Privacy Policy

1. Scope and operator

Arzhu.com is a web application development platform provided by Datakale. This policy covers personal information about visitors, account holders and workspace members. Operator and contact details appear at the end of this page.

When adding other people’s information to a project, you must provide the appropriate notices and have authority to use it. Responsibilities and any additional processing terms for your customer data are determined separately.

2. Information we process

Account information includes your name, email, verification status, language and time zone. For password registration we store a one-way password hash. Google connections store a Google account identifier, email and verification information.

Workspace data includes descriptions, submitted links, design content, uploaded files, revision history, team permissions, credit transactions and support messages. Technical records include IP addresses, browser information, session/security records and timestamps. The current release does not collect card details; paid checkout is not open.

3. Purposes and legal grounds

We use information to create accounts, authenticate users, save projects, enforce access permissions, award signup credits and provide support. These activities relate to establishing and performing the service. Security and abuse prevention rely on legitimate interests balanced against your rights; mandatory records rely on applicable legal obligations.

Where an additional use requires consent, a separate choice must be provided. Accepting the service terms is not blanket consent to marketing or every type of data processing.

4. Sign in with Google

Choosing Google sign-in requests basic identity, email and profile permissions. Google provides your account identifier, name, email and verification status. Its profile response may include a picture URL; the current release does not save that picture to your account.

We use this information to create or connect your account, authenticate you and award signup credits once for an eligible verified account. We do not receive your Google password or request access to Gmail messages, Drive files or contacts. Google account information is not used for ad targeting, data sales or AI model training.

You can remove access in your Google account’s third-party connections settings. This does not automatically delete your Arzhu account or records. To request account deletion or removal of the connection, use the contact channels below.

5. Providers and international processing

Hosting, network security and email providers may process data to the extent needed to operate the platform. Selecting Google sign-in also involves processing by Google. People you authorize in your workspace can access content within their permissions. Information may be disclosed to competent authorities when legally required.

Processing may take place abroad depending on provider locations; applicable transfer requirements and safeguards must be observed. In this release, AI generation that sends project content to OpenAI or AtlasCloud is not enabled. Before enabling those features, we will explain what is sent to which provider and obtain any required permissions.

6. Cookies and browser storage

The secure session cookie can last up to 7 days, the browser security cookie used during Google sign-in 30 days, and the language cookie 365 days. Signing out removes the session cookie. These support authentication, security and your chosen language.

Your initial project description may be stored in the browser tab’s session storage to carry it through registration/sign-in. The application stops using it as intake data after 24 hours; closing the tab ends that session storage. The current application places no advertising or third-party analytics cookies. You may delete cookies in your browser; this can affect sign-in and other functions.

7. Retention, security and deletion

Account and project records are retained while needed for the service relationship and requested functions. Security records, credit transactions and dispute-related records are assessed against their purpose, applicable retention requirements and protection of rights. Deletion or anonymization requests are assessed using these criteria when the service purpose ends.

Account and data deletion requests are handled manually through support. Limited records may need to be retained by law; we will explain the outcome and any exceptions. Backup copies are included in the deletion assessment. Access controls, session checks and password hashing are used; absolute security cannot be guaranteed.

8. Your rights

Depending on applicable law, you may request information and access, correction, deletion, objection, and where the conditions apply, restriction or portability. You may withdraw consent for consent-based processing without affecting prior lawful processing.

Contact us by email or support below, including if you cannot sign in. Requests are handled subject to identity verification and applicable legal time limits. Your right to approach a competent data protection authority is preserved.

9. Updates and age

Arzhu is intended for adults who can enter into a contract personally or for a business; it is not a service directed at children. Please contact us if you believe we hold a child’s personal information.

New services or uses will be reflected in this policy. Material changes will be communicated through an appropriate channel and permission requested where required. The date of the current text appears above.