Privacy Policy

Welcome to Arkvas ("Arkvas," "we," "our," or "us"), operated by Arkvas LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, assessment platform, dashboard, and related services (collectively, the "Services"). This policy applies to all Arkvas-operated websites, subdomains, and services, including arkvas.com, app.arkvas.com, account.arkvas.com, and any other subdomain operated by Arkvas.

By accessing or using the Services, you agree to this Privacy Policy.

Notice at Collection

At or before the point of collection, Arkvas discloses the categories of personal information collected, the purposes for which each category is used, whether each category is sold or shared (it is not), and the retention period or criteria for each category. The table below summarizes this by context:

• Assessment responses — collected to generate informational pathway summaries; retained for the life of the account plus 12 months following account deletion; not sold or shared.
• Account information (name, email, credentials) — collected to create and manage your account; retained for the life of the account plus 12 months following account deletion; not sold or shared.
• Payment information — collected and processed by our payment processor to fulfill one-time purchases and recurring subscription charges; Arkvas does not store full payment card data; retained per payment processor policies.
• Subscription billing data (billing cycle, renewal dates, subscription status, transaction identifiers) — collected to manage the Policy Alert Subscription, process recurring charges, send required subscription notices, and maintain billing records; retained for the life of the account plus 36 months following account deletion to satisfy legal recordkeeping obligations; not sold or shared.
• Usage and analytics data — collected automatically to operate, secure, and improve the Services; retained for up to 24 months; not sold or shared.

Sensitive Data Minimization. Arkvas collects only information reasonably necessary and proportionate to provide the Services. Unless a separate secure workflow specifically requests it, do not provide passport numbers, Social Security numbers, A-numbers, biometric data, medical records, criminal-history records, financial account credentials, or detailed legal narratives through any general form or contact channel.

1. Information We Collect

A. Information You Provide

We may collect information you voluntarily provide, including:

• Name
• Email address
• Account login credentials
• Assessment responses
• Payment-related information, including information necessary to process one-time purchases and recurring subscription charges
• Subscription status and billing history
• Communications sent through contact forms or support requests

Arkvas does not request highly sensitive immigration information such as Social Security numbers, passport numbers, or government-issued identification documents.

B. Automatically Collected Information

When you use the Services, we may automatically collect:

• IP address
• Browser type
• Device information
• Operating system
• Pages visited
• Session activity
• Referring websites
• Inferred general location (based on IP address)
• Cookies and analytics data

C. Payment Information

Payments are processed through third-party payment processors such as Stripe or other providers. Arkvas does not directly store complete payment card information.

2. How We Use Information

We may use collected information to:

• Provide and operate the Services
• Generate informational assessment results
• Save dashboard information
• Identify and communicate with you, including sending account and transactional communications
• Respond to questions, comments, and support requests
• Provide access to platform features and functionalities, including dashboard access and the Policy Alert Subscription
• Send communications about product updates or changes to this Privacy Policy
• Send required subscription notices, including activation confirmations, renewal reminders, price change notices, inactivity warnings, and account deletion notices
• Improve the Services and develop new features
• Analyze usage and measure platform performance
• Process and manage recurring subscription charges, including activations, renewals, failed payment notifications, and cancellations
• Prevent fraud, abuse, or unauthorized access
• Authenticate and verify user identities
• Enforce our agreements and comply with legal obligations
• Maintain billing and transaction records as required by applicable law
• Use de-identified or aggregated data for internal research, analytics, and other lawful purposes. De-identified or aggregated information is no longer subject to this Privacy Policy.
• Track aggregate engagement with sponsored placements, including impression counts, click counts, and placement performance metrics, on an anonymized and non-individually identifiable basis, for internal analytics and sponsor reporting purposes.

If you have questions about our marketing practices or wish to opt out of marketing communications, you may contact us as set forth in Section 15.

Arkvas does not use personal information collected through the Services to serve behavioral advertising or to share data with sponsors or advertising partners for targeting purposes. Sponsored placements on the platform are based on context and category relevance, not on individual user data or behavioral profiles.

3. Informational Nature of the Services

Assessment responses and dashboard results are generated automatically based on user-provided responses and publicly available immigration information. Results are provided for informational and educational purposes only.

Arkvas is not a law firm and does not provide legal advice or legal representation.

4. Sharing of Information

We may share information:

• With service providers that help operate the platform
• With payment processors (including Stripe or similar providers), including for the purpose of processing one-time purchases and recurring subscription charges
• With analytics providers
• With subprocessors and infrastructure vendors, including database and hosting providers (such as Supabase), as necessary to operate the Services
• In the event of a merger, acquisition, financing, or sale of all or a portion of Arkvas's assets, your information may be transferred as part of that transaction, subject to applicable law. We will provide notice of any such change in control as required.

We may access, preserve, and disclose information we store in association with you to external parties if we, in good faith, believe doing so is required or appropriate to: (i) comply with law enforcement or national security requests and legal process, such as a court order or subpoena; (ii) protect your, our, or others' rights, property, or safety; (iii) enforce our policies or contracts; (iv) collect amounts owed to us; or (v) assist with an investigation and prosecution of suspected or actual illegal activity.

