Privacy Policy

This Privacy Policy explains how Arkvas LLC ("Arkvas," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information in connection with the Arkvas websites, assessment, account, dashboard, support services, and related services that link to this Privacy Policy (collectively, the "Services"). This Privacy Policy applies to Arkvas-operated websites, subdomains, and services, including arkvas.com, app.arkvas.com, account.arkvas.com, and any other subdomain operated by Arkvas that links to this Privacy Policy.

This Privacy Policy is provided as a notice of Arkvas's privacy practices. Where Arkvas asks you to acknowledge this Privacy Policy, that acknowledgment confirms that the Policy was presented to you; it does not, by itself, constitute consent to any processing activity for which applicable law requires separate consent.

Notice at Collection

Arkvas collects personal information in connection with the assessment, accounts, purchases, support, and use of the Services. The categories below summarize the principal information we collect, why we use it, and how long we generally retain it.

Assessment information

This may include information you provide while completing an assessment and information needed to deliver your assessment experience. We use it to provide the assessment and identify informational pathways based on your responses. Temporary assessment information expires according to Arkvas's session settings unless it is saved or otherwise associated with an account or purchase.

Account information

This may include contact, login, and account-related information. We use it to create, secure, maintain, and support your account and dashboard access. Account and product information is generally retained while needed to provide the Services and is deleted or anonymized after the account-deletion process, subject to limited records that may be retained as described in this Privacy Policy.

Payment and transaction information

This may include billing, purchase, payment-status, refund, and dispute-related information. We use it to process and administer purchases, provide access, prevent fraud, maintain financial records, and handle refunds or disputes. Certain transaction and related records may be retained for up to seven years where required or reasonably necessary.

Communications and support information

This may include information you provide when contacting Arkvas or using support features. We use it to respond to inquiries, provide customer support, investigate issues, and maintain appropriate support records. General support records may ordinarily be retained for up to three years, while records materially related to payments or financial disputes may be retained for up to seven years.

Technical and usage information

This may include technical, security, usage, analytics, referral, and similar information generated when you interact with the Services. Arkvas may retain limited assessment lifecycle analytics even when you do not save or claim an assessment result. These records may include limited event information such as an assessment identifier, timestamps, language, general geographic information, referral or partner attribution, and result or pathway identifiers, as applicable. They do not contain your individual question-by-question answer selections. We use this information to operate, protect, analyze, maintain, and improve the Services, measure assessment activity and performance, and support referral and partner attribution. Event-level assessment lifecycle analytics are retained for up to 12 months. Arkvas may retain aggregated assessment statistics that no longer identify or relate to an individual user or assessment indefinitely for historical, operational, analytical, and reporting purposes.

Arkvas does not sell personal information and does not share personal information for cross-context behavioral advertising. Arkvas may disclose personal information to service providers and other recipients as described in this Privacy Policy when reasonably necessary to operate, secure, support, and administer the Services.

Sensitive Information and General Support

Assessment questions may request information about personal circumstances relevant to the informational immigration pathways being explored.

Arkvas does not require users to submit complete Social Security numbers, passwords, financial-account credentials, complete payment-card information, passports, immigration documents, government notices, medical records, or similar documents through ordinary assessment or general support channels unless a specific Arkvas feature expressly requests particular information for a stated purpose.

Do not send highly sensitive documents or identifiers through general support or contact channels unless expressly requested.

1. Information We Collect

A. Information You Provide

Depending on how you use the Services, Arkvas may collect information you voluntarily provide, such as:

• Email address
• Name, if requested
• Account information
• Assessment responses
• Information associated with saving or claiming an assessment result
• Support communications
• Feedback
• Information necessary to complete or administer a purchase
• Information submitted in connection with a refund, dispute, deletion request, or privacy request

B. Assessment Information

When you use the free assessment, Arkvas processes your responses and temporary assessment state to provide the assessment experience. Ordinary assessment navigation uses temporary encrypted and authenticated state. Arkvas does not need to create a persistent assessment record in its database merely for you to move from question to question.

Temporary assessment state expires automatically according to Arkvas's assessment-session configuration. Your full assessment result or account-associated assessment information may become persistent when you choose an available save, purchase, or claim process.

Separately, Arkvas may retain limited lifecycle analytics about assessment activity even when you do not save or claim a result. These analytics may record events such as assessment starts and completions, timing, language, general geographic information, referral or partner attribution, and result or pathway identifiers. They do not contain your individual question-by-question answer selections. Event-level assessment lifecycle analytics are retained for up to 12 months. Arkvas may retain aggregated statistics derived from those records indefinitely once they no longer identify or relate to an individual user or assessment.

C. Automatically Processed Information

When you use the Services, Arkvas and its infrastructure providers may automatically process technical and usage information such as network-request information, IP address, browser or device information, language, pages or features accessed, referral or acquisition source, session or security events, and analytics information.

The information actually retained depends on the Service, security function, analytics system, and applicable configuration.

D. Payment Information

Arkvas currently uses third-party payment infrastructure, including Stripe, to process the one-time dashboard purchase. Arkvas does not directly store complete payment-card numbers or card security codes.

Arkvas receives and retains transaction-related information necessary to confirm payment, provision or revoke access, administer refunds or disputes, prevent fraud, reconcile transactions, maintain accounting records, and comply with legal obligations. For information about refunds, see the Refund Policy.

Stripe and other payment providers may independently retain payment and transaction records under their own terms, privacy practices, and legal obligations. Deleting an Arkvas account does not require an independent payment provider to delete records that it is legally entitled or required to retain.

2. How We Use Information

Arkvas may use personal information to:

• Provide and operate the Services
• Process your responses and apply Arkvas's predetermined assessment rules to identify informational pathways and provide assessment results
• Maintain temporary assessment state
• Save or claim assessment information when you request it
• Create, manage, and authenticate accounts
• Provide dashboard access
• Process and verify one-time purchases
• Provision, suspend, revoke, or restore entitlement where appropriate
• Administer refunds and payment disputes
• Record contractual acceptance and policy acknowledgment
• Send account, security, transaction, support, deletion, and service communications
• Provide customer support
• Process account deletion and recovery
• Prevent fraud, abuse, and unauthorized access
• Maintain the security of the Services
• Analyze platform usage and performance
• Improve the Services
• Operate sponsor placements and provide aggregate sponsor reporting
• Measure partner referral attribution
• Maintain legal, accounting, and audit records
• Enforce our agreements
• Comply with legal obligations

Aggregated and De-identified Information

Arkvas may use aggregated or de-identified information for analytics, reporting, security, research, product improvement, and other lawful business purposes. Information treated as de-identified will be handled in a manner intended to prevent it from reasonably being associated with an identifiable individual, subject to applicable law.

3. Informational Nature of the Services

Assessment results are produced through predetermined questions, branching logic, routing rules, and informational criteria based on user-provided responses and publicly available immigration information.

Generative artificial intelligence does not interpret assessment answers or generate the assessment result.

Arkvas is not a law firm and does not provide legal advice or legal representation. For more information, see the Disclaimer.

4. Sponsored Resources

Arkvas may collect and use event information relating to sponsored-resource impressions, clicks, placement, category, campaign configuration, and similar performance information.

Sponsored resources may vary according to contextual factors, inventory, campaign settings, or the part of the Services being viewed.

Arkvas does not provide sponsors with individual assessment answers, assessment results, email addresses, or identifiable account activity for advertising targeting merely because sponsored content is displayed or clicked.

Sponsorship does not alter assessment questions, branching logic, routing rules, or results.

Arkvas does not sell assessment responses to sponsors or use third-party cross-site behavioral advertising profiles to determine assessment results.

