
  • DPO contact: jaeho@arky.so
  • Hours: Mon–Fri 10:00–18:00 (KST)

13. Incident Response and Notifications

Upon detecting a personal data incident, we will promptly contain and investigate the issue, determine scope and impact, implement remediation, and provide notices to users and authorities as required by law.