Privacy Policy

Arka AI ("we", "our", "us") operates arkaai.io and its sub-services including TaxMitra AI and PropIntel AI. We are an AI-powered platform providing tax guidance and financial tools for users in India and the USA.

Account Information: Email address, name, and profile preferences when you sign up.

Usage Data: Pages visited, features used, analysis count, and language preferences — used to improve the product.

Financial Documents: Documents you upload for analysis (Bank statements, Form 16, GST invoices, etc.). These are processed in memory by our AI and are never stored on our servers. They exist only for the duration of the analysis request.

Chat Messages: Tax queries and chat history stored to provide conversation context and improve responses. You can delete your chat history at any time.

Payment Information: We do not store card details. Payments are processed by Razorpay (India) under their privacy policy.

Cookies: Essential session cookies and optional analytics cookies. See our Cookie Policy for details.

We use your data to:

• Provide and improve Arka AI services
• Process documents through AI analysis (Claude by Anthropic)
• Send transactional emails (account verification, receipts, tax reminders)
• Enforce our Terms of Service and prevent abuse
• Analyse usage patterns to improve AI accuracy and UX
• Comply with legal obligations

We do not sell your personal data to third parties.

When you upload a financial document to TaxMitra AI, the document is transmitted securely to our server, sent to Anthropic's Claude API for analysis, and the response is returned to you. The document is processed in-memory only and never written to disk or stored in any database.

Anthropic processes documents through their API. Their data handling is governed by their Privacy Policy. By using document analysis, you agree to Anthropic's processing terms.

We use the following third-party services:

• Supabase — Database and authentication. Hosted on AWS. Data stored in India region (ap-south-1).
• Anthropic (Claude AI) — AI document analysis and tax guidance generation.
• Razorpay — Payment processing for Indian users. PCI-DSS compliant.
• Resend — Transactional email delivery.
• Vercel — Hosting and infrastructure. Data passes through Vercel's edge network.

We retain your account data for as long as your account is active. Chat histories and analysis records are retained for 12 months and then automatically deleted. You can request deletion of your data at any time (see User Rights below).

You have the right to:

• Access — Request a copy of your personal data we hold
• Correction — Request correction of inaccurate data
• Deletion — Request complete deletion of your account and data
• Export — Download your chat history and analysis history
• Opt-out — Unsubscribe from marketing emails at any time

To exercise these rights, email privacy@arkaai.io with your registered email address. We will respond within 30 days.

We implement bank-grade security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest (via Supabase), Row Level Security on all database tables, and regular security audits. However, no method of transmission over the internet is 100% secure.

Arka AI is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us immediately at privacy@arkaai.io.

We may update this privacy policy periodically. We will notify you of significant changes via email or an in-app notification. Continued use of Arka AI after changes constitutes acceptance of the updated policy.