Privacy Policy

Last updated April 21, 2026

1. Introduction

Vanka Inc. ("Vanka," "we," "us," or "our") provides an agentic business operating system that enables AI agents to assist with business operations. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, and authentication credentials

  • Business Information: Company details, project specifications, and strategic plans

  • User Content: Documents, data, plans, and other content you submit to or develop using our platform

  • Payment Information: Billing details processed through secure third-party providers

2.2 Information Collected Automatically

  • Usage Data: How you interact with our platform and AI agents

  • Technical Data: Device information, IP address, browser type, and operating system

  • Performance Metrics: Iteration cycles, productivity measurements, and success indicators

2.3 AI-Generated Insights

  • Pattern Recognition: Business optimization opportunities identified by our AI

  • Analytical Outputs: Analytical outputs and recommendations generated by our AI

  • Agent Logs: Activities performed by your AI agents

3. How We Use Your Information

We use your information to:

  • Enable AI Agents: Provide contextual information to enable AI agents for autonomous business operations.

  • Enhance Your Experience: Customize and optimize the platform for your use.

  • Provide Support: Assist with technical issues and respond to inquiries.

  • Improve Our Platform: Develop new features and enhance existing capabilities.

  • Ensure Security: Protect against unauthorized access and maintain platform integrity.

Execute Specific Features: We use read-only access to email receipts solely to match with financial transactions for tax reporting purposes. We do not use email data for advertising, nor do we allow humans to read your emails.

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We never sell your personal information.

4.2 Limited Sharing

We may share your information only:

  • With Your Consent: When you explicitly authorize sharing

  • For Legal Compliance: To comply with laws, regulations, or legal requests

  • For Protection: To protect rights, property, or safety of Vanka and our users

  • With Service Providers: Trusted partners who assist in platform operations under strict confidentiality

  • With Authorized Third Parties: We transfer data to third parties (such as your designated accountant) only upon your explicit instruction.

4.3 Infrastructure and Subprocessors

Vanka relies on the following third-party providers to operate our platform. These providers process data on our behalf under contractual confidentiality and security obligations and are permitted to use such data only to provide services to Vanka.

  • Google Cloud Platform (GCP): Primary cloud infrastructure, including compute, storage, and related services.

  • Fastly: Content delivery network and edge computing services. Fastly processes network traffic between users and our platform, including IP addresses and request metadata.

  • Anthropic: Large language model services used to power AI agents and generate insights.

  • OpenAI: Large language model services used to power AI agents and generate insights.

  • Stripe: Payment processing services. Stripe receives billing information necessary to process transactions on our behalf.

  • DNSimple: Domain registration and DNS management services. Where customers opt in to register domains through Vanka, DNSimple receives the registrant information required by domain registries (such as name, postal address, email address, and telephone number). For domains owned and operated by Vanka, DNSimple receives only Vanka's own registrant information.

We may engage additional infrastructure and service providers as our platform evolves, and will update this Policy accordingly.

4.4 Google Workspace APIs Limited Use Disclosure

Vanka's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. AI and Autonomous Agents

5.1 AI Processing

  • Your data may be processed by our AI systems to:

  • Generate business insights and recommendations

  • Execute autonomous operations on your behalf

  • Tailor platform behavior and agent outputs to your specific needs

5.2 AI Boundaries

  • AI agents operate within defined parameters you control

  • All AI-generated content and decisions remain your intellectual property

  • You maintain ultimate authority over all autonomous operations

  • Data Restriction: Data obtained via restricted scopes (such as Gmail) is strictly processed to provide the user's specific feature and is never used to train generalized or global AI models.

6. Data Security

We implement industry-standard security measures including:

  • Encryption: Data is encrypted in transit using industry-standard transport security (TLS), and stored using layered encryption at rest — encrypted data written to encrypted storage. Data may be decrypted server-side where necessary to provide the service, including by authorized subprocessors operating under contractual confidentiality and security obligations.

  • Access Controls: Multi-factor authentication and role-based permissions

  • Regular Audits: Security assessments and penetration testing

  • Incident Response: Comprehensive breach notification procedures

6.1 Breach Notification

In the event of a data breach affecting your personal information, we will notify affected users without undue delay, and where feasible within seventy-two (72) hours of confirming the breach. Notification will be provided via email to the address associated with your account and/or through platform notification, and will include the nature of the breach, the categories of data affected, and the measures we are taking in response, to the extent such information is available at the time of notice. We may delay notification where required by law enforcement or where premature disclosure would compromise ongoing investigation or remediation.

7. Your Rights and Choices

You have the right to:

  • Access: Request copies of your personal information

  • Correct: Update or correct inaccurate information

  • Delete: Request deletion of your account and associated data

  • Port: Export your data in a machine-readable format

  • Opt-Out: Disable specific features or data processing activities

To exercise any of these rights, email us at privacy@vanka.ai. We will verify your request using information associated with your account and will respond within a reasonable timeframe.

8. Data Retention

We retain your information only as long as reasonably necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are as follows:

  • Active Account Data: Retained for the duration of your account and for twenty-four (24) months following account termination, to support dispute resolution, legal claims, and reactivation requests.

  • Billing and Tax Records: Retained for seven (7) years following the relevant transaction, as required by applicable tax and financial recordkeeping laws.

  • Gmail and Restricted-Scope Data: Retained only while the associated feature is active on your account, and deleted within thirty (30) days after you disconnect the integration or disable the feature.

  • Backup Data: Purged on a rolling ninety (90) day cycle in the ordinary course of operations.

  • Anonymized and Aggregated Data: Data that has been de-identified such that it cannot reasonably be linked to you or your account may be retained indefinitely for analytics, product improvement, and research purposes.

  • Legal Hold: Notwithstanding the above, we may retain information for longer periods where required by law, regulation, subpoena, or pending litigation.

Upon account deletion, we will remove or anonymize your personal information within the timeframes set forth above, except where retention is required by law or legitimate business necessity.

9. International Data Transfers

As a global platform, we may transfer data across borders with appropriate safeguards in place to protect your information.

10. Changes to This Policy

We may update this Privacy Policy as our platform evolves. We will notify you of material changes via email or platform notification.

11. Contact Us

For privacy inquiries or concerns, email privacy@vanka.ai.