Part 1 — Terms of Service
1. Acceptance
By creating an account on the AIK Platform ("Platform"), you agree to be bound by these Terms of Service. If you do not agree, do not create an account.
2. Use of the Platform
You may use the Platform only for lawful purposes. You agree not to:
- Use the Platform to perform or facilitate illegal activities.
- Attempt to gain unauthorized access to other users' data or the Platform's infrastructure.
- Use automated tools to stress-test or disrupt the Platform.
- Upload malicious code, viruses, or any software intended to harm.
- Use the Platform to send unsolicited bulk email (spam).
3. Your Account
You are responsible for maintaining the confidentiality of your credentials. You are responsible for all activity that occurs under your account. Notify us immediately if you suspect unauthorized use.
4. AI-Generated Content
The Platform uses large language models (LLMs) to generate responses and perform automated tasks. AI-generated output may be inaccurate. You are solely responsible for reviewing and validating any AI output before acting on it. We do not accept liability for decisions made based on AI-generated content.
5. Data You Provide
You retain ownership of all data you upload to the Platform. By uploading data, you grant us a limited license to process it solely for the purpose of delivering the service to you.
6. Service Availability
We aim for high availability but do not guarantee uninterrupted service. We reserve the right to modify, suspend, or discontinue the service with reasonable notice.
7. Limitation of Liability
To the maximum extent permitted by law, AIK Platform is provided "as is" without warranties of any kind. We are not liable for indirect, incidental, or consequential damages arising from your use of the Platform.
8. Termination
We may suspend or terminate your account if you violate these Terms. You may delete your account at any time from Settings → Security → Delete Account.
9. Changes to Terms
We may update these Terms. Continued use of the Platform after notification constitutes acceptance of the new Terms.
Part 2 — Privacy Policy (GDPR)
Hosting your install for you? If we run AIK on our own server for your organisation, we act as your data processor and the Data Processing Agreement applies as well — it names what we process, where it is stored, who else touches it, and what we do not promise. If AIK runs on your own server, we receive nothing and it does not apply.
Your privacy matters. This policy explains what data we collect, why, how we protect it, and your rights under the General Data Protection Regulation (GDPR).
1. Data Controller
The data controller responsible for your personal data is the operator of this AIK Platform instance. For questions, contact the administrator via the Support section of the Platform.
2. Data We Collect
- Account data: email address, full name, hashed password, registration timestamp.
- Usage data: chat history (session-based), workflow run logs, activity logs.
- Settings: API keys and credentials you add in Settings (stored encrypted).
- Files: files you upload to your personal sandbox folder.
- Technical data: IP address (for rate limiting only, not stored long-term), browser type.
3. Legal Basis for Processing
- Contract: processing necessary to provide the service you signed up for.
- Consent: you explicitly consented at registration by accepting these terms.
- Legitimate interest: security logging, fraud prevention.
4. How We Use Your Data
- Provide and improve the Platform.
- Authenticate you and keep your account secure.
- Send password reset emails (only when requested).
- Detect and prevent abuse.
5. Data Sharing
We do not sell your personal data. We may share data with:
- AI providers (e.g. OpenAI, Anthropic, Google): your chat messages are sent to the AI model provider you configured. Review their privacy policies.
- Infrastructure providers: hosting, database services, only as needed to operate the Platform.
6. Data Retention
Your data is retained for as long as your account is active. When you delete your account, all your personal data and owned content is permanently deleted within 30 days.
7. Your Rights (GDPR)
Under GDPR you have the right to:
- Access: request a copy of your personal data.
- Rectification: correct inaccurate data (via Settings).
- Erasure ("right to be forgotten"): delete your account and all data at any time via Settings → Security → Delete Account.
- Portability: request your data in a machine-readable format.
- Objection: object to processing based on legitimate interests.
- Withdraw consent: you may withdraw consent at any time by deleting your account.
To exercise any right, contact the Platform administrator via the Support section.
8. Security
We implement technical and organizational measures to protect your data, including password hashing (bcrypt), encrypted storage of API keys, JWT authentication, and rate limiting. However, no system is 100% secure — use a strong, unique password.
9. Cookies
The Platform uses only functional storage (localStorage in your browser) to maintain your session. No third-party tracking cookies are used.
10. International Transfers
If you use cloud AI providers (OpenAI, Anthropic, Google), your messages may be processed outside the EU. These providers maintain their own GDPR compliance frameworks.
11. Contact & Complaints
For privacy concerns, contact the Platform administrator. You also have the right to lodge a complaint with your national data protection authority.
12. Google, Gmail and YouTube data
When you connect a Google or YouTube account (Integrations → 🔗 Connect), AIK asks only for the access its agents need and uses it only for what you ask them to do:
- What we access — YouTube: your YouTube channel's name and video list, and — when you ask an agent to — uploading a video you choose from your My Files, setting its title, description, tags and visibility, and managing playlists and comments on your channel.
- What we access — Gmail: through AIK's Google app, only sending e-mails you write or ask an agent to send, from your own Gmail address (with files from your My Files attached if you ask). AIK cannot read, search or delete your mailbox through AIK's app.
- What we access — Google Calendar: listing your upcoming events, and creating, changing or deleting events when you ask an agent to.
- What we access — Google Docs and Sheets: creating documents and spreadsheets, adding text or rows to them, and reading a document or spreadsheet you name.
- What we access — Google Drive: only the files AIK created or that you opened with AIK (Google's “drive.file” access). AIK cannot see the rest of your Drive. Within those files, when you ask, an agent can list them, copy one into your My Files, share one with an address you give, or delete one.
- How we use it: solely to carry out the tasks you give your agents. By default, actions that send, publish, create, change or delete something wait for your OK on the Dashboard first. We do not use Google user data for advertising, do not sell it, and do not use it to develop, improve or train generalized AI or machine-learning models.
- Storage: the sign-in (OAuth tokens) is stored encrypted on the server where AIK runs (in the EU for the hosted service) and is used only by your own agents. AIK keeps no copy of your e-mails, events, documents or spreadsheets, except a file you asked to copy into your My Files and the run log of what an agent did. Files in My Files stay until you delete them. If AIK runs on your own server and you choose Connect through aikautomation.com, the sign-in is made by aikautomation.com with AIK's app: the tokens pass through it once on their way to your server, and each renewal of the access token goes through it; they are not stored there beyond ten minutes.
- Sharing: Google user data is not shared with anyone, except that the AI model you chose sees the content a task needs — for example the text of an e-mail or document you asked it to write, or the details of an event you asked it to create.
- Removing access: delete the connection on the Integrations page, and revoke AIK at myaccount.google.com/permissions. Deleting your AIK account removes all stored tokens.
AIK's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. YouTube features also follow the YouTube Terms of Service and Google Privacy Policy.