Privacy policy

arkalabel is operated by ARKAYI AI & CONSULTING PRIVATE LIMITED, of B114 Sector 64 Noida, Noida Sector 62, Noida, Gautam Buddha Nagar, Uttar Pradesh, India - 201309. For the purposes of the Digital Personal Data Protection Act, 2023, we are the data fiduciary for the personal data described below. You can reach us at contact@arkalabel.io.

ZPL sent for rendering, and the data sent to generate a barcode, are held in memory for the duration of the request, used to produce the image or PDF, and returned. They are not written to disk by the service and are not kept after the response. This matters because shipping labels routinely carry names, addresses and order references, and barcodes often carry things like Wi-Fi passwords or payment strings: the safest position is not to hold any of it.

Our own request logs record the method, the route, the status and the time. They do not record the query string, which is where a barcode request carries its payload, and they do not record the body of a label request. Rendered images are not stored. If diagnostics are ever added that would retain submitted content, this page will be updated first.

• API keys, stored as a one-way hash. A key cannot be recovered from our records, only replaced, which is why it is shown to you once.
• Usage counters: how many requests a key has made in the current day, and when it was last used. Not the content of those requests.
• Payment records for each purchase: the Razorpay payment and order identifiers, the plan, the amount, the currency and the time, linked to the key it bought, together with the email address you entered at Razorpay's checkout, which Razorpay confirms to us. We use that address to send your receipt and to warn you before your plan ends, and for nothing else.

Using the free tier, the playground and the barcode generator needs no account, and we do not ask for your name or email to do so. We hold an email address only for someone who has bought a plan.

Payments are processed by Razorpay Software Private Limited. When you pay, you enter your card, UPI or bank details into Razorpay's checkout, not into our site, and they never reach our servers. Razorpay collects the information it needs to take the payment and handles it under its own privacy policy. We receive confirmation that a payment succeeded, with the identifiers above.

The public site sets no cookies and runs no analytics, advertising or tracking scripts. The only third-party code it loads is Razorpay's checkout, and only when you choose to buy a plan. The operator's admin area uses a session cookie to keep an administrator signed in; visitors never receive it.

The service keeps a short log of what it has done: the method, route, status and time of each request. It does not record the IP address, the query string or the body. The log is rotated by size, so it holds only the most recent activity and older entries are overwritten.

Your IP address is used to apply the free tier's rate limit. That happens in memory, is discarded when the window passes, and is not stored against an account. The company that hosts our servers may keep its own network-level records, under its own policies.

We use what we hold to provide the service, to issue and meter API keys, to take payment and keep the records the law requires, to keep the service secure and to answer you when you write to us. We do not sell personal data and we do not use it for advertising.

We share it only with Razorpay, to take payment; with Resend, which delivers the receipt and reminder emails on our behalf and so sees the address and the message, including the API key in your receipt; with the hosting provider that runs our servers; and with authorities where the law requires us to.

Submitted content is not kept. Usage counters last as long as the key exists. Payment records are kept for as long as tax and accounting law requires, which is longer than the key; the email address goes with it. Logs are rotated by size and overwritten.

Under the Digital Personal Data Protection Act, 2023 and the rules made under it, you may ask us for a summary of the personal data we hold about you and how it is used, ask us to correct or complete it, ask us to erase it, and nominate someone to exercise these rights for you if you die or become unable to. We will act on a request unless the law requires us to keep the data, in which case we will tell you why.

Deleting a key removes it and its usage counters. Payment records tied to it are retained for as long as the law requires.

If you have a complaint about how we have handled your personal data, write to our grievance officer, Anshul Saksena, at contact@arkalabel.io. We will acknowledge and resolve it within the time the law prescribes. If you are not satisfied, you may complain to the Data Protection Board of India once it is able to hear you.

The service is a developer tool for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children.

This policy is governed by the laws of India, and any dispute about it is subject to the exclusive jurisdiction of the courts at Delhi, India.

If what we do changes, we will update this page and its date before the change takes effect, and say so here if the change is a material one.