Privacy Policy

1. Who we are

afka (“afka,” “we,” “us,” or “our”) provides a managed AI agent platform: agents that connect to your tools and complete work end to end. afka is operated by Afka, Inc., a Delaware C-corporation in the United States.

This Privacy Policy describes how we handle personal information. For questions or to exercise your rights, contact us at support@afka.ai.

2. Information we collect

Information you provide

• Account & profile. Name, email address, password or single sign-on identifier, workspace name, role, and preferences. You can sign in with email, Google or Microsoft.
• Billing information. Plan, subscription status, credit balance and transaction history. Payments are processed by our payment provider; we do not store full payment-card numbers.
• Workspace content. The tasks and instructions you delegate, prompts, uploaded files, and the work products (artifacts) your agents produce.
• Communications. Messages you send us for support, sales or feedback.

Information from your connected accounts

When you connect a third-party app (for example Slack, Microsoft Teams, Gmail, a CRM, a help desk or a store), your agents read and act on data in that app to perform the work you ask for. Connections are established and managed through our integration provider: afka never receives your third-party passwords, and authorization tokens are held in an encrypted secrets store and used only to carry out your tasks.

Information we collect automatically

• Activity & audit logs. An append-only record of the actions your agents take, approvals and rejections you make, and the credits each action used.
• Device & usage data. IP address, browser and device type, pages viewed, and product interactions, collected via cookies and similar technologies and our analytics provider.

3. How we use information

• Provide, operate and secure the platform, and run the tasks you delegate across your connected tools.
• Process payments, manage subscriptions and meter credit usage.
• Maintain the audit log and enforce approval gates and spending caps.
• Provide support, respond to your requests, and send service and transactional messages.
• Monitor reliability and security, prevent fraud and abuse, and debug issues.
• Improve our products and, where permitted, send you product updates you can opt out of.
• Comply with legal obligations and enforce our agreements.

4. AI processing & model training

To perform your tasks, afka sends the relevant content to our AI model provider and runs work inside an isolated, secure sandbox. We use this content solely to carry out the work you requested and to operate the service.

We do not sell your personal information, and we do not use your workspace content to train third-party foundation models. Our model provider processes your content under enterprise terms to return results and does not use it to train its models. If we ever use de-identified or aggregated data to improve afka, it will not identify you or your business.

5. Legal bases (GDPR / UK GDPR)

Where European or UK data-protection law applies, we rely on these legal bases: performance of a contract (to provide the service you signed up for); legitimate interests (to secure, support and improve the service, balanced against your rights); consent (for optional analytics and marketing, which you can withdraw); and legal obligation (to comply with applicable law).

6. How we share information

We share information only as needed to run the service:

• Sub-processors. Vendors that process data on our behalf under contract (see the categories below).
• Your connected apps. When your agents act in an app you connected, at your direction.
• Legal & safety. When required by law, to enforce our terms, or to protect rights, safety and security.
• Business transfers. In connection with a merger, acquisition or sale of assets, subject to this policy.

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.

7. Sub-processors

We use a small number of trusted service providers to deliver afka. Each processes only the data needed for its function, is bound by data-protection and confidentiality terms, and is held to security standards consistent with this policy. Our sub-processors fall into the following categories:

• Cloud hosting and infrastructure
• Database, authentication, and encrypted storage of connection tokens
• AI model processing to plan and perform your tasks
• Managed, password-free connectivity to your third-party apps
• Isolated, secure sandboxing for task and code execution
• Orchestration of multi-step work
• Payment processing and, for partners, payouts
• Single sign-on, if you choose to use it
• Error monitoring and product analytics
• Email delivery and customer-relationship management

A current list of our named sub-processors is available to customers on request and is provided under our Data Processing Agreement. We require each sub-processor to protect personal data to a standard consistent with this policy.

8. International data transfers

afka is operated from the United States, and our providers may process data in the U.S. and other countries. Where we transfer personal data from the European Economic Area, the UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. You may request more information at support@afka.ai.

9. Data retention

We keep personal information for as long as your account is active and as needed to provide the service, then retain it only as required to meet legal, accounting, security or dispute-resolution obligations. Audit-log entries are append-only and retained to preserve an accurate record. When you delete content or close your workspace, we delete or de-identify the associated personal data within a commercially reasonable period, subject to backups and legal requirements.

10. Security

We protect your information with measures including:

• Encryption of data in transit and at rest.
• Workspace isolation enforced at the database layer, so each customer's data is logically separated.
• Connection tokens stored in an encrypted secrets vault — afka never sees your third-party passwords.
• Execution of tasks in an isolated, secure sandbox, with sensitive actions held for your approval.
• An append-only audit log of every action, and least-privilege access controls for our staff.

No method of transmission or storage is completely secure, but we work continuously to protect your data and align our practices with recognized security and AI-governance frameworks.

11. Your rights & choices

Depending on where you live, you may have the right to access, correct, delete, or port your personal information; to object to or restrict certain processing; and to withdraw consent. If you are in the EEA/UK, you may also lodge a complaint with your data-protection authority. If you are a California resident, you have rights under the CCPA/CPRA, including the right to know, delete, correct, and to opt out of sale or sharing — afka does not sell or share personal information as those terms are defined.

To exercise any right, email support@afka.ai. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights. Much of your account and workspace data can also be accessed or deleted directly in the product.

12. Cookies & analytics

We use essential cookies to keep you signed in and to operate the site, and optional analytics cookies to understand product usage. You can control non-essential cookies through your browser settings or any in-product controls we provide. Where required, we ask for your consent before setting non-essential cookies.

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting app.retention.com/optout.

13. Children's privacy

afka is a business product and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact support@afka.ai and we will delete it.

14. Controller & processor roles

For the workspace content you and your team submit, afka generally acts as a processor (or service provider) handling that data on your behalf — you are the controller and decide how it is used. For account, billing, website and marketing data, afka acts as the controller. If you require a data processing agreement, see our DPA or contact support@afka.ai.

15. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the date above and, where appropriate, notify you. Your continued use of afka after an update means you accept the revised policy.

16. Contact us

Questions, requests or concerns about privacy? Email us at support@afka.ai and we will be glad to help.

Afka, Inc.
2810 N Church St STE 89857
Wilmington, DE 19802
United States