Privacy Policy

ArkAgentic (ABN 92 627 301 153) is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how we collect, use, store, and disclose personal information when you use https://www.arkagentic.com and our services, including Invoice Extractor.

1. Information We Collect

Account information

Email address, name (if provided), and a securely hashed password. We never store plain-text passwords.

Billing information

Payments are processed by Stripe, Inc. We do not store credit card numbers. Stripe provides us with limited non-sensitive data (subscription status, billing country, last four card digits). See the Stripe Privacy Policy.

Usage data

IP address (used for security and trial fraud prevention), browser type, pages visited, access timestamps, and error logs.

Documents you process

When you use Invoice Extractor, we temporarily access files from your connected cloud storage to extract invoice data. Documents are removed from our servers within 24 hours of processing. We do not permanently store your invoice documents.

2. How We Use Your Information

• Provide, operate, and improve our services
• Process payments and manage your subscription
• Authenticate your identity and secure your account
• Detect and prevent fraud and security incidents
• Send transactional emails (receipts, service notices)
• Respond to your enquiries and provide support
• Comply with legal obligations

We do not use your documents or invoice data to train or improve any AI or machine learning models. We do not sell your personal information.

3. Cloud Drive Access

When you connect a cloud drive (e.g. Microsoft OneDrive), we request access only to the specific folders you select. We use this access solely to read invoice files and write result files back to your chosen output folder. We do not access any files outside your selected folders. You can revoke access at any time through your cloud provider settings or your ArkAgentic account settings.

4. AI and Third-Party Providers

Our services use third-party AI providers to assist with document processing. Limited extracted text from your documents may be transmitted to these providers to generate outputs. We require our AI providers to operate under data processing terms that prohibit use of your data for model training. Providers we may use include:

• OpenAI, Inc. (United States) — Privacy Policy
• Anthropic, PBC (United States) — Privacy Policy

5. Disclosure of Your Information

We may disclose your personal information to:

• Service providers — companies helping us operate our services (authentication, hosting, payment, email) under strict data processing agreements
• Legal requirements — when required by law, court order, or to protect our legal rights
• Business transfers — if ArkAgentic is acquired or merges with another entity, subject to equivalent privacy protections

We do not share your personal information for third-party marketing.

6. Data Storage and Security

Account data is stored via Supabase on AWS infrastructure. Invoice processing occurs on AWS in the Asia-Pacific (Sydney) region. We implement TLS/HTTPS encryption in transit, encrypted storage at rest, and strict access controls. No transmission method is 100% secure, but we take reasonable measures to protect your information.

7. Data Retention

• Account data — retained for the account lifetime and up to 2 years after closure
• Processed documents — deleted within 24 hours of processing
• Billing records — retained for 7 years as required by Australian taxation law
• Usage logs — retained for up to 90 days

8. Cookies

We use session cookies necessary for authentication and service operation. We do not use advertising cookies or third-party tracking pixels. Disabling cookies may limit certain service features.

9. Your Privacy Rights

Under the Australian Privacy Principles, you have the right to:

• Access — request a copy of your personal information
• Correction — request correction of inaccurate information
• Deletion — request deletion of your personal information (subject to legal retention requirements)
• Complaint — lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have not handled your information correctly

To exercise these rights, contact us at support@arkagentic.com. We will respond within 30 days.

10. Children

Our services are not intended for anyone under 18. We do not knowingly collect information from minors. If you believe a child has provided us with personal information, please contact us immediately.

11. International Transfers

Some service providers are located in the United States. We take reasonable steps to ensure they handle your information in accordance with the Australian Privacy Principles or equivalent protections.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be notified by email or in-product notice before they take effect.

13. Contact Us

ArkAgentic
ABN: 92 627 301 153
11 Hassall Street, Parramatta NSW 2150, Australia
Email: support@arkagentic.com

If you are not satisfied with our response, contact the OAIC: www.oaic.gov.au · Phone: 1300 363 992