5. Partner Links and Attribution

If you access Arkvas through a dedicated link provided by a participating organization, Arkvas may process a partner or referral identifier and related usage events so that Arkvas can identify the referral source, provide an approved co-branded experience, and measure partner-related activity.

Merely using a partner link does not give the partner your individual assessment answers, assessment result, email address, account information, or identifiable account activity.

Arkvas may provide participating organizations with agreed aggregate reporting that does not disclose individual assessment answers or results.

If you independently provide information directly to a partner, that information is governed by the partner's own privacy practices.

6. Sharing of Information

Arkvas may disclose personal information to the following categories of recipients where reasonably necessary:

• Service providers and processors that perform services on our behalf
• Payment processors, such as Stripe, to process the one-time dashboard purchase, refunds, and disputes
• Infrastructure providers, such as Supabase for database, authentication, and storage services and Cloudflare for hosting, edge execution, analytics, and security
• Email and communications providers, such as Resend, for transactional and support communications
• Support infrastructure providers
• Analytics and operational providers
• Government authorities or other parties where required for legal compliance or in response to lawful requests
• Parties involved in fraud prevention, security, or safety matters
• Parties involved in enforcing our agreements or collecting amounts owed
• Parties to an actual or proposed merger, acquisition, financing, reorganization, or sale of assets

Arkvas does not disclose individual assessment answers or assessment results to sponsors or participating partner organizations merely because a user encounters sponsored content or accesses Arkvas through a partner link.

Arkvas does not sell personal information. Arkvas does not share personal information for cross-context behavioral advertising.

7. Subprocessors and Service Providers

Arkvas relies on third-party service providers and subprocessors for functions such as hosting, edge execution, database services, authentication, storage, analytics, security, payments, communications, and support infrastructure.

For information about Arkvas's current subprocessors, see the Subprocessors page.

8. U.S. State Privacy Rights

Depending on where you live and whether the applicable privacy law applies to Arkvas and the particular processing activity, you may have rights concerning your personal information. Those rights may include the right to request access to or information about personal information, deletion, correction, a portable copy, opt-out of certain sales, sharing or targeted advertising, limitation of certain uses of sensitive personal information, or an appeal of a denied privacy request.

Applicable law may provide exceptions to these rights.

Arkvas does not currently sell personal information or share personal information for cross-context behavioral advertising.

You may submit an applicable privacy-rights request to [email protected]. Arkvas may take reasonable steps to verify a request or the authority of an authorized agent before acting on it.

Requests will be handled within the time provided by applicable law.

California Residents

To the extent the California Consumer Privacy Act applies to Arkvas and your information, California law may provide rights to know or access personal information, delete personal information, correct inaccurate personal information, opt out of sale or sharing, limit certain uses or disclosures of sensitive personal information where applicable, and receive equal treatment when exercising applicable privacy rights.

9. Cookies, Browser Storage, and Analytics

Arkvas and its service providers may use cookies, browser storage, tokens, and similar technologies where necessary for authentication, security, payment processing, preferences, and temporary assessment state.

Arkvas uses privacy-focused analytics technologies, including Cloudflare Web Analytics, for aggregate traffic and performance measurement. Cloudflare Web Analytics is designed to operate without traditional client-side analytics cookies or persistent cross-site advertising identifiers.

Arkvas does not currently use third-party behavioral advertising cookies to build cross-site advertising profiles for sponsored-resource targeting.

For additional information about cookies, browser storage, and similar technologies used by Arkvas, see the Cookie Notice.

10. Your Choices

Account Information. Where account controls are available, you may update certain account information through those controls.

Privacy Requests. Applicable privacy requests may be submitted using the methods described in the U.S. State Privacy Rights section.

Promotional Email. If Arkvas sends promotional email, you may use the unsubscribe mechanism provided in the message. Transactional, account, security, legal, support, and service communications may continue where appropriate.

