Privacy Policy

1. Introduction

This Privacy Policy explains how Burrak AI ("Burrak AI", "we", "us", or "our") collects, uses, shares, and protects personal information when you use our platform, websites, APIs, and related services (the "Services"). It also describes the choices you have regarding your information.

By using the Services, you agree to the practices described in this policy. If you are located in the European Economic Area, the United Kingdom, or another region with data protection laws, please also see our GDPR page for additional rights.

2. Information we collect

Information you provide

• Account details such as your name, email address, and organization.
• Billing information processed through our payment providers.
• Customer Content, including prompts, instructions, files, and data you submit to agents.
• Voice input, if you use voice dictation — audio is processed to produce a transcription and is not stored by us after transcription.
• Communications you send to us, such as support requests and feedback.
• Your email address, if you subscribe to our newsletter. You do not need an account to subscribe, and we keep newsletter subscriptions for Burrak AI separate from those for our other products.

Information collected automatically

• Usage data, such as features used, agent runs, and API calls.
• Device and log data, such as IP address, browser type, and timestamps.
• Push notification tokens, if you install our mobile or desktop apps and enable notifications, used solely to deliver notifications to your device.
• Cookies and similar technologies, as described in our Cookie Policy.

3. How we use information

We use personal information to:

• Provide, operate, maintain, and improve the Services.
• Process transactions and manage your account and subscription.
• Run, monitor, and secure the autonomous agents you configure.
• Respond to your requests and provide customer support.
• Detect, prevent, and address fraud, abuse, and security issues.
• Comply with legal obligations and enforce our agreements.
• Send you newsletters and product updates, where you have asked to receive them.

4. Legal bases for processing

Where required by law, we process personal information on the basis of: performance of a contract with you; your consent; our legitimate interests in operating and improving the Services; and compliance with legal obligations.

5. How we share information

We do not sell your personal information. We share information only as needed to operate the Services, including with:

• Service providers and subprocessors that host infrastructure, process payments, or provide analytics under contract.
• Third-party tools and platforms you choose to connect to your agents.
• Authorities or other parties when required by law or to protect rights, safety, and security.
• A successor entity in connection with a merger, acquisition, or sale of assets.

6. Google Workspace data, AI models, and Limited Use

If you connect a Google Workspace service — Google Calendar, Google Sheets, Google Docs, or Google Slides — you grant Burrak AI access through Google OAuth. Each service is a separate connector with its own separate consent, and we request only the permissions that specific connector needs. Connecting one service never grants access to another, and you can disconnect any service at any time.

Burrak AI’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

How Google Workspace data is used with AI models

When you ask an assistant to do something with a connected Google service, the connector retrieves only the specific data needed to carry out that request — a date range of calendar events, a range of cells, the document or presentation you named — and includes it in that single request to the AI model that generates the response. The result is returned to you. We use two inference providers, Amazon Web Services (Amazon Bedrock) and OpenRouter, both under commercial terms, and both restricted to models whose providers do not use submitted data to train their models.

Specifically, we do not and will not:

• Use Google Workspace user data — raw, aggregated, anonymized, or derived — to create, train, fine-tune, or improve any generalized or foundational machine learning or artificial intelligence model.
• Transfer Google Workspace user data to any third-party AI or ML service that would use it to train or improve its models.
• Sell, rent, or transfer Google Workspace user data for advertising, marketing, credit assessment, or any similar purpose.
• Allow humans to read Google Workspace user data, except with your explicit permission for a specific issue you have raised, where it is necessary for security purposes or to comply with applicable law, or where the data has been aggregated and de-identified.
• Pool your Google Workspace data with other users’ data, or retain it to build datasets, indexes, or embeddings used for model training.

We retain Google Workspace data only for as long as needed to carry out the request you made. Your Google credentials are held encrypted, separately per account, and are never shared with any model provider or any other third party. Revoking access from your Google Account security settings, or disconnecting the connector inside Burrak AI, ends our access immediately.

7. Data retention

We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it.

8. Security

We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International transfers

We may process and store information in countries other than where you live. Where we transfer personal information internationally, we use appropriate safeguards such as standard contractual clauses to protect your information.

10. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. You can exercise these rights by contacting us. You may also update your account information directly within the Services. To delete your account and associated data, see burrakai.com/account/delete.

11. Children's privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Services or by other reasonable means. The "Last updated" date above indicates when this policy was last revised.

13. Marketing communications

If you subscribe to our newsletter, we use the email address you give us to send product updates, announcements, and related material about Burrak AI. We rely on your consent for this, and you can withdraw it at any time — every marketing email contains an unsubscribe link, and unsubscribing takes effect without you needing to contact us or sign in.

We do not sell or rent our mailing list, and we do not use it to send you anything unrelated to Burrak AI. Subscribing does not create an account, and unsubscribing from marketing email does not stop service messages about an account you hold, such as billing notices or security alerts.

We keep your address on the list until you unsubscribe. When you unsubscribe we retain a record of that choice so we can honour it, rather than deleting the address and risking adding it again later. You can ask us to erase it entirely by contacting privacy@burrakai.com.

14. Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at privacy@burrakai.com.