Privacy

• Your account: your name, email address and password (stored only in hashed form), or your Google identity if you sign in with Google.
• What you put in Karyojan: tasks, projects, documents, collections, calendar events, workflows, chats with the assistant, and files you upload.
• What you connect: if you connect Google (Gmail, Calendar, Drive), GitHub, or a bank account through Plaid, the data you allow the assistant to reach in them. For example, your emails, calendar events, files, repositories, and bank accounts and transactions.
• Your voice, if you dictate: the recording, only while it’s turned into text (see below).
• Billing: your plan and payment status. Stripe handles card details; we never see or store your full card number.
• Technical records: logs such as IP address, browser and errors, and a rough location worked out from your IP address on our own servers, to keep the service secure and working, and so the assistant can give answers that fit where you are.

• To run Karyojan for you, including search across your own content.
• To have the assistant carry out what you ask, and run the workflows you set up.
• To send you messages you need, such as verification, password resets, reminders and notifications.
• To handle payments, prevent abuse, fix problems and meet legal duties.

We do not sell your data, and we do not use it for advertising.

When you use the assistant or a workflow, your request and the content it works with are sent to the AI provider that answers it, such as OpenAI or Anthropic. That can include the earlier messages in the chat, details of the accounts you’ve connected, and your rough location. To make your content searchable by meaning, we also send it to OpenAI when it’s indexed, and your search words when you search. If the assistant searches or reads the web, your search words and the addresses of pages it reads go to our web search provider, Tavily, and pages it opens or previews see the request from our servers. Don’t put anything into a request that you wouldn’t want processed this way.

When you dictate instead of typing, your recording goes through our servers to OpenAI, which turns it into text. We don’t store the recording, and OpenAI receives it only to transcribe it. The text goes wherever you were typing, like anything else you write.

The assistant can also run code in a separated environment on our servers, using the files and data needed for your request.

With a connected account, it can act as well as read when you ask it to or set up a workflow to: for example, send an email, change a calendar event, or work in a GitHub repository.

We share data with the companies that help run Karyojan, for that purpose, and with others only as you direct:

• Amazon Web Services: hosting, file storage, email delivery, and checking the files you upload for viruses.
• OpenAI and Anthropic: the assistant’s answers, and with OpenAI, searching your content by meaning and turning dictation into text.
• Tavily: searching and reading the web.
• Stripe: payments.
• Google, GitHub and Plaid: when you sign in with Google or connect them.
• Google and DuckDuckGo: a website’s address, from our servers, to fetch its small icon when a link is shown.
• People and sites you choose: whoever you have the assistant email, and sites you open from Karyojan, such as a map link.

We may also disclose data if the law requires it, or as part of a sale or merger of the business, in which case this policy continues to protect it.

Karyojan’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We use Google data only to provide the features you ask for, don’t sell it, don’t use it for advertising, and don’t let people read it unless you ask us to, it’s needed for security, or the law requires it. You can disconnect Google in Settings at any time.

We use GitHub data only to provide the features you ask for, and don’t sell it or use it for advertising. You can disconnect GitHub in Settings at any time.

If you connect a bank, we use Plaid to reach it. Plaid handles your bank login, so we never see your bank password. By connecting, you agree that Plaid may process your data under the Plaid End User Privacy Policy.

We receive your account details and transactions from Plaid, and can only read them: Karyojan can’t move your money. When you ask the assistant about your finances, the bank data it reads for that request is sent to the AI provider that answers it. This can be all the data you’ve connected. We don’t sell your bank data, or use it for advertising.

When you disconnect a bank in Settings, we stop using it, ask Plaid to remove the connection (this can take a short while), and take reasonable steps to delete the accounts and transactions we imported from it. Copies can remain for a limited time in backups, and in rare cases in temporary working files left by an interrupted task, until they’re cleaned up. Anything already made from that data stays until you delete it, such as chats, reports, exports and files.

We use a cookie to keep you signed in, and your browser’s storage for things like your theme and display choices. We don’t use advertising or analytics cookies.

• Your content stays until you delete it. Documents you delete go to the trash, and are removed for good when you empty it, or after 30 days.
• Deleting a chat removes it from your chats, but we still hold its record until your account is closed.
• When your account is closed, we delete your content, apart from what we must keep by law, such as billing records, and minimal records needed to show the deletion happened. Backups may hold it for up to 30 days until they’re replaced.

You can see, change and delete your content in the app, and disconnect connected accounts in Settings. To get a copy of your data or close your account, email harsh@karyojan.com. Depending on where you live, you may also have the right to object to or limit how we use your data, and to complain to your local data protection authority.

We take reasonable measures to protect your data: connections between you and Karyojan, and to the companies above, are encrypted, access to your data is restricted, and files you upload are checked for viruses by Amazon Web Services before anyone can open them (a file found to be harmful is blocked). No service is perfectly secure, and we can’t guarantee that your data will never be accessed, changed or lost. If a breach affects your data, we’ll tell you as the law requires. Use a strong password, and tell us at harsh@karyojan.com if you think your account has been accessed.

Your data may be processed in countries other than your own, including wherever our providers operate.

Karyojan isn’t for anyone under 16. If you believe a child has given us data, email harsh@karyojan.com and we’ll delete it.

If we change this policy, we’ll update the date above, and tell you in the app or by email if the change is significant.

Karyojan LLC, 971 US Highway 202N, Ste N, Branchburg, New Jersey 08876, USA. Email: harsh@karyojan.com.