Privacy Policy

• Name, email address, and email verification status.
• Profile image, if you upload one or import it from an OAuth provider.
• Authentication credentials: magic-link email tokens, OAuth account identifiers (Google), and account session tokens.
• Account state, role, and access grants.

• Stripe customer and subscription identifiers, plan tier, billing cycle, renewal date, and cancellation flags.
• Invoice records, including amount, status, and a link to the invoice hosted by Stripe.
• Usage summaries: monthly totals of AI usage, turn counts, and budgets against your plan’s limits.

We do not collect or store your full payment card details. Stripe collects and processes payment data directly; we only receive tokenized references and metadata.

• Projects, files, and documents you create — including their full content (text, HTML, and ProseMirror JSON), version history, titles, and folder structure.
• Conversations with the AI, including your prompts, uploaded context, intermediate model responses, and final outputs.
• Margin notes and annotations, including references to files and conversations.
• Files you upload, including extracted metadata (word count, summaries, key points) used to make them searchable within the Service.
• Saved prompts and writing samples you choose to store.

To tailor outputs to your individual style, the Service may extract and store the following from writing samples you provide or content you create within Akston:

• Voice profile: signature patterns, vocabulary notes, tone indicators, topics, and audience characteristics derived from your writing.
• Philosophical profile: observations and synthesized themes drawn from your writing samples.
• Preferences you configure: experience level, typical writing types, target audiences, and publication outlets.

This personalization is isolated to your account and not shared with or used for the benefit of other users. You can reset or delete it at any time from your account settings.

• Activity events: which features you use, when, and in connection with which project or file. We use these to operate the Service, investigate issues, and improve reliability.
• Session identifiers, request identifiers, and timestamps.
• Device and browser information: IP address, user-agent string, device type, operating system, language, and timezone.
• Error and performance data reported through our monitoring tools.
• Onboarding and last-active timestamps (for re-engagement and account-health signals).

If you use dictation, we send your audio to a third-party speech-to-text provider (see § 6) for transcription. The resulting transcript is stored in your workspace; raw audio is retained only transiently as required to produce the transcript.

If you email us for support, feedback, or other reasons, we retain the content of that correspondence along with your email address so we can respond and follow up.

If you connect a third-party integration (such as Google Drive, X, or Substack), we store the OAuth tokens needed to access that integration and metadata about the content you choose to import, export, or publish through it. We do not access the integration beyond the scopes you authorize and the specific actions you initiate.

If you join the waitlist, we collect your email address and any information you submit in the waitlist form. If you visit the marketing site, we collect standard server logs (IP address, user-agent, referrer, timestamps).

We rely on a small number of vendors to operate the Service. Each acts under a contract that requires them to protect your data, use it only to provide their services to us, and comply with applicable law. See § 6 for the current list.

When you connect an integration (Google Drive, X, Substack, or similar) or use an export, sharing, or publish feature, we share the specific content you select with that destination. You control what to share and when.

We may disclose data when we reasonably believe it is necessary to (a) comply with applicable law or legal process, (b) enforce our Terms of Service, (c) investigate fraud, abuse, or security incidents, or (d) protect the rights, property, or safety of Akston, our users, or the public. We will give you notice of legal requests for your data unless the request prohibits us from doing so or we believe giving notice would be harmful.

If Akston is involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred to the successor or acquirer. Any successor must honor this Privacy Policy or give you reasonable notice and the opportunity to delete your data before any materially different policy applies.

We may share aggregated or de-identified data that cannot reasonably be used to re-identify you — for example, overall usage statistics or model performance benchmarks. We will not attempt to re-identify such data.

We retain your account and workspace data for as long as your account is active so you can continue to use the Service. You can delete individual projects, files, conversations, or your entire account from your settings at any time.

If you cancel your subscription or we cancel it for non-payment, your account transitions to a 90-day read-only state. During this window you can sign in, view your content, and export it in the formats permitted on your most recent plan. You cannot create new content or run the AI features during this window.

After the 90-day window ends, we may delete your User Content from our live systems. You are responsible for exporting anything you want to keep before the window closes.

Deleted data may remain in encrypted backups for a limited period (typically up to 35 days) before being overwritten in the ordinary course. Backups are not used for any purpose other than disaster recovery.

We retain the following beyond account deletion to the extent required by law or necessary for legitimate business purposes:

• Billing and tax records, for the period required by applicable law (typically seven years in the United States).
• Records necessary to enforce our agreements, defend against legal claims, or respond to subpoenas.
• Abuse-prevention records (such as terminated-account identifiers) for as long as needed to prevent re-abuse.

To delete your account and associated data outside of the normal flow, email team@akston.ai with “Account deletion” in the subject line. We will verify the request and confirm when deletion is complete.

You can access and export your workspace content at any time from the Service. You can delete projects, files, and your account from your settings. If you cannot accomplish something through the Service, email team@akston.ai.

You can update your name, email, and other account details in your settings. Contact us if you need help correcting data you cannot edit directly.

You can unsubscribe from product updates and marketing emails at any time using the unsubscribe link in those emails or in your account settings. We will continue to send you essential transactional emails (billing, security, policy changes) for as long as you have an account.

If you enable browser push notifications, you can disable them in your browser settings or in the Service’s notification settings.

You can disconnect any third-party integration at any time from your account settings. Disconnecting revokes our stored OAuth tokens and stops further data exchange with that service.

You can reset the voice and personalization data described in § 1 from your account settings, or delete specific writing samples individually.

In the last 12 months, we have collected the following categories of personal information, as defined by the California Consumer Privacy Act (CCPA/CPRA):

• Identifiers: name, email, account identifier, IP address, device identifier.
• Commercial information: subscription and billing records.
• Internet or network activity: pages visited, features used, session data, referral URLs.
• Audio data: dictation recordings you submit for transcription.
• Professional information that you voluntarily provide (e.g., experience level, writing types, audiences).
• Inferences: personalization profiles (voice, style, preferences) derived from content you provide.
• User content: writing, documents, and conversations you create in the Service.

We collect this information for the purposes described in § 2 and share it with the categories of recipients described in § 5 and § 6.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

You have the right to:

• Know what personal information we have collected about you, why, and with whom we have shared it.
• Delete personal information we have collected from you, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information (not applicable to us — see above).
• Limit our use of sensitive personal information (not applicable — we do not use sensitive personal information for purposes that require this right).
• Non-discrimination: we will not deny you the Service, charge you a different price, or provide a different quality of service because you exercised your rights.

Email team@akston.ai with “California privacy request” in the subject line and tell us which right you want to exercise. We will verify your identity (usually by confirming you control the email on file) and respond within the timeframes required by law (typically 45 days, with a possible 45-day extension). An authorized agent may submit a request on your behalf with your written authorization.

California Civil Code § 1798.83 permits California residents to request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not make such disclosures.

Some browsers send a “Do Not Track” (DNT) signal. There is currently no industry standard for responding to DNT signals, and we do not alter our data practices based on them. We do not permit third parties to collect personally identifiable information about your activity on the Site over time and across third-party websites.

We use a small set of cookies and similar technologies that are strictly necessary to operate the Service:

• Authentication cookies that keep you signed in.
• Session and security cookies used to route requests and protect against fraud.
• Preference cookies that remember things like your theme.

We do not use third-party advertising or cross-site tracking cookies. You can block or delete cookies in your browser settings; doing so may prevent you from signing in or using the Service.