Privacy policy

VIRTU SOL IT ENABLED SERVICES PRIVATE LIMITED, Corporate Identification Number U72900TG2020PTC144567, registered office: Plot No. 9/2, Survey No. 64, ISIS Building, 1st Floor, HUDA Techno Enclave, Phase-2, Hyderabad, Telangana 500081, India. Contact: [email protected] or [email protected].

We act as the controller of personal data from website enquiries and our own communications. When a business uses ARKA to talk to its own customers, that business decides why and how its customers' data is used and we act as its processor, handling the data on its instructions.

Website enquiries. Name, email address, and, if you choose to give them, company, phone number, country, timeline, budget range, how you heard about us, and the message you write. When you submit the form we also receive the page you submitted from and its referrer and campaign parameters. If you accepted the browser-storage choice, we include where your first and latest visits came from (see the cookie policy).

Website assistant. What you type into the assistant. It is sent to an AI provider to produce a reply (see sharing below). Please do not enter sensitive personal data.

ARKA, on behalf of business customers. A customer's WhatsApp number and profile name, the messages they send (text, voice notes, documents and images), booking details, the state of the conversation, and delivery and read receipts reported by WhatsApp. Staff of the business may add notes.

Business customers' staff. Name, email address and role for console accounts, and sign-in records.

Technical data. IP addresses and request logs, used for security and to keep the services running.

• To reply to enquiries and manage our commercial relationship.
• To provide ARKA to business customers: answering enquiries, booking and reminding appointments, handing conversations to staff, and flagging stalled work.
• To bill for our services.
• To keep our systems secure and to investigate misuse.
• To meet legal obligations.

We use these providers to run our services. They process data for us and we do not sell personal data.

• Meta Platforms (WhatsApp Business Platform): sending and receiving WhatsApp messages.
• Groq: AI processing of messages (understanding a message, transcribing voice notes, drafting) and of the website assistant.
• Google: calendar scheduling, where a business customer connects Google Calendar.
• Twilio: voice calls, where used.
• Razorpay: payment processing for subscriptions.
• Resend: sending email.
• ElevenLabs: speech for the website assistant, if spoken replies are used.
• Hetzner Online GmbH: server hosting. Cloudflare: content delivery and security for this website.

We may also disclose data where the law requires it.

ARKA platform data is currently stored on servers provided by Hetzner in Helsinki, Finland. This website is currently hosted on servers provided by Hetzner in Ashburn, USA. Our team works from India, so data may be accessed from India.

Enquiries. We keep website enquiries in our CRM for as long as we need them to handle the enquiry and any relationship that follows, or until you ask us to delete them.

ARKA conversation data. We keep it while the business customer's account is active and until it is deleted on request or the customer's agreement ends. We do not currently run an automatic purge of conversation data.

Backups. We take daily database backups and keep them for about 14 days. Data deleted from our live systems therefore disappears from backups as those backups expire.

You can ask us to access, correct or delete personal data we hold about you. To request deletion, email [email protected] with the subject "Data deletion request". For WhatsApp data, include the WhatsApp number with its country code and, if you know it, the name of the business you were messaging.

We may need to confirm that the request comes from you. If your data is held for a business that uses ARKA, we may need to consult that business, because it decides how its customers' data is used. We will respond promptly and act within the time that the law applicable to you requires. We do not currently offer an automated deletion option inside WhatsApp. See also data deletion requests.

• Connections to our services use HTTPS.
• Incoming WhatsApp messages are checked against Meta's signature before they are processed.
• Each business customer's data is kept separate by account, and access is restricted to that account. This separation is covered by automated tests.
• Access to our servers is limited to authorised engineers using key-based sign-in.

See the cookie policy.

We will update this page when our practices change and show the date it took effect. This policy is governed by the laws of the State of Telangana, India, and disputes are subject to the courts at Hyderabad. Contact: [email protected].