Privacy Policy

1. Introduction

Ekaya Inc. ("Ekaya," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-enabled data access platform and related services (the "Services").

By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Services.

2. Our Architecture and Data Boundaries

Ekaya operates a two-component architecture designed to keep your business data under your control:

2.1 Ekaya Cloud (ekaya-central)

This is the cloud service operated by Ekaya that handles:

• User authentication and identity management
• Project configuration and settings
• Billing and subscription management
• License verification

This Privacy Policy applies to data collected by Ekaya Cloud.

2.2 Ekaya Engine (On-Premises)

The Ekaya Engine runs within your infrastructure and connects to your databases. Ekaya does not have access to your business data. All queries, results, and database contents remain entirely within your environment. You are the data controller for all data processed by the Ekaya Engine.

The Ekaya Engine may communicate with Ekaya Cloud solely for license verification and authentication purposes. No query data, database contents, or business information is transmitted to Ekaya.

3. Information We Collect

The following describes data collected by Ekaya Cloud. Data processed by the on-premises Ekaya Engine is not collected by or accessible to Ekaya.

3.1 Account Information

When you create an account or authenticate through our Services, we collect:

• Email address
• Name
• Profile photo (if provided by your OAuth provider)
• Authentication tokens and identifiers

3.2 Usage Data

We automatically collect information about how you interact with our Services:

• Device information (browser type, operating system)
• IP address and approximate location
• Access times and dates

3.3 Payment Information

If you subscribe to paid features, our payment processor (Stripe) collects:

• Billing name and address
• Payment card information (processed securely by Stripe)
• Transaction history

We do not store complete payment card numbers on our servers.

3.4 Project and Configuration Data

When you create projects and configure data connections, we store:

• Project names and settings
• Access control settings and user permissions

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process transactions and send related information
• Authenticate your identity and manage your account
• Respond to your comments, questions, and support requests
• Detect, prevent, and address technical issues and security threats
• Send you technical notices, updates, and administrative messages
• Comply with legal obligations

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We work with third-party service providers who assist us in operating our Services:

• Google Firebase - Authentication, database, and hosting services
• Google OAuth / GitHub OAuth - Identity verification
• Stripe - Payment processing
• Google Analytics - Usage analytics

5.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

5.3 Business Transfers

If Ekaya is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you Services. We may retain certain information as required by law or for legitimate business purposes, such as:

• Resolving disputes and enforcing our agreements
• Complying with legal and regulatory requirements
• Preventing fraud and abuse

You may request deletion of your account and associated data at any time by contacting us at support@ekaya.ai.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication mechanisms
• Regular security assessments and monitoring
• Access controls and audit logging

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

8.1 All Users

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and associated data
• Export your data in a portable format
• Opt out of marketing communications

8.2 European Economic Area (EEA) Residents

If you are in the EEA, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to object to processing of your personal data
• Right to restrict processing in certain circumstances
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

8.3 California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights:

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to say no to the sale of personal information (we do not sell your data)
• Right to request deletion of personal information
• Right to non-discrimination for exercising your privacy rights

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your use of our Services. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of our Services may not function properly without cookies.

10. Children's Privacy

Our Services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn we have collected personal information from a child under 18, we will delete that information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Ekaya Inc.
Email: support@ekaya.ai