ehko.ai Privacy Policy

Last Updated Date: July 5, 2025

Introduction

ACIAOSA, LLC (doing business as ehko.ai) values your privacy. This Privacy Policy explains how we collect, use, and share your personal information when you use our website, applications, and services (collectively, the “Services”). By using or accessing ehko.ai, you agree to the practices described in this Policy and consent to our collection, use, and disclosure of information as described below. This Privacy Policy is subject to our Terms of Service. Any undefined capitalized terms have the meanings given in the Terms of Service. We may update this Privacy Policy from time to time; if we make material changes, we will notify you by updating the “Effective Date” and posting a notice on our site or via email. Your continued use of the Services after any changes signifies your acceptance of the updated Policy.

Information We Collect

We collect various types of information from both users and creator partners (collectively, “you” or “users”) when you interact with ehko.ai:

• Account Information: When you create an account as a user or Creator, we collect personal details such as your name, email address, username, and contact information. We may also require identity verification via third-party sign-in (e.g. Google OAuth) or email confirmation. Creators must verify their identity and may need to provide additional identifiers (for example, a government ID or similar) to ensure authenticity and prevent impersonation.

• Profile and Content Data: Creators provide content to train their “ehko” (AI persona), which may include documents, biographies, photos (e.g. profile images), tone/voice guidelines, and other materials. All content that you upload or submit to our platform is collected and stored so that we can build and operate the conversational AI. This may include any personal information contained in those materials (for example, a Creator’s biography or voice recordings). Users may also provide content when interacting with an ehko, such as the messages or questions you send in chat, feedback or ratings on responses, and any other information you voluntarily input. Please note: any information you share during a chat conversation (including personal or sensitive details about yourself) will be collected as part of the chat logs, and may be visible to the Creator of that ehko).

• Communication Data: If you contact us for support or communicate with us via email or social media, we collect the information in those messages (such as your name, email, and the content of your inquiry). We also collect any feedback, testimonials, or survey responses you provide about our Services.

• Payment and Subscription Information: When users purchase a subscription to access ehko content or features, we (including through our third-party payment processor) collect payment-related information. This may include your payment card type, expiration and last four digits, billing address, and other necessary billing details . All payments are processed by Stripe, Inc. (or a similar payment provider), so we do not receive or store full credit card numbers. If you are a Creator who earns revenue on our platform, we will collect information needed to disburse payments to you (such as your payout account details through Stripe Connect and any necessary tax identification information). These payment and financial details are handled via secure third-party services and used only for processing transactions and payouts.

• Usage and Technical Data: We automatically collect data about how you access and use our Services. This includes device and browser information (IP address, device identifiers, operating system, browser type) and usage details like pages or screens you view, the dates/times of access, and interactions with our UI. For example, we may log when you start or end a chat, the number of messages exchanged, and referral URLs (what link or page led you to our site) . We also use cookies and similar tracking technologies to remember your preferences and gather analytics about our platform’s performance.

• Anonymized and Aggregated Data: We may derive statistical or aggregate insights from user data to understand platform trends, such as total chat volumes or commonly asked questions. This data is typically stripped of personal identifiers. However, when you engage with a Creator’s ehko, certain user-level analytics (such as your name, chat history, timestamps, feedback, and usage frequency) are made available to that Creator for the purpose of improving their ehko, understanding their audience, and serving you benefits. Creators do not see sensitive personal information like your payment details unless explicitly shared by you. All Creators are required to handle this information confidentially and in compliance with our platform policies.

• Sensitive Personal Data: We do not actively solicit sensitive personal information (such as health details or financial account numbers) from users. However, due to the nature of the service, users might voluntarily share sensitive details when chatting with an ehko. For example, you might discuss personal issues, health or relationship questions, etc. We treat all chat data as private between you, the platform, and the Creator’s AI. We will not use sensitive chat contents for any purpose other than providing the Service and improving our AI, as described in this Policy. We advise users not to submit any information they are not comfortable sharing. Any sensitive data you do provide in chats will be handled with care.

