Privacy Policy

1. Who We Are and What This Policy Covers

Arkenwell Intelligence Pvt. Ltd. ("Arkenwell Intelligence Pvt. Ltd.", "we", "us") operates the website at www.arkenwell.co, the web terminal at terminal.arkenwell.co and the related APIs (together, the "Platform"). For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it, Arkenwell Intelligence Pvt. Ltd. is the Data Fiduciary for the personal data described here.

This policy applies to everyone who visits the website, creates an account, or subscribes. By using the Platform you acknowledge this policy; where we rely on your consent, we ask for it separately and you may withdraw it at any time (Section 9).

2. Personal Data We Collect

We do not ask for, and you should not send us, PAN, Aadhaar, bank account or brokerage login details. We do not connect to your brokerage account.

3. Why We Use It

• To create and secure your account, verify your identity at sign-in, and enforce plan device limits — performance of the service you requested.
• To provide the terminal, save your workspace, and run and deliver the alerts you set — performance of the service.
• To process subscriptions, renewals, cancellations and refunds — performance of the service and legal obligations.
• To detect and prevent fraud, abuse and security incidents, and to keep the logs the law requires — legitimate uses and legal obligations under Section 7 of the DPDP Act.
• To respond to your requests, support tickets and grievances.
• To send service messages about your account, billing or material changes to our terms. We do not send marketing email without your consent.

We do not sell or rent personal data, and we do not use it for profiling unrelated to the service. The only advertising use is measuring our own ads: the Meta pixel described in section 6 lets Meta record visits to our public website pages and the moment an account is created. We do not send Meta your name, email address, password or workspace data, and we do not use your workspace data for advertising.

4. Who We Share It With

We share personal data only with service providers that process it on our behalf and under our instructions, and only to the extent each one needs:

We may also disclose personal data where required by law, court order or a lawful request from a government authority; to protect the rights, property or safety of our users or the public; or to a successor entity in a merger, acquisition or restructuring, which will remain bound by this policy.

5. Transfers Outside India

Our servers and database are located in India. Some providers listed above process data outside India, for example to deliver email or serve web pages from a location near you. Such transfers are made as permitted under Section 16 of the DPDP Act, and not to any country the Central Government has restricted.

6. Cookies and Browser Storage

We use cookies and your browser's local storage to keep you signed in, remember your plan selection, and remember interface preferences such as theme and layout. These are necessary for the Platform to work.

Separately, our public website pages load the Meta (Facebook / Instagram) pixel to measure our advertising. It sets a cookie (_fbp, and _fbc if you arrive from a Meta ad) and sends Meta the address of the page you open, the page you came from, your IP address, and browser and device details. It sends only two events: a page view when a public page loads, and a notice that an account was created. It does not receive your name, email address, password or workspace data. Meta handles the data it receives under its own privacy policy. The pixel is not loaded when you open a sign-in, checkout or account page directly. To stop it, use your browser's tracking protection or an ad blocker, or adjust your ad preferences in your Meta account.

Apart from this pixel we do not use advertising or cross-site tracking cookies. See the Cookie Policy for the full list.

7. How Long We Keep It

• Account and workspace data: for as long as your account is active, and erased within 30 days of a verified deletion request, except as below.
• Verification codes: expire within minutes of issue and cannot be reused.
• Security and access logs: at least one year, as required by the Digital Personal Data Protection Rules, 2025, and then deleted.
• Billing and transaction records: up to eight years, as required by Indian tax and accounting law.
• Support correspondence: for as long as needed to resolve the matter and any related dispute.

8. How We Protect It

We use reasonable security practices appropriate to the data we hold, including encryption of all traffic in transit (HTTPS/TLS), hashed password storage, signed and expiring session tokens, passkey sign-in, per-user data isolation, rate limiting, and access to production systems restricted to authorised personnel.

No system is completely secure. If a personal data breach occurs, we will notify affected users and the Data Protection Board of India as required by the DPDP Act and its rules, describing what happened, its likely impact and the steps we are taking.

9. Your Rights

Under the DPDP Act you have the right to:

• Obtain a summary of the personal data we process about you and the processing activities involved;
• Have inaccurate or incomplete data corrected, completed or updated;
• Have your personal data erased, subject to the retention required by law (Section 7);
• Withdraw consent you have given, as easily as you gave it — this does not affect processing already carried out;
• Nominate another person to exercise these rights in the event of your death or incapacity; and
• Have your grievances addressed by us, and, if you are not satisfied, complain to the Data Protection Board of India.

To exercise any right, email privacy@arkenwell.co from the address registered to your account. We may ask you to verify your identity before acting on a request.

10. Age Restriction

The Platform is intended only for individuals aged 18 or over. We do not knowingly process personal data of children. If we learn that an account belongs to someone under 18, we will close it and erase the associated data.

11. Changes to This Policy

We may update this policy when our practices or the law change. The effective date above shows the current version. For material changes we will notify registered users by email or in the terminal before the change takes effect.

12. Contact and Grievance Redressal

Questions, requests and grievances about your personal data may be sent to: