Privacy Notice · effective October 15, 2026

How Arkad handles information.

This Privacy Notice describes information handled through the Arkad Legacy public site and protected member center, presented by TrueNorth Strategy Co. It applies to information Arkad receives through these surfaces, not to a provider’s separate account, app, or privacy notice.

Open member center

Information Arkad handles

Arkad handles the information needed to operate the site and an authenticated member journey. Depending on the feature used, this can include account registration information, verified email status, member onboarding and suitability information, member preferences, limited support or workflow requests, and technical security or diagnostic records. Arkad does not request provider passwords, API keys, access tokens, or bank credentials through its public website.

Provider-authorized connections

If a provider connection is made available, you authenticate and consent directly with that provider. Arkad may receive the provider connection reference, account-status information, and the scoped authorization material necessary to operate the approved connection. Authorization material is encrypted and access is limited to the connection’s authorized purpose. Provider data is not treated as Arkad custody of your assets.

How information is used

Arkad uses information to create and protect your account, verify access, operate requested member workflows, present accurate availability and provider state, maintain audit and security controls, investigate incidents, and comply with applicable obligations. Arkad does not use a displayed balance, provider connection, or incomplete record to invent a financial action or result.

How information is shared

Arkad shares information only as needed to operate the requested service: with the provider you choose to authorize, with infrastructure and delivery services that host, secure, or communicate the service, and where required to protect rights, investigate security events, or comply with law. Arkad does not sell provider credentials or use them for an unrelated account.

Security

Arkad uses access controls, tenant separation, encrypted authorization storage for approved provider connections, and operational monitoring designed to reduce unauthorized access. No system can guarantee absolute security. Protect your sign-in information and promptly use the provider’s own controls if you believe a provider account or authorization has been compromised.

Retention

Arkad retains information only for as long as reasonably necessary to operate the service, protect the platform, resolve disputes, meet recordkeeping obligations, and enforce applicable agreements. Retention may vary by record type, provider relationship, security need, and legal obligation.

Your choices

You can choose not to submit optional information, use the provider’s connection controls to decline or revoke a provider authorization, and stop using the service. Some requests or account changes may require authenticated verification so Arkad can protect the correct member record and provider connection.

Updates and questions

Arkad may update this Notice as the service changes. The effective date at the top identifies the current version. For an authenticated member matter, use the protected member center or an organization-approved contact channel. Do not send provider credentials, bank information, tax information, or government identifiers through an unprotected channel.

Read the Terms of Use