ARKMONT Privacy Policy
Last updated: October 28, 2026
1. Data controller
Miguel Arce Montoro, Calle de Campoamor, 28004 Madrid, Spain. Contact: privacy@arkmont.net. ("ARKMONT", "we", "us").
2. What we collect
| Data | Source | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|---|
| Email address | You, at sign-up or free check | Account, sign-in links, service emails, reports | Contract (6.1.b) |
| Email for newsletter/marketing | You, only if you tick the optional box on the free check form | Follow-up emails with tips and occasional offers on paid plans | Consent (6.1.a), withdrawable any time |
| Brand name, domain, competitors, keywords | You | Running AI-visibility checks | Contract (6.1.b) |
| Check results (AI answers, mentions, scores, history) | Generated by the service | Delivering reports and trends | Contract (6.1.b) |
| Billing data (name, country, VAT ID, payment status; card data is handled only by Stripe) | You / Stripe | Payments, invoicing, tax | Contract (6.1.b); legal obligation (6.1.c) |
| Technical data (IP, browser, logs, essential cookies) | Automatically | Security, fraud prevention, debugging | Legitimate interest (6.1.f) |
We do not sell personal data, and we do not make decisions with legal effects based solely on automated processing.
3. Processors and recipients
- Vercel Inc. (USA): hosting, storage, logs.
- Stripe Payments Europe Ltd. (Ireland) / Stripe, Inc.: payments and subscriptions.
- AI providers: OpenAI, Anthropic, Google (Gemini), Perplexity AI, xAI (Grok). We send them only the prompts needed for checks (brand, domain, category and keywords), never your email address. Where available, we use API settings that exclude the data from model training.
- Resend, Inc. (USA): sending of transactional and marketing emails, and our contact list (email address, tags, language and unsubscribe status).
- Public authorities, when required by law.
4. International transfers
Some processors are in the USA. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, and/or on the European Commission's Standard Contractual Clauses (art. 46 GDPR).
5. Retention
- Account data and check results: while the account is active, then deleted within 30 days of closing it (except backups, which are overwritten within 90 days).
- Free one-off check without an account: 12 months.
- Marketing: until you unsubscribe or withdraw consent.
- Billing records: 6 years (Spanish Commercial Code, art. 30) and as required by tax law.
- Logs: up to 30 days.
6. Your rights
You can request access, rectification, erasure, restriction, portability and objection, and withdraw consent at any time, by writing to privacy@arkmont.net. We reply within one month. You may also complain to the Agencia Española de Protección de Datos (www.aepd.es).
7. Cookies
Essential cookies, always on: arkmont_session (keeps you signed in, 30 days) and ark_consent (remembers your cookie choice, 12 months). Optional, only if you accept in the cookie banner: ark_src (remembers which site or campaign brought you here, 90 days). Our page-view statistics (Vercel Web Analytics) use no cookies and do not identify you. You can change your choice any time with the "Cookies" link in the footer.
8. Security
Encryption in transit (HTTPS), access control and least-privilege access for service providers.
9. Minors
The service is not directed at people under 14 (LOPDGDD art. 7).
10. Changes
We will announce material changes by email or on the website at least 15 days in advance.