11. Data Security

Arkvas uses administrative, technical, and organizational safeguards designed to help protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

No method of transmission, processing, or storage can be guaranteed to be completely secure.

12. Data Retention

Arkvas retains different categories of information for different periods based on the purpose for which the information is used, the nature of the record, account status, security and fraud-prevention needs, dispute requirements, and applicable legal or accounting obligations.

A. Temporary Assessment State

Ordinary free-assessment navigation uses temporary encrypted and authenticated assessment state. That temporary state is retained only for the duration of the assessment session and expires automatically according to Arkvas's assessment-session configuration unless information is persisted through an available save, purchase, or claim process.

B. Account and Product Data

Account-facing and product data may be maintained while reasonably necessary to provide the account and Services. When final account deletion occurs after the 30-day recovery period described below, Arkvas deletes or anonymizes customer-facing account and product data in accordance with its deletion process, subject to limited retained records.

C. Support Records

General support records may ordinarily be retained for up to three years.

Support records materially related to a payment, refund, chargeback, fraud matter, or financial dispute may be retained for up to seven years.

D. Transaction, Consent, and Legal Records

Certain legal, consent, transaction, tax, refund, dispute, fraud-prevention, accounting, and compliance records may be retained for up to seven years where required or reasonably necessary.

E. Analytics, Security, and Operational Records

Event-level assessment lifecycle analytics are retained for up to 12 months. Arkvas may retain aggregated assessment statistics derived from those records indefinitely where the aggregated information no longer identifies or relates to an individual user or assessment.

Other security, fraud-prevention, operational, and system records may be retained for periods reasonably necessary for their applicable security, fraud-prevention, operational, legal, or compliance purposes. Arkvas may aggregate or de-identify such information where appropriate.

F. Third-Party Retention

Service providers such as payment processors may independently retain information under their own legal, contractual, security, or recordkeeping obligations. Deletion from Arkvas does not necessarily delete records independently controlled and lawfully retained by those third parties.

G. Account Deletion and Recovery

When you request deletion of your Arkvas account, the account enters a 30-day recovery period.

During that period, you may cancel the pending deletion through the recovery process made available by Arkvas.

After the 30-day recovery period expires, Arkvas finalizes the deletion and deletes or anonymizes customer-facing account and product data in accordance with its deletion process.

Certain transaction, payment, tax, consent, refund, dispute, fraud-prevention, accounting, support, and legal-compliance records may continue to be retained for the periods described in this Privacy Policy.

Retention of those limited records does not restore the deleted account or dashboard entitlement.

13. Third-Party Links and Services

The Services may link to websites, products, or services operated by third parties.

A link, sponsored placement, partner name, or co-branded element does not by itself mean that Arkvas controls that third party's privacy practices.

Third parties are responsible for their own privacy practices, terms, security, and processing activities.

You should review the privacy information provided by a third party before submitting personal information directly to it.

14. Children's Privacy

The Services are intended for a general audience and are not directed to children under 13.

Arkvas does not knowingly collect personal information online from children under 13 in circumstances requiring parental consent. If Arkvas becomes aware that it has collected such information from a child under 13 without legally sufficient authorization, Arkvas may take steps to delete or otherwise address the information.

Arkvas accounts and purchases are restricted to persons who are at least 18 years old, as described in the Terms of Use.

15. International Users

Arkvas is based in the United States. Personal information may be processed or stored in the United States and in other locations where Arkvas's service providers operate.

Privacy and data-protection laws in those locations may differ from the laws of your place of residence.

Your rights concerning personal information remain subject to applicable law.

16. Changes to This Privacy Policy

Arkvas may update this Privacy Policy from time to time.

An updated version will be posted with a revised "Last Updated" date and will become effective as stated in the updated Policy.

Changes to Arkvas's handling of personal information remain subject to applicable law.

17. Contact Information

For questions regarding this Privacy Policy, or to submit a privacy or data-rights request, contact: