Privacy Policy

This Privacy Policy explains how Taku AI Inc., a Delaware corporation with an address at 20289 Stevens Creek Boulevard, Cupertino, California 95014, United States (“Taku,” “we,” “us” or “our”), collects, uses, discloses and protects personal information when you use Taku.

This Policy applies to Taku's websites, desktop and mobile applications, software, APIs, tools, extensions, Taku Browser Bridge, hosted Spaces, Community and Marketplace features, Agents, Skills, Proactive Agent and related services (collectively, the “Services”).

The Services are operated from the United States and are designed and offered primarily for users and businesses in the United States. They are not directed to residents of the European Economic Area, United Kingdom, Switzerland or other jurisdictions where Taku has not offered the Services. If you access the Services from elsewhere, your information may be transferred to and processed in the United States and other locations described in this Policy. Nothing in this Policy limits privacy rights that cannot lawfully be waived.

This Policy should be read with our Terms of Service. The U.S. Data Processing Addendum in Appendix E of the Terms applies when Taku processes Customer Personal Data on behalf of a business or organization.

1. Scope and Important Distinctions

This Policy covers personal information that Taku processes:

• as the business or controller responsible for an individual user's Taku account, subscription, direct use of the Services, website activity, support requests and Community activity; and
• as a processor, service provider or contractor on behalf of a business customer, Space owner or developer that uses Taku to process information about its personnel, customers or End Users.

When Taku processes personal information on behalf of a business customer, that customer determines why and how the information is processed. Its privacy notice also applies, and privacy requests concerning that information should ordinarily be directed to that customer. Our U.S. Data Processing Addendum governs Taku's processing on the customer's behalf.

This Policy does not apply to third-party websites, applications, models, integrations, creators or services that have their own privacy practices. It also does not replace the privacy notice that a user must provide for an application, Agent, Space or website that the user builds or operates through Taku.

2. Age Requirement

You must be at least 18 years old and have reached the legal age of majority where you live to use the Services. A parent or guardian may not authorize a person under 18 to maintain a Taku account.

The Services are not directed to people under 18, and we do not knowingly permit them to maintain accounts. If we learn that a person under 18 has provided personal information through an account, we will take reasonable steps to close the account and delete the information, subject to security, legal and recordkeeping requirements. Contact support@taku.ai with the subject “Underage User Report” if you believe a person under 18 is using the Services.

3. Personal Information We Collect

The personal information we collect depends on the Services and features you use, your settings and permissions, and the information you choose to provide.

3.1 Account, Profile and Organization Information

We may collect your name, email address, username, profile information, authentication information, account identifiers, organization, role, preferences and similar account information. If an organization manages your account, we may receive information from that organization and provide its administrators with access and management capabilities described in the Terms and workspace settings.

3.2 User Content, Inputs and Outputs

We process prompts, instructions, messages, code, documents, images, audio, video, projects, datasets, comments, files and other material you submit to, generate with, host on or publish through the Services. This may include metadata associated with those materials and personal information about you or other people.

User Content may also include Output, Agent Memory, Screen Capture Data, information processed through Taku Browser Bridge, application data, End User data and Community Content. The Terms define the rights and responsibilities that apply to User Content.

3.3 Taku Web App Data

When you use the Taku Web App, we process the prompts, files, messages, settings, Output, Agent Actions and other information you submit or generate through the browser interface. We also process web-session information, feature interactions, uploads and downloads, and information stored through cookies, local storage, caches, service workers and similar browser technologies.

The Web App may access a camera, microphone, location, clipboard, file or other browser-controlled resource only when a feature requests access and your browser or operating system permits it. A file picker or permission grant allows access only within the scope the browser and feature provide; it does not give Taku unrestricted access to your device. Tasks submitted through the Web App may execute in Taku's cloud and may continue after you close the browser tab.

3.4 Taku Desktop Application and Local Device Data

When you install or use the Taku Desktop Application, we may process installation and application version, update channel and status, device and operating-system information, local settings, application lifecycle events, crash data, performance data and security logs.

Depending on the feature and permissions you enable, the Desktop Application may also process selected files and folders; clipboard content when you invoke a clipboard feature; local commands and command output; application or window identifiers; task artifacts; notification, accessibility or command-line interactions; and locally stored settings, logs, caches, models or temporary files. We call this information “Local Device Data.” The Desktop Application does not receive unlimited access merely because an operating-system permission is granted. Taku and Agents may use the permission only for the feature, task or ongoing configuration you enable and as disclosed through the application.

