Privacy Policy

We collect only what is necessary to provide and improve the service:

• Account information — name, work email, phone, organisation, role.
• Authentication — password (hashed), session tokens.
• Billing — billing contact, GSTIN (India), payment method tokens held by our payment processor.
• Customer Data — the operational records you create inside the platform (employees, contacts, POs, invoices, etc.).
• Service telemetry — application logs, error traces, approximate IP, browser / OS for diagnostics.
• Support communications — email and in-product messages you send us.

We use personal data to:

• operate, maintain and secure the platform;
• authenticate users and audit actions within the platform;
• bill subscriptions and process GST / VAT / sales tax as required;
• provide customer support and respond to your requests;
• communicate important service updates;
• diagnose errors and improve reliability.

We do not sell your data, we do not run an advertising business, and we do not share Customer Data with third parties for marketing.

We share personal data only with the sub-processors required to operate the service (for example, hosting providers, email delivery, payment processors). These sub-processors are bound by contract to process data only on our instructions and to maintain appropriate security measures. A current list of sub-processors is available on request.

We disclose data to law enforcement or regulators only when legally compelled, and will notify you unless prohibited by law.

Depending on your jurisdiction, you may have rights to:

• access personal data we hold about you;
• correct inaccurate data;
• request deletion (subject to legal retention obligations);
• request a portable export in a structured machine-readable format;
• object to certain processing.

Customer Data is controlled by your organisation; please route requests through your organisation’s administrator. For personal data we hold about you as an individual, email [email protected].

We retain Customer Data for the duration of your subscription and for a reasonable grace period after termination to allow for export. After the grace period, we delete Customer Data in line with our retention policy, unless legal obligations require longer retention (for example, tax records).

We apply encryption in transit (TLS), encryption at rest, per-tenant data isolation, role-based access control, full audit logging and regular backup. The platform is hosted on infrastructure with industry-standard physical and logical security controls.

For cloud-hosted customers, infrastructure regions are selected to align with your primary jurisdiction where possible. Where transfers cross borders, we rely on appropriate legal mechanisms (Standard Contractual Clauses or equivalent) and maintain equivalent protection for the data.

We use strictly necessary cookies for authentication, session management and CSRF protection. We do not use advertising cookies. Analytics cookies, where used, are limited to privacy-friendly aggregate measurement.

ARKcelerate is a business platform and is not directed at children. We do not knowingly collect personal data from anyone under 16.

We may update this policy to reflect changes in the service, regulation, or security practice. Material changes will be communicated to the account owner and posted on this page at least 30 days before taking effect.

Privacy questions: [email protected]. General enquiries: [email protected].