Legal and data terms

This Privacy Policy applies to personal data and related information processed by ArkNet in connection with the ArkNet platform, including account access, authentication, package and registry workflows, provider participation, billing, support, and operational security.

This Privacy Policy does not apply to third-party websites, services, or platforms that ArkNet does not control, even if they are linked from or integrated with ArkNet.

ArkNet may collect the following categories of information:

• account information, such as name, email address, organization, and profile identifiers
• authentication information, such as OAuth identity metadata, session data, token records, and related access events
• billing and transaction information, such as usage records, balances, payment-related metadata, invoices, and settlement data
• package and registry information, such as package names, versions, manifests, publishing metadata, audit records, and related operational events
• provider information, such as provider identity, public key hashes, onboarding records, heartbeat data, network metadata, and operational state
• device, browser, and log information, such as IP address, user agent, timestamps, request metadata, and security events
• communications and support information, such as messages, feedback, and requests sent to ArkNet

ArkNet may collect information directly from you, automatically from your use of the services, and from third parties involved in account access or service delivery.

• information you provide when creating an account, publishing packages, onboarding providers, or contacting support
• information generated through your use of the platform, APIs, registry, packages, and provider flows
• information received from authentication providers such as Google or GitHub
• information received from service providers and vendors supporting billing, operations, infrastructure, analytics, security, and support

ArkNet uses information to operate, maintain, secure, and improve the services.

• provide account access, authentication, session management, and authorization
• operate the registry, package publishing flows, provider coordination, and related platform functions
• track usage, reservations, settlements, billing operations, and service health
• detect, investigate, prevent, and respond to fraud, abuse, misconfiguration, and security incidents
• support customers, respond to requests, and communicate about service updates or legal notices
• monitor performance, troubleshoot issues, and improve ArkNet features, reliability, and product quality
• comply with legal obligations, enforce platform policies, and protect ArkNet, users, providers, and third parties

Where applicable law requires a legal basis for processing personal data, ArkNet may process data based on one or more of the following:

• performance of a contract or steps taken at your request before entering into a contract
• legitimate interests in operating, securing, and improving ArkNet
• compliance with legal obligations
• your consent, where consent is required by law

ArkNet may share information in the following circumstances:

• with service providers, vendors, and infrastructure partners that help ArkNet operate the services
• with authentication providers when needed to support sign-in flows
• with affiliated entities or advisers in connection with corporate operations
• with users, organizations, or providers where sharing is inherent to the relevant product workflow
• when required by law, regulation, legal process, or enforceable governmental request
• to detect, prevent, or address fraud, abuse, security incidents, or technical problems
• in connection with a merger, acquisition, financing, reorganization, or sale of assets

ArkNet does not sell personal data in the ordinary meaning of selling personal information for money.

ArkNet retains information for as long as reasonably necessary to operate the services, comply with legal obligations, resolve disputes, enforce agreements, maintain security records, and support legitimate business and operational needs.

Retention periods may vary depending on the type of information.

• account and identity records may be retained while the account remains active and for a reasonable period afterward
• security, audit, and access records may be retained to support integrity, fraud prevention, and incident response
• billing, settlement, and transaction records may be retained as required for accounting, tax, and compliance purposes
• package, registry, and provider records may be retained to preserve operational history, auditability, and service continuity

ArkNet uses administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure.

No method of transmission, storage, or security control is guaranteed to be perfectly secure. You are responsible for protecting your own credentials, devices, sessions, keys, and authentication factors.

ArkNet may process and store information in jurisdictions other than your own. Where required, ArkNet will use appropriate safeguards for cross-border transfers of personal data.

Depending on your location and applicable law, you may have rights relating to your personal data, which may include rights to access, correct, update, delete, restrict, object to, or export certain information.

You may also have rights to withdraw consent where processing is based on consent. ArkNet may need to verify your identity before responding to a request.

ArkNet may use cookies and similar technologies to support authentication, session continuity, security, preferences, and service performance.

Some cookies are necessary for ArkNet to function correctly. Disabling required cookies may affect access to or use of the platform.

ArkNet is not directed to children and is not intended for use by individuals who are not legally able to enter into binding agreements or who do not meet the applicable minimum age required by law. If ArkNet becomes aware that it has collected personal data from a child in violation of applicable law, it will take appropriate steps to delete that information.

ArkNet may update this Privacy Policy from time to time. If a change is material, ArkNet may provide notice through the services, by updating the effective date, or by other reasonable means.

Your continued use of ArkNet after an updated Privacy Policy becomes effective means the updated policy will apply going forward.

For privacy questions, requests, or notices relating to this Privacy Policy, contact ArkNet Inc. through the privacy or legal contact methods published by ArkNet.