Privacy Policy

1. Information We Collect

Account information. When you sign up, we collect your name, username, email address, and password (stored securely, hashed — we never see it in plain text).

Business and conversation information. During the guided intake, we collect what you tell Eiki — details about your business, its history, customers, values, and direction — along with the brand foundation document generated from it, and any business name you provide.

Usage information. Standard technical data generated by using a web application — things like timestamps, session activity, and basic device/browser information — collected automatically through our hosting and authentication provider.

2. How We Use It

• To run the guided intake conversation and generate your brand foundation document.
• To maintain your account, authenticate you, and let you resume a conversation in progress.
• To respond to support requests and messages you flag for our review.
• To maintain, secure, and improve the Service.
• To send you account-related communications (like password resets) and, where relevant, platform updates.

3. Who We Share It With

We do not sell your personal or business information to third parties. We share information only with the service providers (“subprocessors”) that help us run the Service, under agreements that limit their use of it to providing that service to us:

• Anthropic — your intake conversation is sent to Anthropic’s Claude models to power Eiki’s responses and generate your brand foundation document. This is the core of how the Service works.
• Supabase — our database, authentication, and hosting infrastructure provider, which stores your account and conversation data on our behalf.

We may also disclose information if required by law, or to protect the rights, property, or safety of Eikira, our users, or others.

4. Cookies

We use only the essential cookies our authentication provider sets to keep you signed in. We don’t use advertising or third-party tracking cookies.

5. Data Retention

We keep your account and the data in it for as long as your account is active.

If you delete your account, we delete your brand foundation, the whole intake conversation behind it, the document generated from that conversation, and the account itself. That includes any earlier foundations you’d discarded and started over from — nothing is left behind waiting to expire. This happens immediately, and it can’t be undone: we don’t keep a copy to restore for you.

Deleted data is not retained in backups.

If you discard a foundation and start a new one, the old one is kept for 30 days and then permanently deleted. That window exists so you can ask us to bring it back if you discarded it by mistake.

Two things outlive a deletion, and we’d rather name them than leave them under a general exception:

Reports and support messages. If you ever used “Flag this” to report something Eiki said, or sent us a support message, we keep it for 24 months so we can review and fix the problem. When you delete your account, the report stays but your account is no longer attached to it.

To be specific about what that means: we keep the text of the message you flagged, and we keep anything you typed yourself — the note explaining what felt off, or the body of a support message. That text is not deleted when your account is. What we remove is the link between it and you: no name, no email, no account.

Server logs. Our hosting provider keeps runtime logs for 1 day. Those logs record which requests happened and whether they worked — not your answers, your foundation, or anything you wrote. They age out on their own and we can’t delete them individually.

6. Your Choices & Rights

You can review, download, and regenerate your brand foundation document at any time from within the Service. You can delete your account and everything in it yourself, from the bottom of your dashboard — you don’t need to ask us. You can also request access to or correction of your personal information by contacting us. Depending on where you live, you may have additional rights under applicable data protection law (such as the right to data portability or to object to certain processing) — contact us to exercise them.

7. Security

We use industry-standard measures — including encryption in transit, access controls, and row-level data isolation — to protect your information. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.

8. International Data Transfers

Our service providers may process and store data in countries other than your own. Where this happens, we rely on those providers’ own safeguards for cross-border data transfer.

9. Children’s Privacy

The Service is intended for business owners and professionals aged 18 and older. We don’t knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we’ll update the “Last updated” date above and, where appropriate, notify you through the Service.

11. Contact

Questions about this policy, or want to exercise a data right? Reach us through the Contact Support option available anywhere you’re signed into the Service, or at studioeikira@gmail.com.