Ark · Black Diamond Labs Inc.

Privacy Policy

Effective September 26, 2026

Ark is the business call-handling product of Black Diamond Labs Inc. (“we,” “us”). This policy explains information handled through the Ark website, accounts, and inquiries about our service. Customer call services are subject to the separate scope, notices, and data terms agreed for each pilot or customer.

Information you provide

Our demo request form asks for your name, work email, and company. You may also provide your role, company size, call-handling needs, and a short message. We use these details to respond to you, assess whether Ark fits your business, arrange a demo, and keep track of the inquiry. Submitting a request does not subscribe you to a marketing list or activate a service.

Please do not submit payment-card details, passwords, health information, customer records, call recordings, or other sensitive information. This website is intended for business inquiries, not children or emergency requests.

Website operations and abuse prevention

Hosting and security systems process technical request information such as IP addresses, request times, browser information, and error data to serve and protect the website. Our inquiry application uses keyed hashes of an IP address and email address to limit repeated submissions. It does not store those addresses in its abuse-control records as plain text. Inquiry content is encrypted in the application database.

We use error and limited performance monitoring through Sentry, with personal-data sending disabled and application redaction. We do not intentionally include form contents in operational logs. Restricted customer and founder pages use Clerk authentication; authentication resources and necessary session cookies support sign-in and access control.

Accounts and business access

Ark founders arrange account access for a specific business. Clerk stores account identifiers, email addresses, credential and verification information, and session records. Passwords and sign-in verification are handled by Clerk, not by a separate Ark password database. We store the Clerk account identifier, assigned business, role, access state, and audit records in Neon. Provisioning uses a keyed hash of the entered email to recognize repeat requests. Account labels shown to authorized founders are retrieved from Clerk.

The customer dashboard displays permitted business records such as call timing and state, appointments, and callback follow-up. It does not provide a public recording or transcript viewer. Access is checked for the assigned business; founders receive operational access only through their recorded permissions. Creating an account or draft business does not activate telephone service, billing, or a production integration.

Analytics, cookies, and advertising

We have not enabled Google Analytics, Meta Pixel, advertising conversion pixels, session replay, or advertising cookies on this website. Necessary hosting, security, and authentication technologies may operate. We do not use your inquiry to create advertising audiences or sell it to advertisers. If we introduce optional tracking, we will update this notice and obtain any consent required before enabling it.

Who processes information

• Vercel hosts the website and processes web requests.
• Neon provides the PostgreSQL database for encrypted inquiries, business access, operational records, and audit history.
• Resend sends notification emails to the Ark team and reports provider delivery events. Automated inquiry notifications contain a reference and a protected console link, not your full inquiry.
• Sentry supports error and limited performance monitoring.
• Clerk provides authentication, account verification, and account recovery.
• Google Cloud runs the protected gateway used for business records and access checks.

Authorized members of our team review inquiries and respond through our business email systems. If you email us directly or we reply by email, the correspondence is processed by the email services used by us and you. Providers may process information in countries other than yours. We may disclose information when legally required, to protect rights and security, or to advisers who need it for those purposes.

Retention and deletion

The inquiry database has a 90-day retention limit from submission. Scheduled processing removes expired inquiry records, including their encrypted content and notification state. Short-lived application abuse-control records expire after one day. A saved request may be reviewed and acted on before that limit.

This database limit does not automatically delete correspondence from email inboxes, provider operational records, or backups. We retain relevant correspondence while needed to handle your inquiry, an ensuing business relationship, security matters, or legal obligations, and review deletion requests individually. Provider logs and backup copies follow the applicable provider lifecycle; immediate erasure from every backup is not promised.

Account, business membership, and access-audit records are separate from inquiry retention. They currently have no automatic age-based deletion schedule. Revoking a membership stops access but preserves its access and audit history. We review account deletion and correction requests through the contact process below, including any records needed for security or legal obligations. We do not promise that disabling access erases the underlying records.

Voice calls are a separate data flow

The website inquiry form does not record audio or initiate a telephone call. Ark’s separate voice service uses Retell for AI call handling and Google Cloud for the gateway, with tenant configuration and operational records in Neon. A supported calendar connection may process appointment details through Google Calendar. The exact connected services, recording and transcription settings, retention, and permitted call workflows must be agreed before a customer pilot is activated.

The current restricted synthetic demo has its own recording and transcription configuration. Its seven-day Retell retention setting is not a retention promise for website inquiries, email, or future customer calls. An AI disclosure is made in the voice workflow; recording and consent requirements are reviewed separately for the intended use.

Your requests and choices

To ask about information we hold, request access, correction, or deletion, object to processing, or raise a privacy concern, email the Ark team or use our contact form and identify it as a privacy request. Include only what is needed to locate the inquiry. We may need to verify your identity or authority before disclosing or changing information. Applicable law may provide additional rights, including the right to complain to a data-protection authority.

Updates

We may update this policy as the service and its data practices change. The effective date above identifies the current version. Material changes that require additional notice or consent will be handled as required.