Arkvas does not sell personal information.

5. Subprocessors and Third-Party Service Providers

Arkvas uses third-party subprocessors to help deliver the Services. These may include, but are not limited to:

• Database and backend infrastructure providers (e.g., Supabase)
• Cloud hosting and content delivery providers (e.g., Cloudflare)
• Payment processors (e.g., Stripe)
• Analytics providers

Arkvas seeks to work with subprocessors that provide contractual or comparable commitments consistent with this Privacy Policy and applicable law. Users who require a full list of active subprocessors may refer to it at: https://arkvas.com/subprocessors

6. California Residents — CCPA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, and the purposes for which it is used.
• Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Opt-Out of Sale: Arkvas does not sell personal information. No opt-out is required, but you may contact us to confirm this at any time.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, please contact us at the email listed in Section 15. We will respond to verifiable requests within 45 days as required by law.

7. Cookies and Analytics

We may use cookies, analytics tools, and similar technologies to:

• Understand usage trends
• Improve user experience
• Maintain account sessions
• Measure performance and engagement

Google Analytics. Arkvas uses Google Analytics to collect aggregated, anonymized information about how users interact with the platform. Google Analytics assigns a randomly generated identifier to distinguish unique users and tracks session and pageview data. Arkvas has enabled IP anonymization in Google Analytics, which means your full IP address is not stored or transmitted to Google. Google Analytics data is used solely for internal platform analytics and improvement purposes. Arkvas does not use Google Analytics data to identify individual users or to serve behavioral advertising.

Cookie Consent. Where required by applicable law, including for users accessing the Services from the European Union, the United Kingdom, or other jurisdictions with consent-based cookie requirements, analytics cookies will not be placed until you have provided affirmative consent through the cookie consent banner displayed on the platform. You may withdraw consent at any time through the cookie preference controls available on the platform. Where consent is not legally required, analytics cookies may be active by default and you may opt out at any time as described below.

Opting Out of Google Analytics. You may opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-Out Browser Add-On available at tools.google.com/dlpage/gaoptout. You may also manage cookie preferences through your browser settings or through the cookie preference controls on the platform.

Global Privacy Control. Arkvas recognizes the Global Privacy Control (GPC) signal. Where technically feasible and as required by applicable law, we treat a GPC signal as a request to opt out of any data sharing that qualifies as a sale or sharing of personal information under applicable state privacy law.

Do Not Track. Arkvas does not currently respond to Do Not Track (DNT) browser signals, as no uniform industry standard for DNT has been adopted. We do honor legally recognized browser-based mechanisms such as the Global Privacy Control as described above.

Sponsored Placements. Sponsored placements on the platform are static and contextual. They are not targeted to individual users and do not rely on behavioral data. There is no opt-out mechanism for static sponsored placements.

Please refer to our Cookie Notice for full details on the cookies and similar technologies we use and your available controls.

8. Your Choices

General: You may have the right to object to or opt out of certain uses of your information. Where you have consented to the processing of your information for a specific purpose, you may withdraw that consent at any time by contacting us as described below. Even if you opt out, we may still collect and use your information for other purposes that were not based on your consent.

Email Communications: If you receive an email from us and do not want to receive future emails from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails regarding products or services you have requested. We may also send you certain non-promotional communications regarding us and the Services, and you will not be able to opt out of those communications (e.g., communications regarding the Services or updates to this Privacy Policy).

9. Data Security

We use commercially reasonable administrative, technical, and organizational measures to help protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized disclosure.

By using the Services or providing information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Services. If we learn of a security system's breach, we may attempt to notify you electronically by posting a notice on the Services, by mail or by sending an email to you.

10. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Assessment response data is retained for as long as a user account remains active, and for up to 12 months following account deletion, after which it is deleted or anonymized. Users may request earlier deletion by contacting us.

11. Third-Party Links

The Services may contain links to third-party websites or services. We encourage our users to read the privacy policies of each website and application with which they interact. Arkvas does not endorse, screen or approve, and is not responsible for, the privacy practices or content of such other websites or applications. Visiting these other websites or applications is at your own risk.

12. Children's Privacy

The Services are intended for general audiences and are not directed at children. We do not knowingly collect personal information from minors. If we become aware that we have collected data without legally valid parental consent from children under an age where such consent is required, we will take reasonable steps to delete it as soon as possible.

13. International Users

If you access the Services from outside the United States, you understand that information may be processed and stored in the United States, which may have different data protection laws than your country of residence.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time at our sole discretion. Updated versions will be posted with a revised effective date. If there are any material changes to this Privacy Policy, we will notify you as required by applicable law. You understand and agree that you will be deemed to have accepted the updated Privacy Policy if you continue to use the Services after the new Privacy Policy takes effect.

15. Contact Information

For questions regarding this Privacy Policy, or to exercise your data rights, contact: