Skip to content
Back to ekai

Privacy policy

Last updated 4 September 2026

What ekai reads, why it reads it, and what happens to it. Written for the executive who is deciding whether to hand ekai everything.

This policy is being finalised with counsel. The commitments stated here will not change.

Who we are

ekai is a product of IDX Studios Inc., 38 Smithe Street, Vancouver, British Columbia, Canada. This policy is governed by the laws of British Columbia.

Where this policy says we, it means IDX Studios Inc. Where it says you, it means the person or organisation using ekai.

ekai runs two ways, and they are not the same

Almost everything in this policy depends on which one you are using, so it is the first thing to understand.

  • Deployed. ekai runs inside your own cloud account. Your email, calendar, meeting content, and chat never leave your perimeter. We cannot see it. There is no copy on our side because there is no path for one.
  • Hosted trial. You give ekai one meeting link and an email address. That meeting is processed on our infrastructure, not yours. This is the one deliberate exception, and the section below states exactly what it covers.

What ekai accesses, and why

When you connect your Google account, ekai accesses your Gmail and Google Calendar, only with your explicit consent, to read what reaches you, surface the decisions that need your judgment, prepare your briefing, and take your meeting notes. You can review or revoke that access at any time from your Google account.

ekai reads to prepare. It does not act on your behalf without your instruction.

Google API Services User Data Policy

ekai's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

  • Google Workspace data is never used to develop, improve, or train generalized or non-personalized AI or machine learning models.
  • Google Workspace data is never sold, and never shared with third parties for advertising or for those training purposes.
  • Where a transfer to a third party AI tool is involved, it is limited to personalized model use for you, and your consent is obtained first.

What we collect about you

Separate from the content ekai reads on your behalf, we collect a small amount of information about your use of the site and the service.

  • Account information you give us. Your email address, and your first and last name.
  • Usage information collected automatically. IP address, device and browser identifiers, and which pages you visited.
  • What you submit to start a trial. The meeting link you paste and the email address you enter.

The hosted trial, precisely

The trial processes a single meeting, plus one read of your calendar when you open your results. It runs on our infrastructure, then it is deleted.

It is episodic by design. No stored token, no standing connection, no ongoing access. There is nothing to disconnect when it ends because nothing persistent was created.

By submitting a meeting link you confirm that you are entitled to have a note taker present, and that the other participants can see that ekai has joined.

Who else processes data

We use a small number of third parties. Each is listed with what it does and where it sits.

Recall.ai

Purpose
Meeting bot that joins and captures the call
Location
United States

we45

Purpose
Independent security assessment and penetration testing
Location
India and United States

Defang

Purpose
AWS WAF configuration and edge protection
Location
United States

Mixpanel

Purpose
Product event analytics
Location
United States

How long we keep it

Trial data is deleted after the meeting is processed and the results are returned. Account information is kept while your account is open.

You can ask us to access, correct, delete, or transfer your data by writing to the address at the bottom of this page. We respond within 30 days, unless a longer period is required by applicable law.

Security

We use AES-256 encryption at rest and TLS 1.2 or higher in transit. On a deployed ekai you hold the encryption keys.

No method of transmission over the internet is completely secure. We use commercially acceptable means to protect your data, and we do not claim more than that.

International transfers

We are based in Canada and our subprocessors operate in the countries listed above. Where data moves across a border we rely on appropriate safeguards for that transfer.

On a deployed ekai this does not arise. Data residency is set by the cloud region you deploy into, and it is configurable per deployment.

Children

ekai is a tool for working executives. We do not knowingly collect information from anyone under the age of 13. If you believe a child has given us information, write to us and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top of this page. If a change is material we will tell you before it takes effect.

Questions

Write to us at the address below. A person answers.

Or write to hello@yourekai.com

Contact

Talk to a person.

Tell us what you are working on. A founder reads every message and replies within one business day.

This is about

Or write to hello@yourekai.com