Local Device Data may be processed on your device, transmitted to Taku or a provider, or processed using a combination of local and cloud systems, depending on the feature. The Desktop Application may run approved tasks in the background, start at login if you enable that setting, communicate with connected applications or services, and check for, download or install updates. Screen recording and Proactive Agent processing are subject to the additional rules in Section 5.

3.5 Proactive Agent and Screen Capture Data

If you affirmatively enable the Proactive Agent and grant required device or operating-system permissions, Taku may process:

• screenshots or screen frames from the displays, applications or windows within the scope you select;
• visible text, images, interface elements, notifications and form content;
• application, window or interface identifiers;
• task context, timestamps and interaction signals; and
• suggestions, summaries, observations and Agent Actions generated from that context.

We call this information “Screen Capture Data.” Section 5 explains the specific safeguards and restrictions that apply.

3.6 Taku Browser Bridge Data

Taku Browser Bridge connects your browser to Taku only after you review its disclosure, provide affirmative consent and approve a tab or a tab Taku creates for a task you request. For approved tabs, the Bridge may process the tab URL and title, page content, screenshots, visible form content, console messages, network status and content from sites where you are already signed in. It may click, type, scroll, navigate and submit actions needed for your requested task.

The Bridge does not request or store browser-saved passwords, collect your complete browsing history or silently access unapproved tabs. The extension may store a random local instance identifier, the accepted disclosure version and short-lived tab permissions, grants or leases. It does not store page content or screenshots in browser-extension storage. You can release approved tabs, withdraw consent through the extension or uninstall it.

3.7 Connected Accounts, Credentials and Integrations

If you connect a third-party service, we may receive and process information made available under the permissions you grant, such as an account identifier, profile data, files, messages, calendar entries, repository content or other integration data. We may also process access tokens, API keys, session authorizations or similar credentials needed to operate the connection.

Use the narrowest permission scope available. Disconnecting an integration or revoking a credential prevents future access after the change is processed but does not reverse an Agent Action already completed or require a third party to delete information it independently received.

3.8 Agent Memory, Scheduled Actions and Activity History

If enabled, an Agent may save preferences, summaries, observations and context for use across tasks or sessions. We may also maintain Agent Action history, Scheduled Action configurations, task execution logs and related information needed to execute, audit, troubleshoot, secure or explain those activities.

Where the feature is available, you may inspect, correct or delete Agent Memory and disable future memory creation. In a managed workspace, administrators may be able to access, manage, export or delete organization-related Agent Memory and activity.

3.9 Hosted Applications, Spaces and End User Data

If you create or operate an application, Agent, website or Space through Taku, the Services may process information about your End Users, including identifiers, account information, communications, application records, uploaded content, device information and other data your project collects.

The project operator—not Taku—is responsible for determining what information the project collects, providing an appropriate privacy notice, obtaining required permissions and responding to End User requests. Taku processes Customer Personal Data for the operator under Appendix E of the Terms when the applicable requirements are satisfied.

3.10 Community and Listing Information

If you publish to the Taku Community, we collect the Community Content, Listing description, creator identity or handle, displayed license, version history, permissions, dependencies, pricing or paywall status, ratings, reports, moderation history, installation information and related analytics.

Community Content is public. Other people may view, access, copy, modify or distribute it under the license displayed when it was obtained. Removing Community Content does not necessarily remove copies already obtained or distributed.

The Community does not currently process paid Marketplace Transactions between creators and users. If Taku launches paid Marketplace features, we will provide any additional privacy disclosures and Marketplace Terms before enabling those transactions.

3.11 Payment and Transaction Information

If you purchase a subscription, Credits or another paid Service, we collect billing contact information, plan information, transaction identifiers, purchase history, payment status, tax information and related records. Our payment providers collect and process payment-card or bank information needed to complete the transaction. Taku ordinarily receives only limited payment details, such as card brand, last four digits and expiration date, rather than the complete payment-card number.

3.12 Communications and Support

We collect information you provide when you contact us, report content or security issues, submit a privacy, DMCA or TAKE IT DOWN request, participate in a survey or communicate with us through the Services, email, social media or another channel.

3.13 Device, Usage and Diagnostic Information

We may automatically collect IP address, approximate location derived from IP address, device and browser type, operating system, language, device and account identifiers, pages and features used, timestamps, referring pages, session activity, clicks, errors, crash data, model and resource usage, performance information, security events and related technical logs.

When Taku executes code or tasks in a sandbox or cloud environment, we may process files, code, commands, command output, network requests, execution logs and related environment information needed to provide and secure the task.

3.14 Cookies, Advertising and Similar Technologies

We and our providers may use cookies, pixels, local storage, software development kits and similar technologies to authenticate users, remember preferences, maintain sessions, prevent fraud, measure performance, analyze use, personalize content and, where enabled, support advertising and measure campaigns.

