Privacy policy
Last updated 4 September 2026
What ekai reads, why it reads it, and what happens to it. Written for the executive who is deciding whether to hand ekai everything.
This policy is being finalised with counsel. The commitments stated here will not change.
Who we are
ekai is a product of IDX Studios Inc., 38 Smithe Street, Vancouver, British Columbia, Canada. This policy is governed by the laws of British Columbia.
Where this policy says we, it means IDX Studios Inc. Where it says you, it means the person or organisation using ekai.
ekai runs two ways, and they are not the same
Almost everything in this policy depends on which one you are using, so it is the first thing to understand.
- Deployed. ekai runs inside your own cloud account. Your email, calendar, meeting content, and chat never leave your perimeter. We cannot see it. There is no copy on our side because there is no path for one.
- Hosted trial. You give ekai one meeting link and an email address. That meeting is processed on our infrastructure, not yours. This is the one deliberate exception, and the section below states exactly what it covers.
What ekai accesses, and why
When you connect your Google account, ekai accesses your Gmail and Google Calendar, only with your explicit consent, to read what reaches you, surface the decisions that need your judgment, prepare your briefing, and take your meeting notes. You can review or revoke that access at any time from your Google account.
ekai reads to prepare. It does not act on your behalf without your instruction.
Google API Services User Data Policy
ekai's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
- Google Workspace data is never used to develop, improve, or train generalized or non-personalized AI or machine learning models.
- Google Workspace data is never sold, and never shared with third parties for advertising or for those training purposes.
- Where a transfer to a third party AI tool is involved, it is limited to personalized model use for you, and your consent is obtained first.
What we collect about you
Separate from the content ekai reads on your behalf, we collect a small amount of information about your use of the site and the service.
- Account information you give us. Your email address, and your first and last name.
- Usage information collected automatically. IP address, device and browser identifiers, and which pages you visited.
- What you submit to start a trial. The meeting link you paste and the email address you enter.
The hosted trial, precisely
The trial processes a single meeting, plus one read of your calendar when you open your results. It runs on our infrastructure, then it is deleted.
It is episodic by design. No stored token, no standing connection, no ongoing access. There is nothing to disconnect when it ends because nothing persistent was created.
By submitting a meeting link you confirm that you are entitled to have a note taker present, and that the other participants can see that ekai has joined.
Who else processes data
We use a small number of third parties. Each is listed with what it does and where it sits.
Recall.ai
- Purpose
- Meeting bot that joins and captures the call
- Location
- United States
we45
- Purpose
- Independent security assessment and penetration testing
- Location
- India and United States
Defang
- Purpose
- AWS WAF configuration and edge protection
- Location
- United States
Mixpanel
- Purpose
- Product event analytics
- Location
- United States
| Subprocessor | Purpose | Location |
|---|---|---|
| Recall.ai | Meeting bot that joins and captures the call | United States |
| we45 | Independent security assessment and penetration testing | India and United States |
| Defang | AWS WAF configuration and edge protection | United States |
| Mixpanel | Product event analytics | United States |
How long we keep it
Trial data is deleted after the meeting is processed and the results are returned. Account information is kept while your account is open.
You can ask us to access, correct, delete, or transfer your data by writing to the address at the bottom of this page. We respond within 30 days, unless a longer period is required by applicable law.
Security
We use AES-256 encryption at rest and TLS 1.2 or higher in transit. On a deployed ekai you hold the encryption keys.
No method of transmission over the internet is completely secure. We use commercially acceptable means to protect your data, and we do not claim more than that.
International transfers
We are based in Canada and our subprocessors operate in the countries listed above. Where data moves across a border we rely on appropriate safeguards for that transfer.
On a deployed ekai this does not arise. Data residency is set by the cloud region you deploy into, and it is configurable per deployment.
Children
ekai is a tool for working executives. We do not knowingly collect information from anyone under the age of 13. If you believe a child has given us information, write to us and we will delete it.
Changes to this policy
If we change this policy we will update the date at the top of this page. If a change is material we will tell you before it takes effect.
Questions
Write to us at the address below. A person answers.
Or write to hello@yourekai.com