Akadi
← Back to akadi.co

Privacy Policy

Last updated: September 2, 2026

1. What we collect

  • Account data: your email address and name, via our sign-in provider (Clerk).
  • Product data: the website URL you onboard and the public page content we read from it to build your marketing profile.
  • Product media: screenshots and product photos you choose to upload. We discard the raw upload after decoding it, strip metadata, and store a normalized WebP copy for your workspace.
  • Social connections: OAuth tokens for accounts you choose to connect. Tokens are encrypted at rest (AES-256-GCM) and used only to publish content you approved.
  • Tracking-link analytics: when someone clicks one of your video links we log a click ID, timestamp, country, device class, and a salted hash of the IP address. We do not store raw IP addresses.
  • Conversion events: events your own site reports to us (signup, install, purchase value), tied to a click ID.
  • Billing: handled by Stripe. We never see or store card numbers.

2. What we use it for

To run the Service: generate videos, publish to accounts you connected, show you which videos convert, bill your plan, and send you service emails (for example when your first videos are ready, or a weekly performance summary). We do not sell your data or use it for third-party advertising.

3. Who processes data for us

Subprocessors we use to run Akadi:

  • Vercel (hosting), Convex (database and file storage)
  • Clerk (sign-in), Stripe (payments), Resend (email)
  • fal.ai and AI model providers via Vercel AI Gateway (video and text generation)
  • TikTok, Meta, and Google APIs (publishing to accounts you connect)

4. Retention and deletion

  • Click analytics are retained for up to 13 months.
  • You can remove individual product images from your media library. Existing rendered videos retain the image embedded in their MP4.
  • Deleting your account from Settings permanently removes your workspace, videos, uploaded media, links, clicks, conversions, tokens, and owned storage objects — immediately and self-serve.
  • Disconnecting a social account deletes its stored tokens.

5. Your visitors

If you use Akadi tracking links, you are responsible for disclosing analytics to your own site visitors as required in your jurisdiction. Our links log the minimal data described above and never build cross-site profiles.

6. Security

All traffic is encrypted in transit. OAuth tokens are encrypted at rest. Access is limited to what the Service needs to function, and sensitive actions are recorded in an audit log. Uploaded images are size- and signature-checked, decoded in an isolated service, stripped of metadata, bounded by pixel and workspace quotas, and re-encoded before storage.

7. Contact

Privacy questions or data requests: contact@akadi.co