Privacy Policy

1. Introduction

Anikey ("we," "us," or "our") operates the website at anikey.ai and the associated SaaS platform. This Privacy Policy describes how we collect, use, store, and share information when you use our services.

2. Information We Collect

We collect the following categories of information:

• Account information — your name, email address, and Google profile data provided during sign-in via Google OAuth.
• Lead data — email addresses and associated company data submitted through our API or dashboard for enrichment. This data belongs to you; we process it on your behalf.
• Usage data — enrichment credit usage, feature interactions, and aggregate analytics (via Google Analytics and Hotjar) to improve the product.
• Payment information — billing details are collected and processed by Stripe. We store only your Stripe customer ID; we never see or store your card number.
• Connected services — if you grant access, we connect to Google Sheets, Gmail, and Google Drive using OAuth tokens stored securely in our database. We only request the minimum scopes required.

3. How We Use Your Information

• To provide, maintain, and improve the Anikey platform.
• To enrich lead data using third-party data sources and AI analysis.
• To write enriched lead data to your connected Google Sheet.
• To send emails on your behalf via Gmail (only when you explicitly trigger a send).
• To process payments and manage your subscription.
• To send transactional emails (e.g., account notifications).
• To monitor usage for quota enforcement and abuse prevention.

4. Data Sharing

We do not sell your data. We share information only with:

• Service providers — Supabase (database & auth), Stripe (payments), Vercel (hosting), Google Cloud (Sheets/Gmail/Drive APIs), Amazon Web Services (enrichment processing), and Anthropic (AI analysis). Each processes data under their own privacy policies.
• Legal obligations — if required by law, regulation, or valid legal process.

5. Data Retention

We retain your account and usage data for as long as your account is active. Lead data submitted for enrichment is processed in real time and written to your Google Sheet; we do not retain copies of your lead data beyond temporary processing. When you delete your account, we remove your profile, API keys, and stored tokens within 30 days.

6. Data Security

We use industry-standard measures to protect your data, including encryption in transit (TLS), encrypted storage for OAuth tokens, and restricted access controls. Payments are handled entirely by Stripe with PCI-DSS compliance.

7. Cookies & Analytics

We use essential cookies for authentication and session management. We use Google Analytics and Hotjar to collect anonymized usage data. You can opt out of analytics tracking by using browser extensions such as Google Analytics Opt-out or disabling JavaScript.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data.
• Export your data in a portable format.
• Withdraw consent for connected services (Gmail, Drive, Sheets) at any time by disconnecting them in your dashboard.
• Request deletion of your account and all associated data.

To exercise any of these rights, contact us at contact@anikey.ai.

9. International Data Transfers

Our services are hosted on infrastructure in the EU (Vercel, Supabase) and EU/US (AWS). By using Anikey, you consent to the transfer of your data to these regions. We ensure appropriate safeguards are in place for any cross-border data transfers.

10. Children's Privacy

Anikey is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

12. Contact

If you have questions about this Privacy Policy, contact us at contact@anikey.ai.