Privacy | Sikaru

Scope

This policy covers sikaru.ai, app.sikaru.ai, docs.sikaru.ai, the Sikaru API, CLI and SDKs, and support. If your organization has a signed agreement with us, that agreement governs how we handle your organization's content where it differs from this page.

What we collect

Account details: your name, email address and sign-in identity when you sign up or sign in, including when an agent registers on your behalf and you approve it.
Organization and billing details: organization and project names, members and roles, credit purchases and top-ups, spend limits and usage alerts. Card details are entered on our payment processor's hosted pages; we keep only the card brand, last four digits and a card fingerprint.
Content you send: agent documents, prompts and model outputs, files, tool results, traces and trajectories, evaluation datasets, and anything else you or your agents submit through the API.
Connection credentials: credentials for apps and MCP servers you connect, which we store encrypted and use only to act for the agents you grant them to.
Usage and technical data: API requests, model and token usage, run status, errors, IP address, browser and device information, used to operate, bill and secure the service.
Website analytics: pages viewed, clicks and session recordings on our website and platform, using cookies and local storage. Recordings mask page text and form inputs.
Requests you send us: the name, email, website and use case you enter when you request access or a demo, and messages you send to support.
From other sources: your name and email from the sign-in provider you choose, and payment status from our payment processor. We estimate your approximate location from your IP address.

How we use it

To provide the service: run your agents, serve models, store and show your traces, run evaluations, and improve your agents as you configure and approve.
To bill you from prepaid credits, process payments and send receipts, usage alerts and service notices.
To secure the service, prevent fraud and abuse, and debug problems.
To understand how the website and platform are used and improve them.
To respond to your requests and, if you asked us to, contact you about Sikaru. You can stop marketing email with the unsubscribe link or by emailing us; service notices such as receipts and usage alerts continue while you have an account.

Your content is used only to run and improve your own agents, models, inference and infrastructure. We never use it to train models or improve agents for other customers, and we do not sell your personal information.

Who we share it with

Service providers that process data on our behalf and under our instructions: cloud hosting and storage, sign-in and identity, payments, model serving, product analytics, and email delivery.
Services you choose: content your agents send to a model is processed by the model provider serving that request, and apps and MCP servers you connect receive what your agents send them.
Professional advisors, such as lawyers and accountants, under confidentiality obligations.
Authorities, when the law requires it or to protect our users, the public or the service.
A successor in a merger, acquisition, financing or sale of assets, which must honor this policy for data it receives.
Anyone else only with your consent.

Cookies and analytics

We use cookies and local storage to keep you signed in and to measure how the website and platform are used. We do not use advertising cookies or share browsing data with ad networks. You can block or delete cookies in your browser; signing in to the platform needs them, the public website does not.

How long we keep it

Traces and trajectories are kept for 30 days, then deleted.
Account, organization and billing records are kept while your account is open and afterwards as long as we need them for legal, tax and accounting obligations.
Other content is kept until you delete it or delete your account. After account deletion, we delete your content from active systems within 30 days and from backups within 90 days.

Security

We encrypt data in transit and store connection credentials encrypted, limit access to the people and systems that need it, and keep each organization's data separate. No system is perfectly secure; if a breach affects your personal information, we will notify you as the law requires.

Where data is processed

Aadi Labs is based in the United States, and we process data in the United States and in other countries where our service providers operate. Those countries may have different data protection laws than where you live; we use contractual safeguards with providers where the law requires them.

Agents acting for you

An agent can sign you up, sign you in and add credits only after you approve it in your own browser or wallet. What it does with that access is attributed to your account. Organization admins can cap or turn off agent top-ups in Billing.

Your choices

You can access, correct or delete your account information and content. Most of it is in the platform; for anything else, email us.
You can revoke API keys, sign-ins, agent registrations and app connections at any time.

Depending on where you live, you may have additional rights under local law. We will respond to requests as that law requires.

Children

Sikaru is for businesses and developers. It is not directed to children, and we do not knowingly collect information from anyone under 18.

Changes and contact

We will post changes on this page and update the date above. Questions or requests: support@sikaru.ai, or by mail to Aadi Labs, Inc., 1111b South Governors Avenue, STE 39783, Dover, DE 19904, United States.