OKKI AI Privacy Policy

1. Scope and roles

This Policy covers visitors to okki.ai, people who create or use an OKKI AI account, representatives of organizations using the Services, support contacts, and, where relevant to a product, business contacts whose professional information appears in a business database or is processed on a customer's instructions.

For the brand site and unified account, OKKI generally acts as the data controller. A connected product may act as a controller for its own product operations. When a business customer instructs a product to process personal information on its behalf, the relevant OKKI entity acts as a processor or service provider as described in the applicable product terms or data processing addendum.

2. Information we collect

3. Sources of information

• Directly from you when you register, use a feature, submit content, contact support, or purchase a service.
• Automatically from your browser, device, session, and use of the Services.
• From Google or another identity provider when you choose that sign-in method.
• From connected OKKI products and affiliates when accounts are created, linked, secured, supported, or synchronized.
• From public sources, customers, and licensed providers for business and professional contact features.

4. Why we process information

Depending on the jurisdiction and context, our legal bases include performing a contract with you, taking steps at your request before entering a contract, our legitimate interests in operating and securing the Services, compliance with legal obligations, and consent where required.

• Provide the brand site, create and manage your unified account, verify identity, maintain sessions, return you to the selected product, and create or link connected-product accounts.
• Provide requested product functions, administer quotas, subscriptions and orders, process transactions, and deliver support.
• Protect the Services, prevent fraud and abuse, investigate incidents, enforce our terms, and maintain reliability.
• Measure and improve site and product performance, understand feature use, fix errors, and develop new functionality.
• Send service notices, security alerts, administrative messages, and support responses.
• Send marketing communications where permitted and, where required, with your consent. You may unsubscribe at any time.
• Comply with law, respond to lawful requests, establish or defend legal claims, and complete corporate transactions.

5. AI features and automated processing

Connected products may use automated systems or third-party AI services to process the instructions and content you submit and to generate search results, reports, drafts, classifications, or recommendations. Outputs may be incomplete or inaccurate and should be reviewed before use.

We do not use unified-account credentials or your private product content to train general-purpose AI models unless we give you a separate notice and, where required, obtain consent. Product-specific notices may describe quality monitoring or model-improvement practices for de-identified, aggregated, or separately authorized data.

6. Cookies and similar technologies

7. How we share information

We do not sell personal information for money. We also do not share personal information for cross-context behavioral advertising through the current OKKI AI brand site.

• OKKI affiliates and connected products, as needed to provide unified identity, account provisioning, product access, security, support, and integrated operations.
• Vendors that provide hosting, databases, email delivery, security, identity, customer support, analytics, AI processing, and payment services, subject to contractual restrictions appropriate to their role.
• Your organization and its administrators when your account is provided or managed by that organization.
• Authorities, courts, advisers, and other parties where reasonably necessary to comply with law, protect rights or safety, investigate abuse, or establish and defend legal claims.
• A buyer, successor, or relevant advisers in a merger, financing, restructuring, sale of assets, or similar transaction, subject to appropriate confidentiality protections.

8. International transfers and storage

The unified account and associated records are currently hosted in Singapore. The Services are global, so information may be accessed or processed in other countries where OKKI affiliates, customers, or vendors operate. Those countries may have different data-protection laws.

Where required, we use appropriate transfer safeguards, such as contractual protections, data-transfer agreements, standard contractual clauses, or another legally recognized mechanism. Product-specific storage locations are described in the applicable product notice or order.

9. Retention

When information is no longer required, we delete, anonymize, or securely isolate it, unless law requires continued retention. Backup deletion may occur on a delayed cycle.

• Pending email registrations are normally retained for approximately 15 minutes unless security records require longer retention.
• Unified sessions are retained until expiry or revocation; the current absolute session lifetime is no more than 30 days.
• Account and product-account records are retained while the account is active and for a reasonable period afterward for security, dispute, tax, audit, and legal purposes.
• Legal acceptance records are retained as evidence of the agreement and compliance for the applicable limitation and recordkeeping periods.
• Product content, usage, orders, suppression lists, and business-contact records follow the retention period stated in the relevant product terms, notice, or customer instruction.

10. Security

We use reasonable technical and organizational measures designed to protect personal information, including transport encryption, one-way hashing of passwords and session tokens, access controls, logging, rate limits, vulnerability management, and incident-response procedures. No internet or storage system is completely secure, and we cannot guarantee absolute security.

You are responsible for using a strong password, protecting credentials and API keys, signing out of shared devices, and promptly notifying us of suspected unauthorized access.

11. Your choices and rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also object to direct marketing at any time and lodge a complaint with a competent supervisory authority. Withdrawing consent does not affect processing already carried out lawfully.

We may need to verify your identity and may retain information where an exception applies, including security, legal claims, contractual obligations, and required records. If we process information for a business customer, we may direct your request to that customer.

12. Minors

The Services are intended for business users and are not directed to children. You must be legally capable of entering the applicable agreement and, in all cases, at least 18 years old to create an account unless we expressly authorize otherwise. Contact us if you believe a child has provided personal information.

13. Changes to this Policy

We may update this Policy to reflect changes in law, technology, or the Services. We will publish the updated version and effective date. If a change materially affects your rights or requires renewed consent, we will provide additional notice or request acceptance as required by law. Older versions may be requested from us.

14. Contact us

The controller for the unified OKKI AI site and account is OKKI.com Singapore Technology Private Limited, 8 Eu Tong Sen Street, #19-33/34 The Central, Singapore 059818. For privacy questions, rights requests, or complaints, contact our Data Protection Officer at DataProtection@okki.com.