Privacy Policy

Last updated: 21 July 2026

This Privacy Policy explains how Arkhein ("Arkhein", "we", "us") collects, uses, and protects personal data when you visit our website, request a demo, or use our cloud security platform (the "Service"). We are committed to processing personal data lawfully and transparently under the EU General Data Protection Regulation (GDPR) and the Brazilian Lei Geral de Proteção de Dados (LGPD).

1. Information we collect

  • Contact & account data — name, work email, company, phone number and message content you provide when booking a demo or contacting us.
  • Usage & device data — IP address, browser type, pages viewed and similar technical data collected automatically via logs and cookies.
  • Customer cloud metadata — for platform customers, configuration and security metadata read (read-only) from your connected cloud accounts to build your security graph. We do not collect the contents of your data stores.

2. How we use your data

  • To respond to demo requests and communicate with you about our products.
  • To provide, operate, secure and improve the Service.
  • To comply with legal obligations and enforce our agreements.

3. Legal bases

We process personal data on the basis of your consent, the performance of a contract, our legitimate interests in operating and securing our business, and compliance with legal obligations.

4. Sharing

We do not sell personal data. We share it only with service providers (e.g. hosting, email delivery, analytics) acting on our instructions under appropriate contractual safeguards, or where required by law.

5. International transfers

Where personal data is transferred across borders, we rely on recognised transfer mechanisms such as the EU Standard Contractual Clauses and equivalent LGPD safeguards.

6. Data retention

We keep personal data only for as long as necessary for the purposes described above, to comply with legal obligations, and to resolve disputes.

7. Security

We apply administrative, technical and organisational measures — including encryption in transit, least-privilege access and continuous monitoring — to protect personal data against unauthorised access, alteration or loss.

8. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent. To exercise these rights, contact us at [email protected].

9. Cookies

We use essential cookies to operate the site and, with your consent, analytics cookies to understand usage. You can manage your preference via the cookie banner or your browser settings.

10. Changes

We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact

For any privacy question or request, contact [email protected].