How We Use Information

We use the collected information for the following purposes:

• Improving the Services: We use personal data to operate ehko.ai and deliver core features. This includes using your information to create and manage your account, authenticate you when you log in, provide access to chat sessions, and enable Creators to develop and maintain their ehko. The content Creators provide (documents, profile info, etc.) is used to train and customize their ehko’s responses. User messages and inputs are processed by our AI systems to generate replies from the ehko. We also use data to improve our products and the AI models that power the platform. For example, reviewing conversation logs to refine responses or fix issues. Your messages with ehkos may be used to help train, test, and enhance our AI algorithms and features over time. This helps us continually improve response quality and user experience.

• Personalization: We may use your data to personalize the Services for you. For example, remembering your past interactions or preferences to tailor the recommendations an ehko gives, or suggesting relevant content. Creators might receive analytics about user interactions with their ehko (e.g. frequently asked questions or popular topics) and use this to adjust their content or provide better answers.

• Communication: We use contact information to send service-related communications. These include confirmations, receipts or invoices for purchases, important account or security notices, updates about new features, and notifications. If you are a Creator, we may send onboarding information, tips for improving your ehko, or notifications about your subscription and earnings. Marketing: With your consent or as permitted by law, we may send marketing emails about new features, promotions, or insights about ehko.ai. You can opt out of marketing messages at any time by using the unsubscribe link or contacting us (transactional and account-critical emails will still be sent as needed).

• Analytics and Research: Internally, we analyze usage data (like site traffic, chat lengths, conversion rates from free to paid, etc.) to understand and improve our business. We may use third-party analytics tools (such as Google Analytics) which use cookies or similar technologies to help us analyze how users use the site. This helps us identify what is working and what needs improvement.

• Product Development: The chat conversations and questions asked may inform new features or content. We also might anonymize and aggregate chat data for product improvement and marketing. Any marketing use of chat content would be stripped of personal identifiers and used in a manner that does not identify individual users.

• Security and Enforcement: We use data (especially usage and technical data) to maintain the security of our platform, prevent fraud, protect against illegal or unauthorized activities, and enforce our Terms. This includes monitoring for suspicious behavior, diagnosing technical issues, and otherwise ensuring the integrity of our Services. If we detect violations of our Terms or policies, we may use relevant data to investigate and take appropriate action.

• Legal Compliance: We may process and retain personal information to comply with legal obligations, such as maintaining transaction records for financial regulations or responding to lawful requests by public authorities.

How We Share Information

We understand that your information is important. We share personal data in the following circumstances:

• With Service Providers: We share information with third-party service providers and partners who assist us in operating the platform and providing our Services. These providers perform services such as cloud hosting, data storage, AI processing, analytics, email delivery, customer support, and payment processing. For example, to handle subscription payments and payouts, we share the necessary billing information to charge users or pay Creators. We only share the information that each provider needs to carry out its specific function, and they are contractually required to protect your data and use it only for our authorized purposes. Key service providers include payment processors, authentication providers (e.g. Google for login), and infrastructure/IT providers.

• With Creators: If you engage with a Creator’s ehko (for example, by chatting with a Creator’s ehko or subscribing to their content), the Creator will have access to certain information about those interactions. This is necessary to allow Creators to improve their AI’s performance and understand their audience. We do not share personal contact details with Creators unless you have consented or those details are part of your public profile. Note that any personal information you voluntarily include in your chat messages will be visible to the Creator via the chat transcript. Creators are required to treat user chat data as confidential and use it only for improving their content and services in connection with our platform. They are not allowed to separately publish or misuse your personal information.

• With Other Users or the Public: Generally, conversations with an ehko are private (between you, the AI, and the Creator). We do not publish your individual chat logs publicly. However, if you choose to post content in a public area of our Services (for example, community forums or public testimonial/review on a Creator’s profile), then those submissions can be seen by others. Creators may also publish anonymized snippets of conversations or user questions as testimonials or content highlights, but only after removing or altering any personal identifiers (or with the user’s explicit permission). If our platform facilitates any sharing of your conversations at your request (for instance, a “Share this chat” feature), we will share it as directed by you.

