Privacy Policy
Your privacy is important to us. This policy describes how we collect, use and protect your personal information.
Last updated: January 31, 2026
1. Data We Collect
When using Arko, we collect the following types of information:
Account information
- Email address
- Username or full name (if provided)
- Profile picture (if using Google Sign-In)
- Unique user identifier
Service usage data
- Conversations with AI agents
- Custom agent configurations
- Powers (webhooks and external connections)
- API keys generated for programmatic access
- Memories and context saved by agents
Technical data
- IP address
- Browser type and version
- Operating system
- Access dates and times
2. How We Use Your Data
We use the collected information to:
- Provide the service: Process your conversations with AI agents and maintain chat history.
- Personalize the experience: Configure agents according to your preferences and maintain contextual memories.
- Improve the service: Analyze usage patterns to optimize performance and develop new features.
- Security: Detect and prevent fraudulent or abusive activities.
- Communication: Send you important notifications about your account or changes to the service.
3. Storage and Security
We take the security of your data very seriously:
- Firebase Authentication: Your authentication is managed through Firebase, using industry-standard security protocols.
- Encryption: Sensitive data such as API keys are stored in encrypted form.
- Secure infrastructure: We use Amazon Web Services (AWS) with enterprise security configurations.
- Restricted access: Only authorized personnel have access to systems containing personal data.
3b. Data Retention Periods
We retain your personal data only for as long as necessary for the purposes described in this policy. The specific retention periods are:
Account data
- User profile: While the account is active. Deleted within 30 days after a deletion request.
- Agent conversations: While the account is active. Deleted within 30 days after a deletion request.
- Agent and Powers configurations: While the account is active. Deleted within 30 days after a deletion request.
- Memories and context: While the account is active. Deleted within 30 days after a deletion request.
Technical and security data
- Security logs (audit logs): 90 days from generation.
- Backups: 30 days. Backups are automatically deleted after this period.
- Technical data (IP, browser): 90 days from collection.
Financial data
- Transaction records: 5 years from the transaction, as required by Chilean tax legislation (Tax Code Art. 200).
- Billing data: 5 years from the document issuance date.
Once these periods expire, data is permanently deleted. For more information about the deletion process, see our Deletion Policy.
4. Sharing with Third Parties
We share data with third parties only in the following circumstances:
AI Providers
To process conversations, we send the content of your messages to language model providers such as OpenAI and Anthropic. These providers process the information according to their own privacy policies.
- Infrastructure providers: AWS and Firebase for storage and processing.
- Legal requirements: When required by law or to protect our legal rights.
We do not sell your personal information to third parties under any circumstances.
5. Your Rights
As an Arko user, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Correct inaccurate or incomplete data.
- Deletion: Request the deletion of your account and associated data. See our Deletion Policy.
- Portability: Export your data in a structured format.
- Objection: Object to the processing of your data in certain circumstances.
To exercise any of these rights, contact us at legal@arcaelas.com.
6. Cookies and Similar Technologies
We use cookies and similar technologies to:
- Keep your session active while using the service.
- Remember your preferences (such as dark/light theme).
- Analyze service usage to improve it.
You can configure your browser to reject cookies, although this may affect the functionality of the service.
8. Changes to this Policy
We may update this policy periodically. We will notify you of significant changes via the email address associated with your account or through a prominent notice on the service.
We recommend reviewing this page periodically to stay informed about how we protect your information.