Privacy Policy | Ako
Ako Privacy Policy
Ako is operated by Huskee Limited ("Huskee", "we", "us"), a company registered in England and Wales, at Flat 3 Westminster Court, Aberdeen Place, London NW8 8JL, United Kingdom.
This policy explains what personal information we collect when you use Ako and our website at withako.com, how we use it, who we share it with, and what rights you have over it.
Effective 20 August 2026. Last updated 20 August 2026.
What Ako does, and why it shapes this policy
Ako is an AI teammate. Once you connect it, it works on your behalf: it sends and receives messages on the channels you connect (Slack, WhatsApp, email), reads and writes data in the third-party tools you authorise, runs tasks on a schedule, and produces files, reports, and dashboards.
Two consequences follow, and they shape everything below.
First, Ako handles much more than your account details. It processes whatever content you and your team put in front of it, which may include personal information about other people — your customers, suppliers, and contacts.
Second, we handle that content on your instructions, not for our own purposes.
Our role: controller for some data, processor for the rest
Data protection law distinguishes an organisation that decides why and how personal information is processed (a controller) from one that processes it on another organisation's instructions (a processor). We are both, for different data.
- We are the controller of your account data — the information we collect to create and run your account, bill you, support you, secure the service, and understand how the website is used.
- We are the processor of your customer data — everything Ako reads, generates, or acts on inside your workspace and your connected tools. You are the controller of that data. Our handling of it is governed by our Data Processing Agreement and limited to your documented instructions.
Where this policy describes choices and rights, they apply to account data. For customer data, your own privacy notice governs; we will help you respond to requests from the people that data concerns.
Account data we collect
You give us:
- Identity and contact details — name, email address, and phone number. A phone number is required if you sign up through WhatsApp or connect it as a channel.
- Team details — company or team name, each member's role, and timezone.
- Billing details — billing address and any tax identifiers. Card numbers go directly to Stripe or Razorpay; we never receive or store them.
- Anything you send us in a support request.
Your device sends automatically:
- Log data — IP address, browser type and version, pages visited, timestamps, and the referring page.
- Error diagnostics — technical details about the device and the state of the application when something fails.
- Aggregate website analytics — see Cookies, analytics, and local storage below.
Customer data Ako processes on your behalf
On your instructions, Ako processes:
- Messages you and your team exchange with it on any connected channel, including attachments, images, and voice notes. Voice notes are transcribed to text so Ako can act on them.
- Credentials for the tools you connect — OAuth access and refresh tokens, and any API keys you provide. These are encrypted at rest using AES-256-GCM and are used only to act on your behalf.
- Data from the tools you connect — whatever Ako needs to read to complete the work you assign, such as records in your CRM, files in your storage, or orders in your store.
- Files you upload and files Ako produces.
- Knowledge you teach it — the processes, facts, and instructions you save so it repeats work the same way each time.
- Meeting audio and transcripts, where you ask Ako to join a meeting.
- A record of every action it takes, which is what makes the audit trail possible.
Ako can only reach the systems you connect it to, and in Slack only the channels it has been added to. You can disconnect any integration or channel at any time, which revokes its access.
How we use account data, and our legal bases
| Purpose | Legal basis |
|---|---|
| Create and operate your account, provide the service, and support you | Performance of a contract |
| Take payment, issue invoices, and meet tax obligations | Contract; legal obligation |
| Secure the service, prevent abuse, and diagnose failures | Legitimate interests |
| Measure aggregate website and product usage | Legitimate interests |
| Send service, security, and account notifications | Performance of a contract |
| Send marketing email, where you have asked for it | Consent, which you can withdraw at any time |
We do not sell personal information, and we do not share it with third parties for their own marketing.
AI models and training
To produce a result, Ako sends the content it is working on to the AI providers listed on our subprocessors page. We contract with those providers on terms that prohibit them from using your data to train or improve their models.
We do not use your customer data to train models of our own, and we do not use one customer's data to improve the service for another. Each team's data is isolated from every other team's.