Some third-party advertising or analytics technologies may collect identifiers, device information, website activity, approximate location and interaction information over time and across websites or services. Section 9 explains applicable opt-out rights.

3.15 Information from Other Sources

We may receive information from identity and login providers, organization administrators, users who invite or collaborate with you, connected services, Third-Party AI Providers, service providers, security vendors, analytics and advertising partners, public sources and parties involved in a corporate transaction.

3.16 Derived, Inferred and Feature-Generated Information

We may derive preferences, summaries, classifications, safety signals, fraud indicators, suggested actions, embeddings and other inferences from information processed through the Services. If you use features that transform an image, voice or video, those features may analyze facial, voice or similar characteristics to provide the requested effect.

Taku does not use facial or voice characteristics to uniquely identify or authenticate you unless the feature clearly discloses that use and obtains any separate permission required by law. Where information is regulated as biometric information, we will provide any additional notice, consent and retention practice required for the feature before collection.

4. How We Use Personal Information

We may use personal information to:

• create, authenticate, administer and secure accounts and workspaces;
• provide, host, operate, maintain and support the Services;
• process prompts and generate Output;
• perform Agent Actions and Scheduled Actions you authorize;
• operate the Taku Web App, Taku Desktop Application, Proactive Agent, Taku Browser Bridge, Agent Memory, integrations, hosted projects and Community;
• process payments, administer subscriptions and Credits, and maintain transaction and tax records;
• personalize the Services and remember settings and preferences;
• provide support and respond to privacy, content, security and legal requests;
• communicate service, security, billing, policy and administrative information;
• send marketing communications where permitted and honor opt-outs;
• monitor performance, diagnose errors, allocate capacity and improve reliability;
• detect, investigate and prevent fraud, abuse, malware, unlawful conduct and security incidents;
• enforce the Terms, licenses and other agreements;
• comply with law, lawful requests and legal process;
• establish, exercise or defend legal claims; and
• evaluate, analyze and improve the Services and develop new features, subject to the model-training restrictions and choices below.

5. Proactive Agent, Screen Capture and Sensitive-Data Masking

5.1 Affirmative Enablement and Scope

The Proactive Agent is optional and is off until you affirmatively enable it and grant required device or operating-system permission. Before capture begins, Taku will provide an in-product notice describing the selected capture scope, whether Screen Capture Data is processed locally or transmitted to Taku or a provider, the material purposes and recipients, available retention or deletion controls, and circumstances in which authorized personnel may access it.

When enabled, capture may be periodic or continuous within the displays, applications or windows you select. Depending on your settings, it may continue while Taku runs in the background. The Proactive Agent does not capture microphone input, camera input or system audio unless Taku provides a separate feature, clearly discloses it and obtains any additional permission and consent required.

You can pause or disable screen capture, change its scope and revoke screen-recording permission through your operating-system settings. You are responsible for checking the capture scope and pausing the feature before displaying information you are not authorized to share.

5.2 Purposes and Access

Taku processes Screen Capture Data only to:

• understand context and provide the Proactive Agent;
• generate suggestions, summaries or Agent Memory you request or enable;
• perform Agent Actions you authorize;
• maintain, secure, troubleshoot and support the feature;
• investigate fraud, abuse or security incidents;
• comply with law and enforce the Terms; and
• perform another purpose separately and clearly disclosed to you before the processing begins.

Authorized personnel may access Screen Capture Data only when reasonably necessary for support you request, security or abuse investigation, legal compliance or another purpose disclosed before access. We use service providers and Third-Party AI Providers only as necessary for these purposes and subject them to appropriate contractual restrictions.

5.3 Sensitive-Data Masking

Taku uses automated safeguards designed to detect and mask common sensitive information in Screen Capture Data, which may include passwords, authentication codes, payment-card and financial-account information, government identifiers and other personal information. Masking may occur before the Proactive Agent uses the information and may reduce the accuracy of suggestions or Agent Actions.

Masking is a risk-reduction measure, not a guarantee. Information may be missed, partially visible, inferable from context or captured before a field is recognized. Do not intentionally display passwords, private keys, authentication codes, regulated information or other highly sensitive information to the Proactive Agent.

5.4 Screen Capture Training Restriction

Taku does not use Screen Capture Data, including de-identified or aggregated data derived from it, to train generalized AI models unless you separately and expressly opt in to that specific use. Accepting the Terms, accepting this Policy or failing to submit the general AI-training opt-out described in Section 7 is not consent to use Screen Capture Data for generalized-model training.

