1. About this Policy
This Privacy Policy explains how ARVICA AI HOLDINGS PTY LTD (ABN 30 702 257 761), trading as Arvica Cloud, of Level 7, Tower 3, World Trade Centre, 18-38 Siddeley Street, Docklands VIC 3005, Australia (Arvica, we, us) collects, holds, uses and discloses personal information in connection with our websites, business enquiries, account registration, GPU services, payments and support. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
This Policy does not cover personal information that our business customers process using our services. That information is handled under the customer's instructions and our Data Processing Agreement.
2. Personal information we collect
Depending on how you deal with us, we may collect names and business contact details; company, ownership and authorised signatory details for customer verification; end-use and end-user information needed for sanctions and export control screening; billing and payment references (card details are handled by our payment processor); account, device and authentication records; IP addresses and access logs; service usage and technical telemetry; and the content of your communications with us.
No supporting documents are required with an initial business verification submission. We may request additional information separately where reasonably necessary for verification.
3. How we collect it
We collect personal information directly from you, from your employer or account administrator, from payment processors and verification service providers, from infrastructure and service providers we use to deliver the services, and automatically when you use our websites and services. When you submit an enquiry, our website may record the page you came from, language, country and campaign information.
4. How we use it
We use personal information to respond to enquiries and prepare quotes; open and manage accounts; provision, operate, secure and support the services; process payments and keep accounts; verify customers and screen for sanctions and export control compliance; prevent fraud and misuse; improve our services; send service notices; and meet our legal obligations. We send marketing communications only in accordance with the Spam Act 2003 (Cth), and you can unsubscribe at any time.
We do not use customer workloads or customer data to train AI models.
5. Disclosure and overseas recipients
We disclose personal information on a need-to-know basis to our service providers (including data centre, cloud infrastructure and network providers, payment processors, identity verification and screening providers, email and customer support tools), to our professional advisers, and to government authorities where required by law. We do not sell personal information.
We and our service providers hold personal information in Australia. Some of our service providers (including hosting, email, payment and GPU infrastructure providers) are located in, or process information in, the United States. Where you deploy services in another region, information connected with that deployment may also be held in the country you select. We take reasonable steps to ensure overseas recipients handle personal information consistently with the Australian Privacy Principles.
6. Security and retention
We protect personal information using role-based access controls, multi-factor authentication on the infrastructure management accounts we use to administer our hosting, database, code and deployment providers, audit logging of privileged actions in the Arvica Portal and Admin console, encryption in transit, and contractual controls with our service providers. No method of transmission or storage is completely secure.
We keep personal information only for as long as needed for the purposes described in this Policy. Financial and transaction records that we are required by law to retain (for example for tax and accounting purposes) are kept for the period the law requires, which is generally seven (7) years; other personal information is deleted or de-identified when it is no longer needed.
7. Access, correction and complaints
You may request access to or correction of your personal information, or make a privacy complaint, by emailing our Privacy Officer at support@arvica.ai. We will acknowledge your request promptly and aim to respond within thirty (30) days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (www.oaic.gov.au).
9. International users and children
Where the EU or UK General Data Protection Regulation or other foreign privacy laws apply, we will handle personal information in accordance with those laws, and transfer arrangements can be put in place on request. Our services are intended for businesses and are not directed to children.
10. Changes and contact
We may update this Policy by publishing a revised version. Privacy enquiries: Privacy Officer, Arvica Cloud, support@arvica.ai, Level 7, Tower 3, World Trade Centre, 18-38 Siddeley Street, Docklands VIC 3005.