Arka

← Legal

Privacy Policy

Effective 17 October 2026

1. Who we are

This policy is published by VulnTech, India (“we”), which makes Arka and runs this website, the live demo and the update service. We are responsible for the personal data described here. You can reach us at contact@vulntech.com.

2. In short

3. The website and downloads

When you visit this website or download Arka, our web server automatically records technical information for each request: your IP address, the date and time, the page or file requested, the response, the referring page and your browser's user agent. We use these records only to operate the website, to deliver downloads, to measure overall load and to detect and prevent abuse and attacks (including automatically blocking addresses that attack our servers).

We do not use these records to identify or profile visitors, and we do not sell or share them, except as described under “Who receives data”. They are deleted or anonymised once they are no longer needed for these purposes, normally within 90 days, unless we need them longer to investigate a specific security incident.

4. Update checks by the Arka software

An Arka installation checks our update service at upgrades.vulntech.com for a new version about every six hours. Each check is an ordinary HTTPS request that contains the Arka version and the machine type (for example arka/0.1.6 (x86_64-linux)) and, as with any connection, the server's IP address. Downloading an update is a request of the same kind. We process this information to deliver updates and to understand, in aggregate, which versions are in use; it is logged and kept as described above.

Update checks can be turned off by setting check = false in the [update] section of the Arka configuration.

5. Data in your Arka installation

Arka runs entirely on your servers. Its configuration, certificates, access logs, security events, control-panel accounts and the traffic of the sites you host stay there; VulnTech has no access to them. If you use Arka to process personal data (for example your visitors' IP addresses in access logs), you are responsible for that processing and act as its controller.

6. The live demo

The live demo is an Arka installation operated by us. It records the same technical information as this website, and its audit log records the actions taken with the shared demo account. Please do not enter personal information into the demo; it is reset regularly.

7. When you email us

If you contact us by email, we use your message and email address to answer you and keep the correspondence for as long as needed to deal with your request and any follow-up.

8. Why we may process this data

We process the data described here to provide the services you ask for (the website, downloads and updates) and because we have a legitimate interest in keeping them secure and working, or with your consent where you give it (for example by writing to us). Where the Digital Personal Data Protection Act, 2023 (India) or the EU or UK General Data Protection Regulation applies, we process personal data in accordance with it.

9. Who receives data

We do not sell personal data. Our servers are hosted by a hosting provider that processes data on our behalf under contract. We may disclose information where the law requires it or where it is necessary to protect our services, our users or the public from fraud or attack.

10. Where data is stored

Our servers may be located outside your country. Where we transfer personal data internationally, we do so in accordance with applicable law.

11. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or erased, to object to or restrict its processing, to withdraw consent, and to complain to a data protection authority. To exercise these rights, or to raise a grievance about how we handle personal data, write to contact@vulntech.com. Because we collect so little, we may need details such as the IP address and time of your visit to find your records.

12. Security

We protect the data we hold with encryption in transit, access controls and the security features of Arka itself, which runs our servers.

13. Children

The website and Arka are intended for professionals and are not directed at children. We do not knowingly collect personal data from children.

14. Changes to this policy

We may update this policy. The effective date at the top shows when it last changed; if a change is significant, we will say so on this page.

15. Contact

VulnTech, India
Email: contact@vulntech.com