Privacy Policy

Effective Date: January 31, 2025
Last Updated: August 14, 2026

Table of Contents

1. Scope
2. Information We Collect
3. How We Use Information
4. How We Share Information
5. AI Processing and Customer Responsibilities
6. Data Storage and Security
7. Data Retention
8. Your Rights and Choices
9. Cookies and Analytics
10. International Data Transfers
11. Children's Privacy
12. United States Privacy Rights
13. Updates to This Privacy Policy
14. Contact Information

1. Scope

This Privacy Policy describes how Enki Studios, LLC ("Enki Studios," "we," "us," or "our") collects, uses, shares, and protects personal information when you access or use OpenSpeechAI at openspeechai.com, including its dashboard, AI chat widgets, documentation, and related services (collectively, the "Service").

OpenSpeechAI customers may place a chat widget on their own websites. When we process visitor information through a customer's widget, the customer determines why and how that information is collected. Visitors should also review the privacy notice of the website on which the widget appears.

2. Information We Collect

Account and Authentication Information

When you create or access an account, we may collect your name, email address, profile image, authentication-provider identifier, account creation date, and login information. The Service supports email-based authentication and third-party authentication providers such as Google, GitHub, and Microsoft.

Workspace and Customer Content

We process information that customers submit to the Service, including workspace and agent settings, knowledge-base files, website content, URLs, instructions, internal notes, and other materials used to configure and operate an AI agent.

Conversations, Leads, and Form Submissions

The Service may process chat messages, conversation history, feedback, visitor names, email addresses, captured leads, form responses, visitor-session identifiers, conversation assignments, workflow status, and related activity. The exact information collected through a widget depends on how the customer configures it and how a visitor chooses to interact with it.

Usage and Technical Information

We may collect IP addresses, timestamps, browser and device information, pages viewed, referring pages, approximate location derived from an IP address, feature interactions, diagnostic information, and security events. We use this information to operate, secure, troubleshoot, and improve the Service.

Billing Information

If you purchase a subscription, our payment processor collects and processes payment and billing information. We receive limited transaction information such as subscription status, plan, billing period, and payment status. We do not directly store complete payment-card numbers.

Analytics Information

We use Google Analytics to understand how visitors interact with our website and Service. Analytics information may include device and browser information, pages viewed, referral information, and interaction data.

3. How We Use Information

We use information to:

• Provide, maintain, personalize, and improve the Service.
• Authenticate users and administer accounts and workspaces.
• Process customer content and generate AI-assisted responses, search results, summaries, and analytics.
• Deliver chat widgets, record conversations, capture leads, and process configured forms.
• Process subscriptions and communicate about billing, security, support, and product updates.
• Monitor performance, diagnose errors, prevent fraud and abuse, and protect the Service.
• Comply with legal obligations and enforce our agreements.

We process personal information as needed to perform our contract with customers, comply with legal obligations, pursue legitimate business interests, and obtain consent where required.

4. How We Share Information

We may share information with service providers that help us operate the Service, including providers of cloud hosting and databases, AI models and infrastructure, payment processing, authentication, email delivery, analytics, monitoring, and security services. These providers may process information only to provide services to us and subject to their applicable contractual obligations.

We may also disclose information when required by law; to protect the rights, safety, and security of our users, visitors, company, or others; in connection with a merger, financing, acquisition, reorganization, or sale of assets; or with your direction or consent.

We do not sell personal information for money. We do not use customer conversations or knowledge-base content to train our own general-purpose AI models.

5. AI Processing and Customer Responsibilities

OpenSpeechAI uses third-party AI and infrastructure providers to process customer content and visitor messages for features such as response generation, retrieval, embeddings, summaries, and analytics. Information sent to these providers is limited to what is reasonably necessary to provide the requested feature and is subject to the provider arrangements applicable to the Service.

Customers are responsible for providing appropriate notices on their websites, obtaining any required consent, configuring their agents and forms lawfully, and ensuring they have the necessary rights to upload or process customer content and visitor information through OpenSpeechAI.

6. Data Storage and Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These measures include encrypted network connections, access controls, workspace-based authorization, and monitoring intended to detect abuse and operational issues.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Customers are responsible for protecting their account credentials and promptly notifying us if they suspect unauthorized access.

7. Data Retention

We retain account information and customer content while an account or workspace is active and for as long afterward as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, maintain security, and enforce agreements.

Processed visitor questions and related embeddings used for question and topic analytics are retained for no longer than one year and are removed on a rolling basis. Information may be deleted earlier when the associated source data, workspace, or account is deleted. Limited copies may remain temporarily in backups until they are overwritten through the normal backup cycle.

Retention periods may vary based on the type of information, customer configuration, legal requirements, and whether information is needed to investigate abuse or security incidents.

8. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, restrict, object to the processing of, or obtain a copy of your personal information. You may also have the right to withdraw consent or lodge a complaint with a data-protection authority.

Account holders can update certain information through the Service. To request access, correction, export, or deletion that is not available in the Service, contact us using the information below. Visitors who interacted with a customer's widget should ordinarily direct their request to that customer because the customer controls the relevant workspace and conversation data.

We may need to verify your identity before completing a request. Some information may be retained when required by law or for legitimate purposes such as security, fraud prevention, dispute resolution, and enforcing agreements.

9. Cookies and Analytics

We use cookies and similar technologies for authentication, security, preferences, essential Service functionality, and analytics. Google Analytics may collect information about use of our website and Service. You can control cookies through your browser settings, although disabling essential cookies may prevent parts of the Service from working correctly.

10. International Data Transfers

We and our service providers may process information in the United States and other countries where we or they operate. These countries may have data-protection laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards for international transfers of personal information.

11. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. If you believe a child has provided personal information to us, please contact us so we can take appropriate action.

12. United States Privacy Rights

Residents of certain United States jurisdictions may have additional rights under applicable state privacy laws, including rights to know, access, correct, delete, or obtain a copy of personal information and to receive equal service when exercising those rights. Where these laws apply, you may submit a request using the contact information below.

13. Updates to This Privacy Policy

We may update this Privacy Policy as the Service and applicable laws evolve. We will update the "Last Updated" date and provide additional notice when required by law. Your continued use of the Service after an update takes effect is subject to the revised policy.

14. Contact Information

For privacy questions or requests, contact:

Enki Studios, LLC
Email: shri@openspeechai.com

Last Updated: August 14, 2026