Privacy policy
This policy explains what data the aiku application (app.aiku.io and the sites and services it powers) collects, how it is used and the choices you have. aiku is business software operated for the companies that use it to run their shops, warehouses and customer service.
Data we collect
- Account data: name, email address, login credentials and the permissions given to staff users.
- Business data: customers, orders, invoices, products, stock and messages entered into or synchronised with the application.
- Technical data: IP address, browser, device and usage logs, kept to secure and operate the service.
Google user data
When a user connects a Google account, aiku requests only the access needed for the features they turn on:
- Gmail (
gmail.modify): to read messages in a connected shared mailbox, show them as conversations in the customer service inbox, send replies from that mailbox and mark messages as handled. - Google Drive (
drive.readonly): to open files that are linked or attached in those conversations. - Google Calendar (
calendar.events): to create and update calendar events for appointments booked in aiku.
Google user data is used only to provide these features to the user who connected the account. It is not sold, not used for advertising, not used to train general artificial intelligence or machine learning models, and not shared with third parties except where needed to provide the service, to comply with the law, or with the user's consent. People do not read it unless the user asks for support, it is needed for security, or the law requires it.
aiku's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect a Google account at any time from the application or from your Google account permissions. aiku then stops accessing it.
How we use data
Data is used to run the service, process orders and payments, provide customer support, keep the service secure, and meet legal and accounting obligations.
Sharing
Data is shared only with service providers that help run the service (hosting, email delivery, payments, shipping), under obligations to protect it, or when required by law.
Retention and deletion
Data is kept while an account is active and afterwards for as long as legal or accounting rules require. You can ask for your data to be deleted, and it will be removed unless the law requires it to be kept.
Security
Data is encrypted in transit, access is limited to authorised users, and tokens for connected accounts are stored encrypted.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to its use. Contact us to exercise these rights.
Changes
This policy may be updated. The date at the top shows the latest version.