5.5 Retention

We retain Screen Capture Data only for as long as reasonably necessary for the enabled feature, settings and purposes disclosed before capture, plus limited security, backup and legal-retention periods. Where the feature offers retention or deletion settings, those controls are described in-product. Disabling capture stops prospective collection after the request is processed but does not reverse an Agent Action already completed.

5.6 Other People's Information

Screen Capture Data may contain information about coworkers, customers, household members and other people. You may enable the feature only on devices, applications and accounts you are authorized to capture. You are responsible for providing legally required notices and obtaining legally required permissions, including permissions required by workplace, confidentiality, recording and monitoring rules.

6. Taku Web App, Desktop Application and Browser Bridge

6.1 Taku Web App

The Taku Web App processes information you submit through the browser and information generated by your interaction with the web interface. Browser storage, cookies, caches and service workers may keep session information, preferences and limited task state on the device. You can clear browser data through your browser settings, but doing so may sign you out or remove local preferences and does not delete information already stored in your Taku account or cloud projects.

When you grant a browser permission, the Web App uses the permitted resource only for the feature you invoke and within the scope controlled by the browser or operating system. The Web App may transmit submitted information to Taku, Third-Party AI Providers and other service providers as necessary to provide the requested feature. Cloud tasks, Agent Actions, deployments and Scheduled Actions may continue after the Web App is closed.

6.2 Taku Desktop Application

The Taku Desktop Application may process Local Device Data only for features, tasks and ongoing configurations you enable; to maintain, secure, update and support the application; to prevent abuse; or to comply with law. You can review and revoke operating-system permissions, disable background or start-at-login operation where available, disconnect integrations and uninstall the application. Revocation or uninstallation applies prospectively and does not reverse an Agent Action already completed or automatically delete information already transmitted to Taku or a third party.

The Desktop Application may retain settings, downloaded models, task artifacts, logs, caches and temporary files locally. Uninstalling the application may not remove every local artifact created outside its application-data directory or information stored in your Taku account. Use available deletion controls and remove remaining local data before transferring or disposing of a device.

Taku does not sell Local Device Data or disclose it for targeted or cross-context behavioral advertising. Ordinary prompts, files and other User Content intentionally submitted through the Desktop Application remain subject to the general product-improvement and AI-training rules in Section 7. Screen Capture Data and Browser Bridge Data receive the stricter protections stated in Sections 5 and 6.3.

6.3 Taku Browser Bridge

Task-relevant Browser Bridge Data passes through Taku Desktop to Taku and necessary providers only to complete your request, maintain security, prevent abuse, provide support and keep the feature reliable.

Taku does not:

• sell Browser Bridge Data or share it for cross-context behavioral advertising;
• use it for personalized advertising, creditworthiness or lending decisions;
• use it to train generalized AI models; or
• permit human review except when you request support or access is reasonably necessary for security, abuse prevention or legal compliance.

Use of information received through Taku Browser Bridge is subject to the Chrome Web Store User Data Policy, including applicable Limited Use requirements.

7. Product Improvement and AI Model Training

Subject to the choices and exclusions below, Taku may use User Content to evaluate and improve the Services, create benchmarks and analytics, and develop or train AI or machine-learning models.

You may opt out of these optional uses at any time, free of charge and regardless of plan, by emailing support@taku.ai with the subject “AI Training Opt-Out.” The opt-out applies prospectively to new training and evaluation uses after we process the request. It does not require removal of information from datasets already created or retraining of models already trained, unless law requires otherwise. It does not restrict processing needed to provide, secure or support the Services, comply with law or enforce the Terms.

Using the Taku Web App instead of the Taku Desktop Application, or vice versa, does not by itself change the general training rule. Ordinary prompts, files and other User Content intentionally submitted through either application are subject to this Section 7. The following restrictions apply regardless of the general opt-out:

• Taku does not use raw or identifiable personal information contained in User Content to train generalized AI models.
• Taku may use information that has been de-identified or aggregated so it cannot reasonably identify you, subject to the opt-out above.
• Browser Bridge Data is not used to train generalized AI models.
• Screen Capture Data is not used for generalized-model training unless you separately and expressly opt in to that specific use.
• Customer Personal Data that Taku processes on behalf of a business or organization under the U.S. Data Processing Addendum is excluded from generalized-model training and optional product-improvement datasets unless that customer gives Taku a separate, express written instruction authorizing the use and the use is permitted by law.

Third-Party AI Providers may process User Content as necessary to generate Output or perform a feature you request. Their processing as Taku's provider is not permission for them to use Customer Personal Data, Browser Bridge Data or Screen Capture Data for their own generalized-model training where Taku has contractually restricted that use.

