At Aruna Labs, Inc. (makers of Arka), we are committed to responsible data handling and protecting your privacy.
Aruna Labs, Inc. ("Aruna Labs," "Arka," "we," "our," or "us") operates the Arka data platform and related services ("Service"). We are committed to protecting your privacy and being transparent about how we collect, use, store, and protect your personal information.
By using the Service, you agree to the practices described in this Privacy Policy.
We collect information you voluntarily provide, including:
We may collect:
If you upload files (e.g., CSVs) or connect cloud systems, we process the data you submit or pull through authorized integrations.
We do not claim ownership of this data.
If you authenticate or connect via Google OAuth, we may receive:
We request the minimum necessary scopes and only access Google data for the specific functionality you authorize.
You see exactly what scopes we request on the Google OAuth consent screen.
We use personal information to:
We use Google API data only for the specific functionality you approve, such as:
We do not:
Our access follows the Google API Services User Data Policy, including the Limited Use requirements.
We use cookies and tracking technologies to:
You may disable cookies, but some features may not function properly.
We do not sell your personal data.
We may share personal information with:
All subprocessors are contractually required to protect personal information and follow applicable regulations.
We work with third-party subprocessors to deliver authentication, hosting, analytics, communication, and AI functionality.
Our current subprocessors include:
A complete and up-to-date subprocessors list is available at: https://www.arka.so/subprocessors
You may request:
If processing is based on consent, you may withdraw it at any time.
You may:
Aruna Labs does not sell personal information.
We disclose personal information to service providers and subprocessors strictly for business purposes necessary to operate the Arka platform, such as hosting, authentication, security, and core functionality. These disclosures are considered essential service processing and cannot be opted out of without discontinuing use of the service.
Where applicable, California residents may opt out of non-essential sharing of personal information, such as optional analytics, marketing communications, or other processing not required to provide the core service.
Opt-out methods include:
Opt-out requests do not apply to processing that is strictly necessary to perform our contractual obligations or to comply with legal requirements.
You can revoke Arka's access to your Google account at: https://myaccount.google.com/permissions
Where GDPR applies, we process personal data based on:
We retain personal data only for as long as needed to:
User-uploaded data, logs, and analytics may have specific retention periods.
We may store or process information outside your region (e.g., U.S. or EU datacenters). We implement:
We use industry-standard security controls, including:
We do not knowingly collect personal information from individuals under 16 years old. If such data is identified, we delete it promptly.
We may update this Privacy Policy periodically to reflect:
The "Last updated" date will always reflect the current version.
If you have questions about this Privacy Policy, please contact:
