Arkivana Privacy Policy

Effective date: August 30, 2026
Last updated: August 30, 2026

Arkivana is operated by Proven Digital, LLC (“Arkivana,” “we,” “us”). This policy explains what information we collect, how we use it, how long we keep it, and what control you have over it.

We’ve tried to write this in plain language. If anything is unclear, email us at [email protected] and we’ll explain it.

1. The short version

• We connect to your Google Search Console account in read-only mode, with your permission, to generate reports and alerts for you.
• We keep your search performance data indefinitely while you’re a customer. This is deliberate — the long-term archive is the core of what Arkivana does, and Google itself only retains sixteen months.
• We do not sell your data, we do not share it with other customers, and we do not use it to train machine learning models.
• You can export everything at any time, and delete everything at any time.

2. Information we collect

2.1 Information you give us

• Account information: name, email address, and password (stored only as a cryptographic hash, never in plain text).
• Billing information: processed by Stripe. We store a customer reference, your subscription status, and billing history. We never receive or store your full card number.
• Communications: anything you send us by email or through in-product support.

2.2 Google Search Console data

When you connect a Google Search Console property, we access the following through Google’s official API using the webmasters.readonly scope:

• Search performance data: clicks, impressions, click-through rate, and average position, broken down by search query, page URL, country, device, and date.
• URL indexing status: whether specific URLs on your site are indexed by Google, and any crawl or indexing issues Google reports.
• Sitemap data: the sitemaps you’ve submitted and their processing status.

We also receive your Google account email address and the list of Search Console properties you have access to, so you can select which ones to connect.

We request no other Google scopes. Arkivana has read-only access and cannot modify your Search Console account, submit sitemaps, request indexing, remove URLs, or change your property settings.

2.3 Catalog data

If you connect an eCommerce platform (such as Adobe Commerce or Shopify), we read product and category structure — URLs, SKUs, category assignments, and product names — so that search performance can be mapped to the catalog behind it. We do not access customer records, order data, payment information, or any personal data belonging to your shoppers.

2.4 Information collected automatically

• Usage data: which pages and features you use inside Arkivana, to understand what’s working and what isn’t.
• Technical data: IP address, browser type, and device type, collected in server logs for security and troubleshooting.
• Cookies: we use cookies that are strictly necessary for authentication and session management. We do not use advertising cookies or third-party tracking pixels.

3. Google user data: use, sharing, and Limited Use

Arkivana’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We use Google Search Console data only to provide and improve the user-facing features of Arkivana — the dashboards, reports, and alerts you see in the product and receive by email.
• We do not transfer Google user data to third parties except as necessary to provide the service (see our subprocessors in Section 6), to comply with applicable law, or as part of a merger or acquisition where the data remains subject to this policy.
• We do not use Google user data for advertising, and we do not sell it.
• We do not allow humans to read your Google user data, except: with your explicit consent (for example, when you ask us to look at something in a support request); where necessary for security purposes such as investigating abuse; to comply with applicable law; or where the data has been aggregated and de-identified.
• We do not use Google user data to develop, improve, or train generalized machine learning or artificial intelligence models.

4. How we use your information

We use the information described above to:

• Generate the reports, dashboards, and analysis that make up the Arkivana product
• Detect changes in your search performance and send you the alerts and digests you’ve configured
• Maintain your permanent search data archive so that historical comparisons remain available
• Authenticate you and keep your account secure
• Process payments and manage your subscription
• Respond to support requests
• Understand aggregate product usage so we can improve Arkivana

We do not use your data for any purpose incompatible with the above without asking you first.

5. Data retention

This is the part that makes Arkivana different, so it’s worth being explicit.

Google Search Console retains only sixteen months of search performance data. Once it ages out there, it is gone permanently and cannot be recovered.

Arkivana retains your search performance data indefinitely for as long as your account is active. This is the central purpose of the product: it lets you compare this season against three seasons ago, track a product’s full lifecycle, and understand long-term trends that a sixteen-month window makes invisible. That archive cannot be rebuilt retroactively, which is why we build it from the day you connect.

We think this is a benefit, not a compromise — but it does mean we hold more of your data for longer than a tool that only shows you the last year. You should know that, and you should have control over it. So:

• You can export your complete data at any time, in a machine-readable format, without asking us.
• You can delete your data at any time, either selectively (a single property) or entirely (your whole account).
• When you delete something, we delete it. Deletion requests are processed within 30 days across all production systems. Encrypted backups are purged on a rolling 90-day cycle, after which no copy remains.
• If you close your account, we retain your data for 30 days so you can change your mind, then delete it permanently. If you’d like it deleted immediately instead, email us and we’ll do it.

We retain billing records for as long as required by tax and accounting law, typically seven years. These contain no Search Console data.

6. Who we share data with

We do not sell your personal information, and we have never done so.

We share data with a small number of service providers (“subprocessors”) who help us run Arkivana. Each is bound by contract to protect your data and use it only to provide services to us:

We’ll update this list when it changes. Material changes will be announced to active customers by email before they take effect.

We may also disclose information if legally required to do so, or where necessary to protect our rights, our users’ safety, or to investigate fraud or abuse. If we receive a legal request for your data, we’ll notify you unless we’re legally prohibited from doing so.

7. Security

• All data is encrypted in transit using TLS and at rest.
• OAuth tokens receive additional protection. Refresh tokens are encrypted at rest with a key held separately from the database, and are never logged, never exposed in the application interface, and never transmitted to any third party.
• Access to production systems is limited to the two people who operate Arkivana, protected by multi-factor authentication.
• Customer data is logically isolated so that no customer can access another’s data.
• We follow OWASP guidance for web application security.

No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you promptly and provide what we know about the scope and our response.

8. Your rights and choices

Regardless of where you live, you can:

• Access and export all data we hold about you
• Correct inaccurate account information
• Delete your data, selectively or entirely
• Disconnect Google access at any time, either inside Arkivana or from your Google Account permissions page. Revoking access there immediately stops all future data collection.
• Opt out of non-essential email. Alert and digest emails are the product, so you control them through your notification settings rather than a global unsubscribe — but every marketing email we send includes one-click unsubscribe.

If you’re in the EEA, UK, or Switzerland, you additionally have the right to object to or restrict processing, the right to data portability, and the right to lodge a complaint with your supervisory authority. Our legal basis for processing is the performance of our contract with you (providing the service you’ve signed up for) and our legitimate interests in securing and improving the product. Data is stored in the United States; transfers are made under the Standard Contractual Clauses.

If you’re in California, you have the right to know what personal information we collect, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined under the CCPA. We will not discriminate against you for exercising these rights.

To exercise any of these, email [email protected]. We’ll respond within 30 days.

9. Children

Arkivana is a business tool and is not directed at anyone under 18. We do not knowingly collect information from children.

10. Changes to this policy

If we make material changes, we’ll email active customers at least 14 days before the changes take effect and update the date at the top of this page. Continued use after that constitutes acceptance.

11. Contact

Proven Digital, LLC
5806 Grove Ave #357
Richmond, VA 23226
[email protected]