Privacy Policy

1. Scope of this Policy

This Policy applies to the personal information we collect and use for our own purposes, that is, as a data controller. It covers people who visit or interact with our websites, people who subscribe to or use our Services through an account, and people who contact us or attend anything we host.

When we deliver the Services to a customer, we may also process information on that customer's behalf as a data processor. In those cases the customer is the data controller and is responsible for its own privacy practices. If you use the Services through an account that belongs to one of our customers, the handling of your information is subject to that customer's privacy practices, and you should contact them with questions or requests.

2. Information you provide

"Personal information" means information relating to an identified or identifiable person. We collect the information you choose to give us, including:

Account and registration information, such as your name, email address, phone number, company details, and account credentials, which we need to create and manage your account.

Billing information. When you subscribe or pay for a project, our payment processor collects and processes your card or payment details. We do not store full card numbers ourselves. We receive limited billing details such as the last four digits, card brand, billing country, and payment status.

Project content. Briefs, files, messages, feedback, and other materials you submit through the workspace so that our team can deliver the work you request.

AI prompts. When you use AI enabled features, we process the prompts, instructions, and inputs you submit in order to return a result. We minimize the personal information shared with third party AI providers, and you should not include sensitive information in prompts. Under our agreements, our AI providers are not permitted to use your prompts to train their models, and retention is limited to what is needed to provide the feature and meet legal and abuse prevention requirements.

Communications. If you email us, use support, or fill in a form, we keep the content of those communications and your contact details so we can respond.

3. Information collected automatically

When you use the Services we automatically collect certain information through cookies and similar technologies, including your IP address, device and browser type, operating system, referring and exit pages, pages viewed, and how you interact with the Services. We use this to keep you signed in, to operate and secure the Services, and to understand and improve how they are used.

You can set your browser to refuse some or all cookies or to alert you when cookies are being set. If you block cookies, some parts of the Services may not work properly. Because we do not track you across third party websites for advertising, we do not respond to Do Not Track browser signals.

We do not knowingly collect protected health information, and the Services should not be used to store it. We will never ask for your password, full card number, or government identification numbers in an unsolicited email or call. Please report any message that appears to do so.

4. Information from other sources

If you sign in or connect through a third party service, such as Google or another integration, we may receive information from that service in line with its settings and your authorizations, for example your name and email address. Your use of those third party services is governed by their own privacy policies, and you should review your privacy settings there.

5. Why we process your information

We process personal information to: provide, operate, and maintain the Services; create and manage your account; process payments and send invoices and receipts; deliver the work you request and communicate with you about it; provide support; secure the Services and prevent fraud and abuse; understand and improve the Services; send you service and, where permitted, marketing communications; and comply with our legal obligations.

6. Legal bases for processing

Where data protection law such as the GDPR applies, we rely on the following legal bases: performance of a contract with you, to provide the Services you sign up for; our legitimate interests, such as securing and improving the Services, provided these do not override your rights; your consent, for example for certain marketing or cookies, which you can withdraw at any time; and compliance with a legal obligation.

7. How we share your information

We share personal information only as needed and never sell it. We share it with: service providers who process it on our behalf under contract, such as our payment processor, hosting and cloud storage providers, email and communication providers, analytics providers, and AI providers; with authorities or others where required by law or to protect rights, safety, and the integrity of the Services; and with a successor in the event of a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this Policy.

8. Security and confidentiality

We use appropriate technical and organizational measures to protect personal information against unauthorized access, loss, or misuse, including encryption in transit, access controls, and encryption of sensitive stored data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly to any incident.

9. Retention

We keep personal information for as long as needed to provide the Services, to comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it. You can ask us to delete your information as described below.

10. International transfers

We may process and store information in countries other than where you live. Where we transfer personal information across borders, we take steps to ensure it is protected in line with this Policy and applicable law, including using appropriate safeguards such as standard contractual clauses where required.

11. Your privacy rights and choices

Depending on where you live, you may have the right to access, correct, update, or delete your personal information; to object to or restrict certain processing; to receive a copy of your information in a portable format; and to withdraw consent where processing is based on consent. You can also opt out of marketing emails at any time using the unsubscribe link.

To exercise any of these rights, contact us at hello@anikalabs.com. We will respond within the time required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

12. Notice to California residents

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended, including the right to know what personal information we collect and how we use and share it, the right to request deletion, the right to correct inaccurate information, and the right not to be discriminated against for exercising your rights. We do not sell your personal information or share it for cross context behavioral advertising. To exercise your rights, contact us at hello@anikalabs.com.

13. Other United States state privacy laws

If you are a resident of another United States state that provides privacy rights, such as Virginia, Colorado, Connecticut, or Utah, you may have similar rights to access, correct, delete, and obtain a copy of your personal information, and to opt out of certain processing. To exercise these rights, contact us at hello@anikalabs.com.

14. Children's information

The Services are intended for business use and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

15. Third-party links and services

The Services may link to or integrate with third party websites and tools that we do not control. This Policy does not apply to those third parties, and we are not responsible for their content or privacy practices. Please review their policies before providing them with information.

16. Contact us

If you have questions about this Policy or how we handle your information, or you want to exercise your rights, contact us at hello@anikalabs.com.