Privacy policy

1. What We Collect

We collect the minimum information required to provision and operate the Arkheia platform.

• Email address when you request a free API key or contact Arkheia for support.
• API usage metrics needed for rate limiting, billing, service health, and abuse prevention.
• Operational metadata such as timestamps, subscription status, and audit references required to administer customer accounts.

2. What We Do Not Collect

Arkheia is designed to minimize content exposure.

• We do not store prompt text as part of standard hosted detection operations.
• We do not store response text or model outputs as part of standard hosted detection operations.
• We do not use customer prompts or model outputs to train foundation models.
• Detection is based on statistical and governance features rather than retaining user content by default.

3. Storage and Retention

Service data is stored in PostgreSQL on Railway in the United States region.

Usage logs are retained for 90 days unless a shorter period is required for legal or operational reasons.

Audit logs are retained according to the customer retention setting or contract terms where applicable.

4. Third Parties

Arkheia uses a small set of subprocessors to operate the service.

• Stripe for payment processing and subscription billing.
• Google OAuth for admin login only, where enabled.
• Railway for hosted application and database infrastructure.

5. Security and Access

We apply access controls, auditability, and least-privilege principles to protect customer accounts and service data.

Where a customer deploys Arkheia in a private or on-premise environment, that customer controls the retention and access boundaries for that deployment.

6. Job applicants

This section applies if you apply to work with us, whether by LinkedIn message, by email or through a referral. The controller is Arkheia Ltd, a company registered in England and Wales (company number 17302986), Stratford-upon-Avon. Contact: dmurfet@arkheia.ai.

What we collect: your name and contact details, and what you send us, including your note, examples of your work and any prompts you share. If you go further, we also hold any task we ask you to do, our interview notes and references. Please do not send confidential information about your employer or clients, or other people's personal data.

Why, and our lawful basis: to assess your application and decide whether to offer you a role. We rely on taking steps at your request before entering into a contract, and on our legitimate interest in recruiting well. If you tell us about a disability so that we can make adjustments, we use that information only to make those adjustments, not to assess you.

How we assess applications: we use AI tools to help us summarise and organise applications, but a person reviews every application and makes every decision. No decision is made by automated means alone. Following the instructions in the advert, including its reference code, is one of the things we assess. If you need to apply another way, email us and it will not count against you.

Who sees it: only the people at Arkheia involved in hiring, and the service providers we use to hold messages, email and documents, under contract. Some of these providers may process data outside the UK, with the safeguards UK data protection law requires. We do not sell your data or use it for marketing.

How long we keep it: if you are not hired, we keep your application for six months after we tell you our decision, then delete it. With your permission, we will keep it for up to 12 months in case another role comes up. If you are hired, it becomes part of your staff record.

Your rights: you can ask for a copy of your data, or ask us to correct it, delete it or stop using it, by contacting us at the address above. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

7. Contact

For privacy requests, data questions, or support, contact support@arkheia.ai.