• With Integrated Third-Party Services: If we introduce integrations that you choose to connect to your account (for example, a feature to import documents from Google Drive), we will share data with and receive data from those third parties as needed. Such sharing will only occur with your explicit direction or consent. We encourage you to review any third-party integration’s own privacy policies when you connect them to ehko.ai.

• Business Transfers: If ACIAOSA, LLC (ehko.ai) is involved in a merger, acquisition, investment, reorganization, or sale of some or all of its assets, your information may be transferred as part of that transaction. We would ensure the receiving party is bound by privacy obligations consistent with this Policy and inform you of your choices via a notice on our website or other communication.

• Legal and Safety Disclosures: We may disclose personal information when we believe in good faith that such disclosure is necessary to comply with a legal obligation or process (e.g., in response to a court order, subpoena, or law enforcement request). We may also share information if we believe it is necessary to investigate, prevent, or take action regarding potential violations of our Terms of Service, suspected fraud, situations involving potential threats to the safety, rights or property of any person, or as otherwise required by law. In these cases we will only share the data that is reasonably necessary for the purpose (for example, disclosing relevant account records to law enforcement upon a valid request).

• With Your Consent: In any cases not covered above, we will obtain your consent before sharing your personal information with third parties. For example, if we ever want to publicly feature a specific user’s story or quote that includes personal details, we would ask for permission.

We do not sell your personal information to third parties for their own marketing or advertising purposes, and we have not done so in the past 12 months. We also do not share your personal data with third-party advertisers. Any sharing is limited to anonymized, aggregated insights. This means we treat your data with care and only disclose it as needed to serve you or as required by law. If in the future we consider “selling” data (as defined under certain laws) or expanding data sharing in a way that materially affects privacy, we will update this Policy and provide any required opt-in or opt-out mechanisms.

Cookies and Tracking Technologies

We and our service providers use cookies and similar tracking technologies (such as web beacons or local storage) to provide and optimize our Services:

• Operational Cookies: These are essential for the website to function, such as keeping you logged in during a session or remembering your chat history during a visit. Without these, certain features may not work properly. For example, when you sign in, a cookie helps authenticate your session so you can navigate the site securely.

• Preference Cookies: These remember your choices (e.g., your preferred language or interface settings) to provide a more personalized experience.

• Analytics Cookies: We use these to collect information about how users interact with our site, which pages are visited, and any errors encountered. This data helps us improve the design and performance of ehko.ai. We may use third-party analytics tools, like Google Analytics, which set their own cookies. The information collected typically includes device identifiers, browser type, pages visited, time spent, and referring page. The analytics data we receive does not directly identify individuals, and we do not allow these third parties to use it for purposes beyond providing services to us.

• Marketing/Advertising Cookies: We may use marketing and advertising cookies to help promote our Services, improve user engagement, and deliver personalized content or recommendations. These cookies may track your interactions across our site and may be used to measure the effectiveness of marketing campaigns, display tailored product or feature promotions, support Creator-led campaigns and platform growth initiatives, enhance your browsing and subscription experience. We do not permit third-party behavioral advertising or ad networks to serve external ads on ehko.ai. However, we may work with trusted service providers to place cookies that assist with internal advertising, retargeting, and user journey optimization. Where required by law (such as under the GDPR or CCPA), we provide a cookie consent banner and allow users to manage their preferences. You may also control cookies through your browser settings. Use of these cookies is subject to applicable privacy regulations, and we will honor all opt-out or consent mechanisms as required.

• Your Choices: When you first visit our site, you may be presented with a cookie notice or settings. You can typically manage or disable cookies through your browser settings. However, please note that if you disable cookies, some core features of our Services (like staying logged in or remembering that you subscribed) may not work correctly. For analytics specifically, Google provides an opt-out browser add-on if you wish to prevent data from being used by Google Analytics. Do Not Track signals: At this time, we do not respond to “Do Not Track” browser signals, because there is no industry standard for compliance. We treat all user data according to this Privacy Policy and do not alter our data collection when we receive a DNT signal.

