Privacy Policy

This Privacy Policy explains how Oku ("Oku," "we," "our," or "us") collects, uses, and shares information when you use our website, waitlist, and product application (the "Service").

1. Information We Collect

• Account data: authentication identifiers and account email (via Clerk), plan status, onboarding status, and selected interests.
• Workspace data: boards, panel configurations, labels, ordering, and related settings.
• Reading data: saved cards and reader annotations (highlights, notes, quotes, and related metadata).
• Newsletter data: mailbox address, inbound newsletter content (including raw and sanitized formats), sender/publication metadata, and read/archive states.
• Website Watch data: monitored URLs, snapshot settings (viewport/crop/anchor), and rendered images.
• Billing data: subscription/customer identifiers and plan changes from our payment provider (Polar). We do not store full payment card numbers.
• Usage and technical data: service logs, request metadata, and performance/security telemetry generated by our infrastructure and service providers.

2. Cookies and Similar Technologies

We use cookies and similar mechanisms for authentication/session handling, security, and product functionality. The website also uses Plausible Analytics.

3. How We Use Information

• Provide, operate, and secure the Service.
• Authenticate users and manage accounts/subscriptions.
• Render feeds, reader views, website snapshots, and newsletter inboxes.
• Generate and deliver digests and transactional emails.
• Generate AI summaries when requested.
• Improve product quality, monitor reliability, and prevent abuse.
• Comply with legal obligations and enforce our terms.

4. Third Parties and Sharing

We share personal data only as needed to operate the Service, primarily with:

• Clerk (authentication and account session management).
• Polar (subscriptions, checkout, customer portal, and billing events).
• Resend (digest and transactional email delivery).
• Mailgun (inbound newsletter email processing).
• OpenAI (AI summary generation for requested articles).
• Upstash (Redis caching and QStash scheduling, when configured).
• Plausible (website analytics).

We also send user-requested queries to third-party content providers and APIs to fetch requested feed/content data. We may additionally share information when required by law, to enforce our terms, or in connection with a merger, acquisition, or asset sale.

5. Data Retention

We retain account and workspace data while your account is active, unless a longer period is required by law or operational necessity.

• Temporary Website Watch preview images are time-limited and automatically expire.
• Cache entries are retained for limited TTL windows.

6. Security

We use technical and organizational measures intended to protect data, including access controls and network/security safeguards. No method of storage or transmission is completely secure.

7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data. You can delete your account and associated data from the Profile section in the app. For other requests, contact us at [email protected].

8. International Processing

Our providers may process data in multiple countries. Where required, we rely on appropriate safeguards for cross-border transfers.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date.

11. Contact

Questions about this Privacy Policy can be sent to [email protected].