Privacy Policy

This policy describes how ARK Teams (“ARK,” “we,” or “us”) handles personal data on arkteams.io and in the services we provide directly — the marketing site, checkout, buyer dashboard, docs, and email.

It does not cover the data your own deployment of an ARK Product collects from your users. When you deploy an ARK Product on your own infrastructure, you are the data controller for that deployment, and its privacy practices are yours to define.

We collect only the data we need to fulfill purchases and run the service:

• Account information — email address, name, and the GitHub username you supply for repo access.
• Purchase data — what you bought, the amount, the date, and a Stripe customer and payment-intent ID. We do not receive or store full card numbers.
• License and deployment data — license keys issued to you and the primary domain each one is bound to, populated on first activation.
• Support communications — the content of emails and forms you submit to support@arkteams.io.
• Usage analytics — aggregate pageviews, referrers, and country-level geography gathered via Google Analytics 4. We do not use analytics to build advertising profiles or sell data.
• Technical data — IP address, browser, and device type captured in server and CDN logs for security and debugging.

We use personal data only for these purposes:

• To fulfill your purchase — creating your account, issuing license keys, and granting GitHub repo access.
• To deliver transactional email (receipts, license keys, repo invitations, subscription notices) through Resend.
• To provide support and respond to your questions.
• To deliver product updates as pull requests to your repo.
• To understand which pages perform (aggregate analytics) so we can improve the site.
• To detect abuse, enforce our Terms, and comply with legal obligations.

We do not sell personal data, and we do not use your account data for targeted advertising.

We rely on a small set of processors to run the service. Each one sees only the data it needs for its role.

• Stripe — payment processing, subscription billing, and the Customer Portal. Handles card data directly; we receive customer and payment IDs, amounts, and status.
• GitHub — hosting your private source-code repository and managing collaborator invitations. We share your GitHub username to add you to your repo.
• Supabase — database and authentication for arkteams.io. Stores your profile, purchases, license keys, and subscription records.
• Resend — transactional email delivery (receipts, license keys, repo access, update notifications).
• Google Analytics 4 — aggregate usage analytics for arkteams.io. Uses cookies to count visits; IP addresses are anonymized before processing.
• Vercel — hosting and CDN for the arkteams.io site. Stores standard access logs.

Each of these providers maintains its own privacy policy, which governs what they do with data we send them.

We keep account, purchase, and license data for as long as your account is active and for a reasonable period after closure (typically up to seven years) to meet accounting and tax requirements. Support emails are retained for two years unless you ask us to delete them sooner. Aggregate analytics data is retained per Google Analytics’ default settings.

We use a small number of cookies:

• Session cookies — set by Supabase Auth so you stay logged in to the buyer dashboard.
• Analytics cookies — set by Google Analytics 4 to measure visits. You can disable analytics with browser privacy settings or an ad blocker.

We do not use advertising cookies, cross-site tracking pixels, or session recorders.

We use industry-standard security practices, including encryption in transit (HTTPS), encryption at rest for the database, row-level security policies so buyers can only access their own data, and strict separation between server-only secrets and client code. No system is perfectly secure — please use a strong password and let us know immediately if you suspect your account has been compromised.

Depending on where you live, you may have rights to access, correct, delete, export, or restrict our processing of your personal data. These rights apply in particular under the EU and UK GDPR and the California Consumer Privacy Act.

To exercise any of these rights, email support@arkteams.io from the address associated with your account. We will respond within thirty days. We won’t charge you for making a request, and we won’t retaliate for exercising your rights.

ARK Teams is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

ARK is based in the United States. If you use the service from outside the U.S., your data will be transferred to and processed in the U.S. and other countries where our providers operate. We rely on standard contractual clauses and the privacy protections of our processors for international transfers.

We may update this policy from time to time. The “Last updated” date above reflects the most recent change. Material changes will also be announced by email to active buyers.

Questions about this policy or about the data we hold on you? Email support@arkteams.io.