Privacy Policy

This Privacy Policy explains how Rekiy AI, operated by IYGLOBAL LTD, collects, uses, and protects information when you use our website and AI sales agent service (the "Service"). It applies both to businesses who sign up for Rekiy AI and to visitors who chat with an AI agent embedded on one of our customers' websites.

1. Information We Collect

We collect three broad categories of information:

• Account information: your name, email address, business name, and password (stored securely, never in plain text), plus billing details handled directly by our payment processors.
• Business content: the knowledge base, pricing, services, policies, business hours, and configuration you provide so your AI agent can answer questions accurately.
• Visitor and lead data: when someone chats with a Rekiy AI powered widget on one of our customers' websites, we collect what they share in that conversation, typically their name, email, phone number, and the messages exchanged, on behalf of the business running that widget.

2. How We Use Information

We use the information above to:

• Operate the Service, including generating AI responses, scoring leads, and booking appointments
• Send account related emails: confirmations, trial and billing notices, and support responses
• Notify a business's team when a lead qualifies, an appointment is booked, or usage limits are reached
• Maintain security, prevent abuse, and enforce our Terms of Service
• Improve the Service based on aggregate usage patterns

3. Who We Share Information With

We don't sell personal information. We share it only with the service providers ("subprocessors") that power Rekiy AI, each bound by their own data protection obligations:

• Supabase, for our database, authentication, and file storage
• Google, Anthropic and OpenAI, whose AI models generate your agent's responses
• Meta (WhatsApp Business Platform), to send and receive WhatsApp messages for businesses that connect WhatsApp, and to send team alerts on WhatsApp
• Telegram, to send and receive messages for businesses that connect a Telegram bot
• Cloudflare, for bot protection (Turnstile) on our signup and contact forms
• Brevo and Resend, for transactional email delivery
• Stripe and Paystack, for payment processing (we never see or store full card details)
• Vercel, for application hosting
• Google, for Google Calendar and Google Meet, only for businesses that connect them
• Google and Meta, for analytics and advertising on our own website (see Cookies below)
• Upstash, for rate limiting infrastructure

We may also disclose information if required by law, or to protect the rights, safety, or property of Rekiy AI, our customers, or the public.

4. Google Calendar and Google User Data

A business using Rekiy AI can choose to connect its Google Calendar so that each appointment booked through its AI agent gets its own Google Meet link. When a business connects, we ask Google only for permission to create and manage calendar events (the calendar.events scope) and for the email address of the connected Google account.

• What we do with it: when a customer books, we create one event for that appointment on the connected calendar, with a Google Meet link, and add the customer as a guest. We read back only the events we created, to get their Meet link. We do not read, change, or delete any other events.
• Where it goes: the Meet link is shown to the business and sent to the customer who booked, in their confirmation and reminder messages. We don't sell Google user data, use it for advertising, or use it to train AI models, and we don't share it with anyone else except as needed to run this feature or comply with the law.
• How it's stored: the access granted by Google is stored encrypted and is used only by our servers. A business can disconnect at any time from AI Configuration in its dashboard, which revokes our access at Google and deletes the stored access. Access can also be removed at any time from the Google Account's security settings.

Rekiy AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Retention and Deletion

We keep account and business data for as long as your account is active. If you delete a website, cancel your account, or ask us to delete your data, we remove it from our active systems, including leads, conversations, and knowledge base content tied to that account, within a reasonable period. Some information may be retained longer where required for legal, tax, or fraud prevention purposes.

6. Security

We use industry standard safeguards to protect your data, including encryption in transit, per tenant data isolation at the database level, and access controls limiting who on our team can view customer data. No system is perfectly secure, and we can't guarantee absolute protection against every possible threat.

7. Your Rights and Choices

Depending on where you're located, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update most account information directly from your dashboard, or contact us at hello@rekiy.com for anything else, including a request from a website visitor who chatted with a Rekiy AI agent and wants their conversation data removed.

8. Cookies, Analytics, and Advertising

We use essential cookies to keep you signed in and functioning session state, and browser local storage for lightweight preferences like theme (light or dark mode).

On rekiy.com and the Rekiy Academy blog we also use Google Analytics, Google Ads, and the Meta Pixel. They set their own cookies so we can see how people find and use our website, measure sign ups and purchases, and show Rekiy ads to people who visited before. Google and Meta process this under their own privacy policies. These tags are never added to the chat widget that runs on our customers' websites. You can opt out through Google ad settings, Meta ad preferences, or by blocking cookies in your browser.

We also save one small cookie of our own for up to 90 days. It records which link or website brought you to Rekiy, for example an article in the Rekiy Academy, so we can see which content helps people find us. If you sign up, that source is stored with your business. It is never shared with advertisers.

9. Children's Privacy

Rekiy AI is a business tool and is not directed at children. We don't knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we'll remove it.

10. International Data Transfers

Our subprocessors operate infrastructure in multiple countries. By using the Service, you understand your information may be processed outside your own country, including in the United States and other jurisdictions where our providers operate, under safeguards consistent with applicable data protection law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or through the dashboard before they take effect.

12. Contact Us

Questions about this Privacy Policy or how we handle your data? Reach us at hello@rekiy.com.