List of Subprocessors
Last Updated: June 12, 2026
ARKVAS LLC ("ARKVAS"), uses third-party service providers ("subprocessors") to operate, secure, maintain, and improve the platform. These providers may process limited categories of personal information on Arkvas's behalf in connection with the services they provide. Arkvas requires subprocessors to implement reasonable security measures and to handle personal information in accordance with applicable law and their contractual obligations with Arkvas.
The subprocessors listed below reflect providers that may process end-user personal data in the normal course of platform operations. Internal development tools that do not process end-user personal data are maintained in a separate internal vendor record.
This list may be updated from time to time as the platform evolves or service providers change.
Current Subprocessors
| Provider | Purpose | Data Potentially Processed | Location |
|---|---|---|---|
| Cloudflare | DNS, CDN, bot protection, infrastructure security, application hosting (Cloudflare Pages / Workers) | IP address, request metadata, security and session data | United States / Global |
| Supabase | Database infrastructure, authentication, storage, and backend services | Account data, authentication and session data, assessment and session records, support-related data | United States |
| Stripe | Payment processing and fraud prevention | Payment metadata, billing information, transaction identifiers | United States / Global |
| Google Analytics | Website and platform analytics (IP anonymization enabled) | Usage analytics, device and browser information, anonymized IP-related analytics | United States |
| Google Workspace | Business email and operational communications (only where users contact Arkvas directly by email) | Email address and message content for direct email communications | United States / Global |
Important Notes
Payment Information
Arkvas does not store full payment card information on its own servers. Payment information is processed directly by payment processors such as Stripe. Arkvas may receive limited transaction metadata such as billing address and transaction identifiers, but does not have access to full card numbers, CVV codes, or similar sensitive payment credentials.
Development and Internal Tools
Arkvas uses additional tools for source code management, deployment, and internal development workflows (including GitHub and Lovable). These tools are not intended to process end-user personal data in the normal course of platform operations and are therefore not listed as subprocessors above. They are maintained in Arkvas's internal vendor record.
Data Retention by Subprocessors
Retention practices are governed by the applicable provider's own policies and legal obligations to provide their respective services or as required by applicable law. Arkvas's own retention practices are described in the Privacy Policy.
International Data
Arkvas is based in the United States. Data processed by subprocessors may be stored or processed in the United States or other jurisdictions. Where applicable, Arkvas relies on contractual safeguards to support lawful data handling by subprocessors operating across jurisdictions.
Security
Arkvas works with subprocessors that provide reasonable technical and organizational security measures appropriate to the nature and sensitivity of the data they process. Arkvas's own security practices are described in the Privacy Policy.
Contact
For questions about this subprocessor list or Arkvas's data processing practices, contact:
Arkvas