Who we share data with
We use third-party subprocessors to deliver the service — for hosting and databases, authentication, AI inference, search and retrieval, channel delivery, payments, transactional email, error monitoring, and website analytics. Each one is named, with its purpose and location, on our subprocessors page, which we keep current as our stack changes. All of them are bound by data processing agreements requiring appropriate security measures and processing only on our documented instructions.
We may also disclose personal information:
- to our professional advisors, such as lawyers and accountants;
- to courts, regulators, or law enforcement where we are legally required to, or to establish or defend legal claims;
- to an acquirer, if we are acquired or merge, in which case this policy continues to apply to the data transferred until it is replaced with notice to you.
International transfers
We are based in the United Kingdom. We and our subprocessors process data in the United Kingdom, the United States, and the European Union; the location of each subprocessor is listed on the subprocessors page. Where personal information leaves the UK or the EEA, the transfer is made under the UK International Data Transfer Addendum or the European Commission's Standard Contractual Clauses, together with any additional safeguards those require.
How long we keep data, and how to have it deleted
- Account data — for as long as your account is open, and for a limited period afterwards so we can handle disputes and reinstatement requests.
- Billing and tax records — for as long as UK tax law requires, currently six years.
- Customer data — for as long as your account is open, or until you ask us to delete it.
To have your account and its data deleted, email support@withako.com from the address on the account. We will confirm once it is done. Residual copies held in routine backups are removed as those backups age out of rotation.
Security
- All traffic between you and Ako is encrypted in transit using TLS.
- Credentials for your connected tools are encrypted at rest using AES-256-GCM.
- Each team's data is logically isolated; the service is designed so one team's agent cannot reach another team's data.
- Access is role-based. You control who on your team can reach Ako and what it is allowed to touch.
- Integrations use per-user OAuth rather than shared administrator credentials, so Ako acts with the permissions of the person who authorised it.
- Our support staff can access a customer workspace when it is necessary to set up, diagnose, or repair the service. This access is restricted to designated staff accounts and is recorded.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your own account credentials confidential.
Cookies, analytics, and local storage
We keep this deliberately small.
- Essential cookies. Set by our authentication provider to keep you signed in. The service does not function without them.
- Analytics. We use Plausible and Ahrefs Analytics to measure aggregate website traffic. Both are cookieless: they set no tracking cookie and build no cross-site profile of you.
- Local storage. If you arrive from a campaign link, we store the campaign parameters in your browser's local storage so that we can attribute a later signup. It holds no personal information and never leaves your browser until you sign up.
Because we set no advertising or cross-site tracking cookies, there is no consent banner and nothing to opt out of beyond your browser's own controls.
Google user data
Where you authorise Ako to connect to Google Workspace (such as Gmail, Calendar, or Drive), it reads and writes only what is needed to carry out the task you assigned, using the scopes you granted. We store the resulting records — for example, a log of email sent through the service and the addresses involved — only as long as needed to provide the service.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. In particular, we do not use Google user data to develop, improve, or train generalised AI or machine-learning models, and we do not transfer it to third parties except as needed to provide the service, for security purposes, or to comply with the law.
Your rights
If you are in the United Kingdom or the EEA, you have the right to:
- access the personal information we hold about you;
- correct information that is inaccurate or incomplete;
- delete your personal information, subject to legal retention obligations;
- restrict or object to our processing, including processing based on legitimate interests;
- receive a copy of information you provided to us in a portable format, and ask us to transmit it to another provider;
- withdraw consent at any time, where our processing relies on it. Withdrawal does not affect processing that already took place.
If you are a California resident, you have the right to know what personal information we collect and why, to request its deletion or correction, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA.
To exercise any of these rights, email privacy@huskee.ai. We will respond within one month. We may need to confirm your identity first.
If you believe we have handled your personal information unlawfully, you may complain to your local supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk).
Children
Ako is a business product and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.
Changes to this policy
We may update this policy to reflect changes to the service, our processors, or the law. When we do, we will revise the date at the top of this page. If a change materially affects how we handle your personal information, we will notify account holders directly before it takes effect.
Contact us
Huskee Limited Flat 3 Westminster Court, Aberdeen Place London NW8 8JL United Kingdom
Privacy enquiries and rights requests: privacy@huskee.ai Product support and deletion requests: support@withako.com
See also our Terms of Service and our list of subprocessors.