Data Security

We are committed to protecting your information. We implement reasonable and appropriate security measures to safeguard personal data against loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit (e.g., TLS for our website), use of secure cloud infrastructure, firewalls, and access controls to limit who in our organization can access sensitive information. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security. You should also take steps to protect your account – for instance, by choosing a strong, unique password and keeping your login credentials confidential. If you suspect any unauthorized access to your account or any security breaches, please notify us immediately. We will investigate and notify users and authorities of data breaches as required by law.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. In general, this means:

• Your Account Data: We keep your profile information, account credentials, and content associated with your account for as long as your account is active. If you delete your account or request deletion, we will remove or anonymize your personal data within a reasonable time after fulfilling any outstanding obligations (for example, settling any subscription term or payouts).

• Chat Data: Transcripts of your conversations with ehkos are stored so that you (and the Creator) can access past interactions and so we can improve service quality. If you delete your account, we will either delete your chat logs or disassociate them from you (anonymize them), unless we need to retain them for legal reasons. Note for Creators: if a user’s data is anonymized or deleted, the Creator may still see an anonymized version of past chat content (e.g., the conversation without a username attached) for analytics purposes, but not identifiable to any deleted user.

• Creator-Provided Content: The documents and information Creators upload to train their ehko will be retained until the Creator removes them or deletes their account. If a Creator account is terminated, we will delete or disable access to their uploaded content and any models specifically derived from it, unless retention is required for legal disputes or legitimate business interests (such as resolving any outstanding payments).

• Transaction Records: We keep payment and subscription records as long as required for accounting and compliance (for example, financial regulations may require retaining transaction history for a number of years).

• Communications: If you contact support or provide feedback, we may retain those communications for a period to ensure we can follow-up properly and improve our services.

• Anonymized Data: We may retain anonymized or aggregated data (which is not personally identifiable) indefinitely for analytics, research, and improvement purposes. For example, overall usage statistics or AI training data that no longer identifies any individual user may be kept to enhance our systems.

Your Privacy Rights

Depending on your jurisdiction (e.g., California, other U.S. states, the European Union, United Kingdom, etc.), you may have certain legal rights regarding your personal information. We are committed to respecting these rights and provide the following information for compliance:

• Rights for California and Other U.S. State Residents: If you are a resident of California or states with similar privacy laws (such as Colorado, Connecticut, Utah, and Virginia), you may have some of the following rights with respect to personal information (subject to certain exceptions and limitations under the law):

  • Right to Know: You can request that we disclose what personal information we collect, use, and disclose about you, including the categories of data, the purposes, and any third parties with whom we have shared it. Much of this is outlined in this Policy, but you can also request more detail or a copy of the specific personal data we have about you.

  • Right to Delete: You can ask us to delete the personal information we have collected from you. Provided we do not have a legal obligation or compelling reason to retain it, we will honor verified requests to delete personal data . (If you have an account, the easiest way to exercise this may be to use any self-service deletion feature, or contact support for assistance). Do note that deleting your data may mean we can no longer provide you Services (for example, you will lose access to your account and any subscriptions).

  • Right to Correct: If you believe that any personal information we hold about you is inaccurate or incomplete, you can request that we correct it. Some information (like your profile details) you can edit directly when logged in, and for other data you can contact us.

  • Right to Data Portability: You may have the right to receive a copy of your personal information in a portable, machine-readable format, and/or to have us transmit it to another service where technically feasible. For example, you might request a copy of all your chat transcripts or profile information. We will assist with such requests as required by law.

  • Right to Opt-Out of “Sale” or “Sharing”: As noted above, we do not sell personal data for monetary value. We also currently do not share data for targeted advertising purposes. If in the future we engage in any practices that are considered a “sale” or “sharing” under California law (such as using advertising cookies), California residents would have the right to opt out. We would provide a “Do Not Sell or Share My Personal Information” link or similar mechanism at that time.

