Privacy Policy

1. Who We Are

DKOZAI is a sole proprietorship owned and operated by David Kosloski, doing business as dkozai. We design, build, and operate custom AI systems for our clients' businesses. Each client's systems are built to that client's processes and run on third-party accounts the client owns and authorizes, covering work such as quoting, follow-ups, inbox and message triage, sales research, marketing operations, and back-office workflows. Contact: david@dkozai.com.

2. Information We Collect

We collect and process the following categories of information:

Account and profile information: name, email address, and profile details you provide when you sign in or configure your account.

Google Workspace data (with your explicit consent via OAuth): information from Google services you connect to your account, which may include Gmail messages and metadata, Google Calendar events, Google Drive files, and Google Contacts. We access these only through Google's official APIs and only with the scopes you approve.

Microsoft 365 data (with your explicit consent via OAuth): information from Microsoft services you connect to your account, which may include Outlook mail and metadata, calendar events, and files. We access these only through Microsoft's official APIs and only with the scopes you approve.

Third-party platform data (with your explicit consent): information from other platforms you connect and authorize, which may include Meta (Instagram and Facebook) direct messages and page metrics, and public analytics from platforms whose APIs you authorize. The set of supported platforms changes as the Service evolves, and you control which integrations are active.

Product usage data: interactions with the systems we operate for you, chat history within the Service, dashboard views, and feature usage. This data trains no third-party AI model.

Technical data: IP address, browser type, device information, and log data required to operate the Service.

3. How We Use Your Information

We use the information we collect to:

• Operate the AI systems we have built and run for you.
• Draft responses, summaries, and insights that we surface for your review. We do not send outbound messages, emails, or posts on your behalf without your explicit approval.
• Maintain, secure, and improve the Service.
• Provide customer support.
• Comply with legal obligations.

4. Google API Services User Data Policy (Limited Use)

Our use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide or improve user-facing features that are prominent in the Service.
• We do not transfer Google user data to third parties except as necessary to provide or improve those features, comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
• We do not use Google user data for serving advertisements.
• We do not allow humans to read Google user data unless we have your explicit consent for specific messages, we require it for security purposes such as investigating abuse, we require it to comply with applicable law, or the data has been aggregated and anonymized for internal operations.

5. Subprocessors and Third Parties

To operate the Service, we share information with the following categories of subprocessors under written data-processing terms:

• Anthropic PBC: provides the AI models that power the systems we operate for you. Messages and content sent to the AI are processed under Anthropic's commercial terms. Anthropic does not train its models on data submitted through its API.
• Google LLC: provides authentication and, when authorized, Workspace data.
• Microsoft Corporation: provides authentication and, when authorized, Microsoft 365 data.
• Cloudflare, Inc.: provides infrastructure hosting and data storage.

Separately, when you authorize an integration with a third-party platform, we exchange data with that platform solely for the features you enable. Supported platforms change as the Service evolves and currently include Meta (Instagram and Facebook). You choose which integrations are active and may revoke any of them at any time.

We may add or replace subprocessors as the Service evolves. We will update this section and notify you of material changes before they take effect.

We do not sell your personal information.

6. Data Retention

We retain your data for as long as your account is active. You may request deletion of your data at any time by contacting david@dkozai.com; we will delete your data within 30 days of a verified request, except where retention is required by law or for legitimate security investigation.

7. Your Rights

You may:

• Access the information we hold about you.
• Correct inaccurate information.
• Request deletion of your account and associated data.
• Revoke OAuth authorization at any time via your Google account settings or the equivalent settings on other connected platforms. Revocation immediately terminates our ability to access data from that platform.
• Export your data in a portable format.

To exercise any of these rights, email david@dkozai.com.

8. Security

We implement reasonable technical and organizational measures to protect your information, including encryption in transit, access controls, and isolated per-client data storage. No system is perfectly secure. If we discover a breach affecting your data, we will notify you promptly and in accordance with applicable law.

9. Children

The Service is not directed to individuals under 18. We do not knowingly collect information from children.

10. International Users

The Service is operated from the United States. By using the Service, you consent to the transfer and processing of your information in the United States.

11. Changes to This Policy

We may update this Policy from time to time. We will notify you of material changes by email or through the Service before they take effect. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

12. Contact

Questions about this Policy or our privacy practices:

DKOZAI
Attn: Privacy
Email: david@dkozai.com