Privacy Policy

Last updated: May 2026 · Ektie Inc.

1. What we collect

We collect the minimum necessary to run the product. Here's what that means in practice:

  • Account information. Your name, email address, and company name when you sign up. If you invite teammates, we collect their emails too.
  • Workspace data. Everything you create or import inside Ektie — CRM records, contact lists, sequences, agent activity logs, AI Studio content, ad campaigns. This is your data. We don't look at it unless you ask for support.
  • Usage data. Pages visited, features used, button clicks, and session duration — collected in aggregate and anonymised. We use this to understand how the product is being used, not to profile individual users.
  • Billing information. Payment processing is handled entirely by Stripe. We never see or store your card number, CVV, or full card details. We do store your billing address and subscription tier for invoicing purposes.

2. How we use your data

We use your data to do one thing: run and improve Ektie for you. More specifically:

  • To operate the product. Serving your workspace, running agent tasks, syncing CRM data — the day-to-day mechanics of the platform.
  • To communicate with you. Transactional emails like trial expiry notices, invoices, password resets, and critical product announcements. We don't send marketing emails unless you opt in.
  • To provide support. If you open a support ticket, we may access your workspace data to diagnose the issue. We'll always tell you if we do.
  • To improve the product. We analyse aggregated, anonymised usage patterns to decide what to build next. We never analyse individual activity for advertising purposes — full stop.

3. Data sharing

We don't sell your data. We never have. We never will. We share data only with the sub-processors required to run the product:

  • AWS — cloud infrastructure and storage. Data is hosted in US-East and EU-West regions depending on your workspace location.
  • Stripe — payment processing and billing. Governed by Stripe's own privacy policy and PCI DSS compliance.
  • Postmark — transactional email delivery (invoices, trial notifications, password resets).
  • OpenAI / Anthropic — AI model inference powering agent tasks. When an agent processes a task, the relevant workspace context is sent to the model API. This data is never used to train models for other customers, and is never shared with any other Ektie workspace. We use zero-data-retention API agreements where available.

A full sub-processor list is available on request — email privacy@ektie.com.

4. Data retention

Your workspace data is retained for as long as your account is active. If you cancel:

  • You have 30 days to export everything — CRM contacts, sequences, agent logs, AI Studio assets. Your dashboard remains accessible during this window.
  • After 30 days, your data is queued for deletion and fully removed within 60 days of cancellation.
  • Anonymised, aggregated usage analytics (no personal data) may be retained beyond that window for product improvement purposes.

If you need an expedited deletion — for example, to meet a regulatory deadline — email us at privacy@ektie.com and we'll action it within 5 business days.

5. Your rights

You're in control of your data. From your account settings you can:

  • Access all data associated with your account.
  • Correct inaccurate information at any time.
  • Export a full data dump in standard formats (CSV, JSON).
  • Delete your account and all associated data.

For formal GDPR or CCPA requests — including right-to-erasure, data portability, or opt-out of processing — email privacy@ektie.com with the subject line "Privacy Request." We respond to all requests within 30 days.

If you're in the EU, you also have the right to lodge a complaint with your local data protection authority if you believe your rights have been infringed.

6. Cookies

We keep cookies minimal and purposeful. Here's what we use:

  • Session cookies. Required to keep you logged in. Without these, the app cannot function.
  • Preference cookies. Small cookies that remember things like your UI settings so we don't ask again every session.

What we don't use: advertising trackers, third-party analytics cookies (Google Analytics, Meta Pixel, etc.), or any cookies that follow you across sites. There are none.

You can disable cookies in your browser at any time. Just be aware that session cookies are required for the app to work — without them you won't be able to sign in.

7. Security

Security is a first-class concern, not an afterthought. The short version:

  • Encryption in transit: All data between your browser and our servers is encrypted using TLS 1.3.
  • Encryption at rest: All stored data is encrypted using AES-256.
  • Workspace isolation: Every Ektie workspace is isolated at the database level. Your CRM data, agent logs, and AI Studio content are never commingled with another customer's data — even at the query layer.
  • Access controls: Production data access by Ektie employees requires multi-factor authentication, is logged, and is audited quarterly.

For a detailed breakdown of our security architecture, certifications, and responsible disclosure process, see our Security page.

8. Changes to this policy

We'll update this policy as the product evolves. When we make changes that matter — new data types collected, new sub-processors, changes to retention periods — we'll let you know.

For material changes, we'll send an email to the address on your account and show an in-app notice at least 14 days before the changes take effect. Minor clarifications or wording fixes may be made without notice.

The "Last updated" date at the top of this page always reflects the most recent revision.

9. Contact us

Questions about this policy? Something doesn't look right? Reach out:

We're a small team and we read every message. If something in this policy is unclear or confusing, tell us — we'd rather fix the policy than leave you guessing.