Privacy Policy
Last updated: November 4, 2026
1. Who we are and our role
This policy explains how Akify, Inc. ("Akify," "we," "us"), a Delaware corporation, handles personal information in connection with our websites at akify.ai, our product at platform.akify.ai and related Akify subdomains, and our related services (the "Services"). Our address is 2737 Garber St, Apt #8, Berkeley, CA 94705.
When we act for our customers. Akify provides the Services to organizations ("Customers"). When a Customer connects its workplace tools or its users create content in the Services, we process that information on the Customer's behalf and under its instructions, as a processor or service provider. The Customer's agreement with us, including our Data Processing Addendum, governs that processing. If you use Akify through your employer, please direct privacy requests about that content to your employer; we will help them respond.
When we act for ourselves. We are the controller of information we collect to run our business: visitors to our website, people who contact us or request a demo, account and billing contacts, and usage and diagnostic data we use to operate and secure the Services.
2. Information we collect
Account and profile information. Email address; first, last and display name; company, job title or role and bio; profile photo; time zone and language preferences; workspace invites and membership roles; and account identifiers from our authentication provider.
Business contact information. Name, work email, company and message content when you request a demo, contact us, or act as a billing or security contact.
Information from connected services. When your organization connects workplace tools, we process identity and content data from them to provide features such as standups, search, agents, notifications and activity sync. Our general approach is to keep identifiers, short previews, AI-generated summaries and embeddings, and activity metadata, and to re-fetch full content from the source when a feature needs it.
| Service | What we keep | What we don't keep long-term |
|---|---|---|
| Slack | Channel and message identifiers, member profile cache, short previews, AI summaries | Full message text: held in an operational cache for about 14 days because of Slack rate limits, then deleted |
| Google Drive, Docs, Sheets, Calendar | File and event identifiers, titles, sharing metadata, short change previews, embeddings, AI summaries; processed Summary/Details sections of Gemini meeting notes with the Doc ID | Full document bodies and transcripts; re-fetched from Google when needed |
| Gmail | Activity records for agent-sent mail, with identifiers and a short subject preview | Mailbox contents; inbox search uses live access only |
| GitHub | Repository, pull request, issue and commit identifiers, titles, actors, short previews | Full PR, issue and comment bodies; repository source read at analysis time for code review (Akify Code Reader app) is not kept as a copy |
| Atlassian (Jira, Confluence) | Issue keys and identifiers, titles, status and assignee metadata, short previews | Full descriptions and comment bodies |
| Linear | Issue identifiers, titles, status and assignee metadata, short previews, and content indexed for search and AI features (which may include issue descriptions) | Fuller issue content is fetched from Linear when needed |
| Fireflies | Transcript ID, URL and title linked to a meeting note | Full transcript text |
We also store integration account identifiers and OAuth tokens or credentials, metadata from customer-provided database credentials (such as a Supabase access token) when connected, and content created in the Services, including AI chats, standup conversations, summaries, memories, embeddings and search index entries.
Usage and device information. IP address, browser type and version, pages visited, time and duration of visits, device identifiers and other diagnostic data.
Cookies and similar technologies
- Essential authentication cookies (Akify and Supabase) keep you signed in to the product across Akify domains and help prevent account misuse. The product won't work without them.
- Website analytics on akify.ai use Vercel Web Analytics, which sets no cookies and stores no tracking identifier on your device.
- Product diagnostics are sent server-side via Google Analytics Measurement Protocol to help us fix errors. They are not browser cookies and are not used for advertising.
- Local storage holds interface preferences.
We do not use advertising cookies or third-party marketing pixels.
Sign-in. You can sign in with an email magic link, Google, or Microsoft when enabled for your organization. For magic links, we derive a short-lived browser integrity signal from characteristics such as user agent, language, time zone, screen size and platform, used only to bind the link to the requesting browser.
3. How we use information
The legal bases below apply where EEA, UK or Swiss law governs our processing as a controller. For Customer content, we act on the Customer's instructions.
| Purpose | Legal basis |
|---|---|
| Provide the Services: authentication, workspace membership, integrations, search, AI features, standups and notifications | Performance of our contract with you or your organization |
| Provide support and respond to requests | Contract; legitimate interests in helping users |
| Secure the Services, prevent fraud and misuse, and debug errors | Legitimate interests in operating a secure service |
| Improve the Services using usage and diagnostic data | Legitimate interests in improving our product |
| Send service, security and account messages | Contract; legitimate interests |
| Send product updates and news to business contacts | Legitimate interests or consent where required; you can opt out at any time |
| Comply with law and enforce our agreements | Legal obligation; legitimate interests |
We do not sell personal information, and we do not use it for targeted advertising.
4. AI processing
AI features send relevant content to our AI service provider, Google Vertex AI (Gemini), to generate summaries, search results, recommendations and agent responses.
