Privacy Policy

1. Who we are

This policy applies to the services provided by SumaqAI SAC (hereinafter, "SumaqAI", "we", or "Awki"), the party responsible for the Awki product, a conversational automation platform for Instagram, WhatsApp, Messenger, TikTok, and other messaging channels. Our public site is available at www.awiki.ai.

For any questions about this policy or about the processing of your personal data, you can write to us at info@sumaqai.com.

2. Information we collect

We collect information in three situations: when you create an account, when you use the service, and when you interact with our website.

2.1. Information you provide to us

  • Account data: name, email, password (hashed), phone number, business name, country, and business sector.
  • Billing information: tax name, address, tax identification, and payment data. Card data is processed by our payment provider; we do not store full card numbers.
  • Your operational content: messages, images, audio, files, and metadata that you upload or that the bots configured in your account receive.
  • Support: records of emails, tickets, and conversations with our team.

2.2. Information we receive from connected platforms

  • When you connect Awki with WhatsApp Business, Instagram, Messenger, TikTok, or other channels, we receive incoming messages and the public identifiers of end users (username, profile picture, platform-internal ID) as permitted by each API.
  • This data is used solely to process conversations and return the responses you have configured.

2.3. Information collected automatically

  • Usage data: pages visited, actions performed, device, browser, language, IP address, and timestamps.
  • Cookies and similar technologies: we use first-party and third-party cookies to keep you signed in, remember your language, measure site usage, and improve the service. See section 8.

2.4. Google API data (Login, Gmail, and Google Calendar)

If you choose to connect your Google account to Awki, we ask for your consent through Google's official screen (OAuth) and only access the following permissions (scopes), exclusively for the purposes indicated:

  • Basic identity (openid, userinfo.email, userinfo.profile): to identify you and allow signing in with Google.
  • Send emails on your behalf (gmail.send): to send from Awki the emails you request (for example, sending a quote, invoice, or notification to your customers). We do not read, store, or analyze the content of your inbox — the permission is send-only.
  • Google Calendar (calendar, calendar.events): to list your calendars so you can choose where to sync, and to create, update, or cancel the events for appointments managed in Awki.

Access to this data is always initiated and authorized by you, is used only to provide these features, and we never sell or share this information with third parties, nor do we use it for advertising or to train generalized AI models.

Limited Use: Awki's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

AI processing and Limited Use compliance: Awki uses a third-party AI provider (OpenAI, via its standard paid API) solely to generate the message content you request to send through the "Send emails on your behalf" feature (e.g., quotes, invoices, notifications). No content from your Gmail inbox or Google Calendar is read, summarized, or processed by this AI model — the Gmail scope is send-only, and Calendar data is used only to create/read event entries, not analyzed by AI. OpenAI's standard API does not use this data to train its models. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Revoking access: at any time you can disconnect your Google account from Awki (Settings → Integrations) or revoke permissions directly at myaccount.google.com/permissions.

3. How we use your information

We use the data to:

  • Operate, maintain, and improve Awki.
  • Process incoming/outgoing conversations on the channels you connect.
  • Train and tune the automated flows and artificial intelligence models solely on your account data and for the purpose of providing the service to you.
  • Charge you for the plans you subscribe to and issue receipts.
  • Provide technical support and respond to inquiries.
  • Send you important operational notices (changes, breaches, maintenance).
  • Send you marketing communications if you opted in to receive them; you may unsubscribe at any time.
  • Detect fraud and abuse and comply with legal obligations.

We do not sell your personal data or that of your contacts to third parties for advertising purposes.

4. Legal basis for processing

We process your personal data under one of the following legal bases: (a) performance of the contract you have with us to provide the service; (b) your consent, where applicable (for example, marketing); (c) our legitimate interest in maintaining security and improving the product; and (d) compliance with legal obligations.

5. Who we share information with

We share data only with:

  • Infrastructure providers: cloud hosting, databases, file storage, and CDN, subject to confidentiality and data processing agreements.
  • Messaging platforms: Meta (WhatsApp, Instagram, Messenger), TikTok, and other APIs you voluntarily connect, in accordance with their respective policies.
  • AI providers: language and voice/image processing models that we use to generate responses. These providers process messages solely to generate the response and do not use them to train their general models.
  • Payment processors: to charge for plans and subscriptions.
  • Analytics and support tools: to understand product usage and assist you.
  • Authorities: when required by applicable law or a court order.
  • In corporate transactions: if Awki is acquired, merged, or sold, your data may be transferred to the new owner under the same terms.

6. International transfers

Awki is operated from the United States and may process and store data on servers located in the United States and in other countries where our providers operate. By using the service you accept this transfer. We apply reasonable safeguards (encryption in transit, data processing agreements) to protect it.

7. Data retention

We retain data while your account is active and for the reasonable time necessary to fulfill the purposes described, meet legal obligations, resolve disputes, and enforce our agreements.

If you close your account, we delete or anonymize your personal data within a reasonable period, unless the law requires us to retain it longer (for example, accounting records).

8. Cookies

We use strictly necessary cookies (for authentication and language preference), performance cookies (to measure aggregate site usage), and, where you choose to subscribe, marketing cookies. You can disable cookies from your browser settings; some site features may stop working properly.

9. Security

We apply reasonable technical and organizational measures to protect your data: encryption in transit (HTTPS/TLS), access controls, network segmentation, audit logs, and periodic backups. No system on the internet is 100% secure: if you ever detect an incident, write to us at info@sumaqai.com.

10. Your rights

Subject to applicable law, you may exercise the following rights over your personal data:

  • Access: request a copy of the data we hold about you.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: ask us to delete your data when there is no legal basis to retain it.
  • Objection and restriction: object to certain processing or ask us to restrict it.
  • Portability: receive your data in a structured, readable format.
  • Withdraw consent: at any time, without retroactive effect.

To exercise them, write to us at info@sumaqai.com. We respond within a maximum of 30 days.

11. Your end users' data

When you use Awki to respond to your customers on WhatsApp, Instagram, Messenger, or other channels, you are the data controller of that data and we act as the processor. You undertake to have a valid legal basis to process it, to inform them as appropriate, and to respect their rights.

12. Minors

Awki is not directed to children under 13 (or under 16 in jurisdictions where a higher threshold applies). We do not knowingly collect data from minors. If you discover that a minor has provided us with data, write to us to delete it.

13. Changes to this policy

We may update this policy to reflect changes in the product, in the law, or in our practices. When changes are material, we will notify you by email or through a visible notice within the product. The "Last updated" date at the top indicates when it was last revised.

14. Contact

For any inquiry, complaint, or exercise of rights related to this policy: