Privacy Policy

Last updated: November 3, 2026

This Privacy Policy describes how ArkPay (“ArkPay”, “we”, “us”, or “our”) collects, uses, stores, and shares information when you use the ArkPay application and related services (the “Service”).

ArkPay is an AI payments agent for freelancers and micro-businesses. It reads money requests from email and chat, prepares PayPal invoices or payouts, obtains one secure user approval, and executes the payment, with fraud checks and an audit trail.

By using the Service you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect the following categories of information:

1.1 Account and identity information

• Name, email address, and account credentials you provide when you register or sign in.
• PayPal account identifiers or connection tokens necessary to prepare and execute invoices/payouts on your behalf (we do not store your PayPal password or full payment credentials).
• Profile or business details you choose to add (e.g., business name, preferred currency).

1.2 Payment-request and transaction data

• Content of money requests that you (or systems you connect) send to ArkPay, including emails and chat messages that contain payment instructions.
• Extracted details such as amount, currency, recipient name or identifier, description, due date, and any other fields needed to prepare a PayPal invoice or payout.
• Draft invoices/payouts created by the Service, your approval decisions, and the final transaction status returned by PayPal.
• Audit-trail records: timestamps, request source, AI extraction results, approval action, fraud-check outcomes, and execution results.

1.3 Technical and usage data

• Device and browser information, IP address, approximate location derived from IP, operating system, and app version.
• Log data about how you interact with the Service (pages viewed, features used, error events, performance metrics).
• Cookies or similar technologies used for authentication, security, and basic analytics (see Section 6).

1.4 Communications

• Messages you send to us (support requests, feedback, bug reports).
• Notifications we send you about approvals, transaction results, or security events.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide the core Service — read payment requests, extract relevant details with AI, prepare PayPal invoices or payouts, present them for your approval, execute approved payments, run fraud checks, and maintain an audit trail.
• Authenticate and secure your account — verify identity, protect against unauthorized access, detect and prevent fraud or abuse.
• Communicate with you — send transaction confirmations, approval requests, security alerts, and respond to support inquiries.
• Improve the Service — analyze usage patterns, improve AI extraction accuracy, fix bugs, and develop new features (using aggregated or de-identified data where practicable).
• Comply with law — meet legal, regulatory, and compliance obligations, including responding to lawful requests from authorities.
• Enforce our terms — investigate and address violations of our terms of service or this policy.

3. Legal Bases for Processing (where applicable)

Where required by law (for example under the GDPR), we process personal data on the following bases:

• Contract — processing necessary to provide the Service you requested (account, payment preparation, execution after approval).
• Legitimate interests — security, fraud prevention, product improvement, and audit-trail retention, balanced against your rights.
• Consent — where we ask for consent (e.g., optional marketing communications or certain third-party connections).
• Legal obligation — when we must retain or disclose data to comply with applicable law.

4. How We Share Information

We do not sell your personal information. We share information only in these limited circumstances:

• PayPal — to create invoices, initiate payouts, and receive transaction status. PayPal processes payments under its own privacy policy and terms. You must have (or create) a PayPal account and authorize the connection.
• Service providers — trusted processors that help us host the Service, send email, provide analytics, or run AI models. They are bound by contracts that limit use of data to providing services to us and require appropriate security.
• Legal and safety — when required by law, court order, or governmental request, or when we believe disclosure is necessary to protect rights, safety, or property of ArkPay, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, in which case the successor will be bound by this policy (or a substantially similar one) with respect to the transferred data.
• With your direction — when you explicitly instruct us to share data (for example, exporting your audit trail).

5. Data Retention

We retain account information for as long as your account is active and as needed to provide the Service. Transaction and audit-trail records are kept for a period necessary for security, dispute resolution, legal compliance, and accounting purposes (typically several years, depending on applicable requirements). Technical logs are retained for shorter periods (generally weeks to months) unless needed for security investigations. You may request deletion of your account and associated personal data; we will honor such requests subject to legal retention obligations and legitimate business needs (for example, completed transaction records).

6. Cookies and Similar Technologies

We use cookies and similar technologies for essential functions (authentication, session management, security) and, where permitted, limited analytics to understand how the Service is used. You can control cookies through your browser settings. Disabling essential cookies may prevent you from using parts of the Service.

7. Security

We implement technical and organizational measures designed to protect personal data against unauthorized access, loss, or alteration. These include encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure; we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for promptly notifying us of any suspected unauthorized access.

8. Your Rights and Choices

Depending on your location, you may have rights to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your personal data (subject to legal exceptions).
• Object to or restrict certain processing.
• Receive a portable copy of data you provided to us.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority.

To exercise these rights, contact us using the details in Section 11. We will respond within the time required by applicable law. You can also disconnect your PayPal account or delete your ArkPay account through the application settings where available.

9. International Transfers

The Service may be hosted and data processed in countries other than your own. When we transfer personal data internationally, we use appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) where required by law.

10. Children’s Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected personal data from a child, we will take steps to delete it.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes will be communicated through the Service or by email where appropriate. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.