- We do not use your personal information or your organization's connected workplace content to train our own foundation models.
- We do not allow our AI providers to train their models on that content.
- We configure Vertex AI with zero data retention, so Google does not retain prompts or outputs beyond what is needed to return the response.
AI-generated outputs can be inaccurate. Please review them before relying on them.
5. How we share information
- Service providers (subprocessors) that host the Services, authenticate users, send transactional email, provide cloud infrastructure and AI processing, and provide diagnostics. They may use the information only to provide services to us. The current list is at akify.ai/subprocessors.
- Your organization. If you use Akify through a company workspace, its administrators and authorized users may access information in that workspace, depending on how it is configured.
- Connected tools. When agents act in a tool you connect (for example, sending a message), information goes to that tool under your organization's agreement with its provider.
- Legal and safety. When required by law or valid legal process, or to protect the rights, property or safety of Akify, our users or the public.
- Business transfers. In a merger, acquisition, financing or sale of assets, subject to confidentiality. We will notify affected Customers before personal information becomes subject to a different privacy policy.
- With your consent or at your direction.
6. Retention
| Information | How long we keep it |
|---|---|
| Account and profile information | For the life of the account, then deleted within 30 days of account or contract termination unless law requires longer |
| Identifiers, previews, AI summaries, embeddings, search index and activity metadata from connected tools | Until deleted, the integration is disconnected, or the Customer's contract ends |
| Full Slack message text (operational cache) | About 14 days |
| Other operational records (such as sync runs and closed notifications) | About 7 to 30 days |
| Full third-party content from other tools | Not stored long-term; re-fetched when needed |
| Encrypted backups (GCS) | Rolling, about 30 days |
| Usage and diagnostic data | As long as needed for security and reliability, generally shorter than account data |
| Business contact information | Until you ask us to delete it or it is no longer needed |
We may keep information longer where required by law, to resolve disputes, or to enforce our agreements.
7. International transfers
Akify and its core subprocessors store and process information in the United States. Some connected-tool providers may process data elsewhere (for example, Atlassian in Australia).
When we transfer personal information from the EEA, UK or Switzerland to a country without an adequacy decision, we use the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful mechanism. Contact security@akify.ai for a copy of the relevant safeguards.
8. Security
We encrypt data in transit with TLS and at rest, encrypt stored integration credentials at the application layer with AES-256-GCM, scope application data by tenant, back up production data daily to encrypted off-site storage in Google Cloud Storage, and use independent penetration testing. No system is perfectly secure. Our current security posture, including our SOC 2 status, is described at akify.ai/security.
9. Your rights
Everyone. You can update your profile in account settings, disconnect integrations so we stop receiving new data, and ask us to access, correct or delete your personal information by emailing security@akify.ai. If your account is managed by your organization, we may refer your request to its administrator. We will verify your identity before acting, and we will not discriminate against you for exercising your rights.
EEA, UK and Switzerland. You also have the right to restrict or object to our processing, to data portability, and to withdraw consent where we rely on it. You may lodge a complaint with your local data protection authority.
California and other U.S. states. Depending on where you live, you have the right to know what personal information we collect, use and disclose; to access, correct and delete it; and to opt out of its sale, sharing for cross-context behavioral advertising, and certain profiling. We do not sell or share personal information as those terms are defined under California law, and we do not use sensitive personal information to infer characteristics about you. In the past 12 months we collected the categories described in Section 2 (identifiers, professional information, internet activity, and content you provide) for the purposes in Section 3, and disclosed them only to the recipients in Section 5. You may use an authorized agent, and if we deny your request you may appeal by replying to our decision.
10. Google user data
Akify's use and transfer of information received from Google APIs, including Google Workspace APIs, adheres to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.
- Use only to provide features you use, such as summaries, search, standups and activity history for you and your workspace.
- No AI model training. We do not use raw, aggregated or derived data from Google Workspace APIs to develop, train or improve foundational or generalized AI or machine learning models, and our AI providers may not either.
- No sale or advertising. We transfer this data only to provide these features, to comply with law, or in a merger or acquisition with notice.
- No human reading unless you ask us to (for example, for support), it is necessary for security or legal compliance, or the data is aggregated and anonymized for internal operations.
If you disconnect a Google integration or stop sharing a file with our Drive ingest account, we stop receiving new data from it. You can review or remove Akify's access on your Google Account permissions page.
11. Children, changes and contact
Children. The Services are for business use and not directed to anyone under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
Changes. We will post updates here and change the "Last updated" date. For material changes, we will notify Customers by email or in-product notice at least 30 days before they take effect.
Contact. Akify, Inc., 2737 Garber St, Apt #8, Berkeley, CA 94705. Email security@akify.ai. Security questions: security@akify.ai or akify.ai/security.