  • Non-Discrimination: We will not discriminate against you for exercising any of these privacy rights. For example, we won’t deny you service or provide a different quality of service just because you made a data request. However, in some cases, exercising a deletion request might mean you can no longer use certain features (since we need your data to provide them).

Rights for EU/UK Residents: If you are located in the European Union, United Kingdom, or similar jurisdictions, you have the following rights under the General Data Protection Regulation (GDPR) or UK GDPR:

• Access: You have the right to request a copy of the personal data we hold about you, and to obtain information about how it is processed.

• Rectification: You can request that we correct any inaccurate or incomplete personal data we have about you.

• Erasure: You can ask us to delete your personal data under certain circumstances (for example, if it’s no longer needed or if you withdraw consent).

• Restriction: You can request that we limit the processing of your data in certain situations, for instance, while we verify a complaint about accuracy or until an objection is resolved.

  • Objection: You may object to our processing of your data where we rely on legitimate interests, including objections to profiling or direct marketing. If you do so, we will re-evaluate our justifications and either cease processing or explain why we have a lawful imperative to continue.

• Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible. This applies to data processed by automated means based on your consent or a contract.

• Withdraw Consent: If we rely on consent for any processing (you will know because we would have asked explicitly), you can withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing already carried out, but it means we will stop the specific activity unless we have another basis to continue. For example, if you consented to receive marketing emails, you can opt out and we will stop sending them.

• Complaint: You have the right to lodge a complaint with a supervisory data protection authority in your country if you believe we have infringed your privacy rights. However, we encourage you to contact us first so we can address your concerns directly.

• Legal Bases: We process personal data of EU/UK users on several legal bases. Primarily, we process data as needed to perform our contract with you (the Terms of Service). For example, to provide the Services you request (this covers most account, chat, and payment data) . We also process data as necessary for our legitimate interests in running and improving our business such as analyzing usage, preventing fraud, improving the AI, and suggesting new features. When we rely on legitimate interests, we take care to consider and balance any impact on your rights. In some cases, we may ask for your consent (e.g. for optional marketing emails or future use of certain cookies). Lastly, we will process data to comply with legal obligations when applicable (such as keeping records for tax purposes or responding to lawful requests).

• International Transfers: Our company is based in the United States, and our Services are primarily hosted and operated in the U.S. If you are outside the U.S., know that your personal data will likely be transferred to and stored on servers in the United States. We will take steps to ensure appropriate safeguards when transferring personal data internationally. By using our Services, you understand that your information may be transferred to our facilities (and those of our service providers) in the U.S. and potentially other countries where data protection laws may differ from those of your jurisdiction. However, we will always protect your data as described in this Policy.

Exercising Your Rights:

To exercise any of these rights, please contact us (see Contact Us below) with your specific request. We will need to verify your identity (and authority, if you are making a request on behalf of someone else) before fulfilling certain requests, which may involve asking you to provide information that matches our records. If we need an extension or cannot comply, we will explain the reason.

Note that certain rights may be limited. For example, we might refuse a request to erase data if we must keep it for legal reasons, or we might not provide data that would infringe on another individual’s privacy rights. If we decline a request, we will explain our reasoning.

Changes to this Privacy Policy

We may modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. If we make material changes, we will provide prominent notice, such as by posting a notice on our website or emailing you (if you have provided an email address) prior to the change becoming effective. Minor changes (for example, clarifications or typographical corrections) may take effect immediately upon posting the updated Policy on our site. We indicate the effective date at the top of the Policy, so please check back periodically to stay informed of any updates. Your continued use of ehko.ai after any changes to this Policy constitutes your acceptance of the updated terms. If you do not agree to a change, you should stop using the Services and may request that we delete your data.

Contact Us

Your privacy is important to us and we welcome your feedback. If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

Email: hi@ehko.ai

Mail: ACIAOSA, LLC (dba ehko.ai) – Privacy Team, P.O. Box 11934, Miami, FL 33101

We will do our best to respond and address your inquiry. We appreciate your engagement with ehko.ai and hope you enjoy creating and engaging with your favorite ehkos!

Own your ehko

Turn content into conversations that drive trust, insights, and sales