Arkwatcher Privacy Policy

Last updated: October 18, 2025

Arkwatcher (“we,” “our,” or “us”) is a local-first security tool that helps developers and teams detect cloud misconfigurations and policy issues. We respect your privacy and are committed to keeping your personal information secure and minimal.

1. Information We Collect

1.1. Account Information
When you sign in using Google Sign-In, we collect your email address — used to create your account, manage access, and send important updates or occasional product news.

1.2. Scan Results
When you use the Arkwatcher Docker scanner, the tool performs scans locally and sends only validation results to our servers. We do not collect or store sensitive cloud data, credentials, or configurations.

We only receive resource or service names, rule results (pass/fail), timestamps, and non-personal project identifiers.

1.3. Usage Tiers
Free users: Scan results are temporary and automatically deleted after a short period.
Subscribed users: Scan results are retained in your account so you can view history and reports.

2. How We Use Information

  • Authenticate and manage user access
  • Display scan results in your dashboard
  • Improve the reliability and security of Arkwatcher
  • Communicate updates, feature announcements, or promotional content (optional)

3. Data Retention

Emails and account details are kept while your account is active.
Free scan results are deleted automatically after a limited time.
Subscribed users’ scan results are stored until the account or subscription is deleted.
You may request data deletion at any time by contacting support@arkwatcher.com.

4. Data Sharing

We do not sell or rent personal data. Information may only be shared if required by law or court order, or to prevent abuse or maintain system security.

5. Data Security

We use Supabase as our managed database and apply standard security measures:

  • Encrypted data in transit (HTTPS)
  • Role-based database access
  • Limited access to personal data

We never ask for or store your cloud credentials.

6. Your Rights

  • Request a copy or deletion of your account data
  • Opt out of promotional emails
  • Withdraw your consent at any time

Contact us at support@arkwatcher.com to exercise these rights.

7. Third-Party Services

We rely on Google Sign-In for authentication (governed by Google’s Privacy Policy) and Supabase for secure data storage and authentication management.

8. Changes to This Policy

We may update this Privacy Policy occasionally to reflect improvements or legal requirements. The latest version will always be available on our website.

9. Contact

For privacy inquiries or data requests:
📧 support@arkwatcher.com