Privacy Policy

This Privacy Policy covers personal information relating to visitors of our marketing sites, account holders and authorized users of the Services, and individuals who contact us for support or other inquiries. It does not apply to third-party websites, products, or services that may be linked from or integrated with the Services, which are governed by their own terms and privacy notices.

Depending on the context, Ekynos may act as a controller (or similar role under applicable law) with respect to account and operational data, and as a processor or service provider with respect to business content that customers upload or enter into the Services. Nothing in this Privacy Policy limits rights you may have under mandatory consumer or data-protection laws that cannot be waived by contract.

We collect information in the following categories, depending on how you interact with the Services:

Account and contact information. When you or your organization create an account or are invited to use the Services, we may collect identifiers such as name, email address, organization name, role or membership details, and authentication credentials or related security information.

Business and content data. You and other authorized users may submit, upload, or generate business information through the Services, including records relating to customers, products, sales, inventory, communications, files, messages, preferences, and other content you choose to store. The particular fields and records depend on how your organization configures and uses the Services.

Usage, device, and technical information. We automatically collect information about how the Services are accessed and used, such as log data, approximate location derived from network information, device and browser type, operating system, referring URLs, timestamps, feature interactions, and diagnostic or performance data needed to operate, secure, and improve the Services.

Communications. If you contact us, we collect the content of your communications and any information you choose to provide.

Information from others. We may receive information about you from your organization (for example, when an administrator invites you), from service providers that support authentication or operations, or from publicly available sources where permitted by law.

We use information for purposes that include:

• Providing, operating, maintaining, and securing the Services, including authentication, account administration, and customer support;
• Enabling features you or your organization request, including analytics, reporting, collaboration, and AI-assisted functionality described below;
• Communicating with you about the Services, service-related notices, security alerts, and administrative messages;
• Monitoring, detecting, investigating, and preventing fraud, abuse, security incidents, and violations of our terms or policies;
• Analyzing usage to improve reliability, performance, usability, and product design;
• Complying with legal obligations, enforcing our agreements, and protecting the rights, safety, and property of Ekynos, our users, and others; and
• Other purposes disclosed to you at the time of collection or with your consent, where required.

We do not sell personal information. We do not use personal information for targeted advertising based on cross-context behavioral advertising except where we have obtained any consent required by applicable law, and we do not presently operate such advertising as part of the Services.

Certain features of the Services use artificial intelligence or machine-learning technologies, which may be provided in whole or in part by third-party providers under contract with Ekynos. These features may process prompts, conversation history, and relevant business context that you or your organization make available in order to generate responses, summaries, or other outputs.

AI-generated outputs may be incomplete, outdated, incorrect, or otherwise unsuitable for your particular circumstances. They are provided for informational and productivity purposes only and are not a substitute for professional legal, financial, accounting, tax, or other advice. You are responsible for reviewing outputs before relying on them. Ekynos does not guarantee that AI features will produce any particular result, accuracy, or completeness.

Where required by law or by our product design, certain uses of AI-related memory or context features may require confirmation or consent from an authorized user. Your organization's administrators may control aspects of how these features are made available within your workspace.

We may share personal information in the following circumstances:

Service providers. We engage trusted vendors and contractors to host infrastructure, provide authentication and communications, deliver AI or analytics capabilities, monitor errors and reliability, and otherwise help us operate the Services. These parties are permitted to process information only as needed to perform services on our behalf and are subject to contractual confidentiality and security obligations appropriate to the nature of the services.

Within your organization. Information associated with an organization workspace may be accessible to other authorized users of that organization according to roles and permissions configured by that organization.

Legal and safety. We may disclose information if we believe in good faith that disclosure is required by law, regulation, legal process, or governmental request, or is reasonably necessary to protect the rights, property, or safety of Ekynos, our users, or the public.

Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality arrangements and applicable law.

With consent. We may share information in other ways with your direction or consent.

We and our service providers may use cookies, local storage, pixels, and similar technologies to operate the Services, remember preferences, maintain sessions, understand usage, and enhance security. You can control cookies through your browser settings; disabling certain cookies may affect the availability or functionality of parts of the Services. Where required by applicable law, we will present additional choices regarding non-essential cookies.

We retain personal information for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce agreements, and maintain security and backups. Retention periods may vary based on the type of information, the nature of our relationship with you or your organization, and legal or operational requirements. When information is no longer needed, we take steps to delete, de-identify, or otherwise dispose of it in accordance with our practices and applicable law.

Organization administrators may request deletion or export of workspace data subject to verification, technical limitations, and legal retention requirements. Residual copies may remain in backup or archival systems for a limited period until those systems are refreshed in the ordinary course of business.

We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration. These measures may include encrypted transmission, access controls, monitoring, and logical separation of customer environments. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for restricting access to devices you use to access the Services.

Ekynos may process and store information in jurisdictions other than the one in which you reside. Those jurisdictions may have data-protection laws that differ from the laws of your country. Where we transfer personal information across borders, we take steps intended to ensure that the transfer is conducted in accordance with applicable law, which may include contractual protections with recipients or reliance on other lawful transfer mechanisms.

Depending on your location and applicable law, you may have rights to request access to, correction of, deletion of, or restriction of processing of personal information; to object to certain processing; to data portability; and to withdraw consent where processing is based on consent. These rights may be subject to exceptions and limitations. If you are an authorized user of an organization account, some requests may need to be handled by your organization's administrator.

To exercise privacy rights or submit a privacy-related request, contact us at privacy@ekynos.com. We may need to verify your identity before responding. You may also have the right to lodge a complaint with a supervisory authority in your jurisdiction.

You may opt out of non-essential marketing communications by following unsubscribe instructions in those messages or by contacting us. Transactional and service messages necessary to operate your account are not marketing communications.

The Services are not directed to children under the age of 16 (or such higher age as required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take appropriate steps to delete it.

You and your organization are responsible for the information and content you submit to the Services ("User Content"), including ensuring that you have all rights and lawful bases necessary to provide that User Content and that it does not violate applicable law or the rights of others. Ekynos does not independently verify all User Content and does not endorse it. We may remove or restrict User Content that we reasonably believe violates our policies, applicable law, or the rights of others.

To the extent permitted by law, you agree to defend and indemnify Ekynos against claims arising from User Content that you or users under your control submit, except where such claims result from Ekynos's willful misconduct.

Except where prohibited by applicable law, any dispute arising out of or relating to this Privacy Policy or your use of the Services shall be resolved by binding individual arbitration administered under the rules of a recognized arbitration body seated in Singapore. The laws of Singapore govern this Privacy Policy and any such dispute, without regard to conflict-of-law principles.

You and Ekynos waive any right to participate in a class action, class arbitration, or representative proceeding. Either party may seek interim injunctive relief in a court of competent jurisdiction in Singapore to protect intellectual property or confidential information pending arbitration. If a court finds the class-action waiver unenforceable as to a particular claim, that claim (and only that claim) may proceed in court, and the remainder remains subject to arbitration.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice through the Services or by other reasonable means. Your continued use of the Services after an updated Privacy Policy becomes effective constitutes acceptance of the updated Privacy Policy, except where applicable law requires a different form of consent.

If you have questions about this Privacy Policy or our privacy practices, please contact us at privacy@ekynos.com.

Ekynos — Privacy inquiries