8. How We Disclose Personal Information

We may disclose personal information to the following recipients for the purposes described in this Policy:

8.1 Service Providers and Third-Party AI Providers

We use providers for AI inference, hosting, compute, storage, database services, content delivery, authentication, payments, communications, support, analytics, monitoring, security, fraud prevention, moderation and other business operations. They may process information only as necessary to perform services for Taku or as otherwise permitted by their agreement and law.

8.2 Connected Services and Actions You Request

We disclose information to a third-party service when you connect it, direct an Agent to interact with it, publish to it or otherwise request the disclosure. The third party's terms and privacy policy govern its independent processing.

8.3 Creators, Skills and Agents

A third-party Skill, Agent or Listing may receive User Content, Agent Memory, Connected Credential access or other information only when the permissions and feature settings allow it. Review the creator, permissions and data disclosures before installation. A creator is independently responsible for processing it controls.

8.4 Organization and Workspace Administrators

Administrators of a managed account or workspace may access, export, retain, restrict, transfer or delete the account and associated information as described in the Terms, organization agreement and workspace settings.

8.5 Community and Public Disclosures

Information you publish to the Community, through a public Space or through another public feature is available to other users and may be indexed, copied, modified or redistributed. Your profile, creator handle, ratings and Listing activity may also be public.

8.6 Advertising and Analytics Partners

Where enabled, we may disclose website and advertising data—such as cookie identifiers, device information, website interactions, approximate location and related inferences—to advertising or analytics partners. Some privacy laws may treat this disclosure as a “sale,” “sharing” or targeted advertising. Section 9 describes applicable opt-out rights.

We do not disclose User Content, Local Device Data, Customer Personal Data, Screen Capture Data, Browser Bridge Data, Agent Memory or Connected Credentials for targeted advertising or cross-context behavioral advertising.

8.7 Legal, Safety and Rights Protection

We may disclose information when we reasonably believe it is necessary to comply with law, legal process or a binding governmental request; protect the rights, safety or property of Taku, users or others; detect or prevent fraud, abuse or security incidents; enforce our agreements; or establish, exercise or defend legal claims.

8.8 Corporate Transactions

We may disclose information in connection with a merger, financing, acquisition, reorganization, bankruptcy, receivership, sale of assets or similar transaction, including during due diligence, subject to appropriate confidentiality protections where applicable.

8.9 With Your Direction or Consent

We may disclose information for another purpose that we explain to you and that you direct or consent to.

9. Sale, Sharing and Targeted Advertising Choices

Taku does not sell personal information for money. As described in Section 8.6, some disclosures of website, cookie, device and advertising information may be considered a “sale” or “sharing” under certain U.S. state privacy laws even when no money changes hands.

You may opt out of sale, sharing and targeted advertising by:

• using the “Do Not Sell or Share My Personal Information” or cookie-preference control made available on the Services;
• enabling a legally recognized browser-based opt-out preference signal, such as Global Privacy Control; or
• emailing support@taku.ai with the subject “Do Not Sell or Share.”

You do not need to create an account to submit an opt-out request. Where required by law, we treat a recognized opt-out preference signal as a valid request for the browser or device sending the signal and, when legally required and technically able to associate the signal with a signed-in account, for that account.

Browser Bridge Data, Screen Capture Data, Local Device Data, Customer Personal Data, User Content, Agent Memory and Connected Credentials are excluded from sale, sharing and targeted advertising.

10. Cookies and Similar Technologies

We use strictly necessary technologies for authentication, security, network management, fraud prevention and core functionality. We may also use optional analytics, personalization and advertising technologies.

Where required, we request consent before using optional technologies. You may manage available choices through the cookie-preference control on the Services and through your browser or device settings. Blocking some technologies may prevent sign-in or cause features and preferences to stop working.

Third parties that control their own cookies or similar technologies may process information under their own privacy policies. Your browser settings and industry opt-out tools may provide additional controls, but they may not affect strictly necessary technologies or information already processed.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining security, resolving disputes, enforcing agreements and complying with legal, tax, accounting and reporting requirements.

Retention depends on the category, sensitivity and context of the information, your settings and deletion requests, whether an account or public Listing remains active, applicable backup cycles, the risk of harm from unauthorized use, and legal requirements. In general:

• account and profile information is retained while the account is active and for a limited period after closure as needed for security, disputes and legal compliance;
• User Content is retained while you store or use it through the Services and is deleted through ordinary deletion and backup cycles after you delete it or close the applicable Service;
• browser storage and cached Web App data remain until they expire or you clear them, while corresponding account or cloud information follows the other retention rules in this Section;
• Desktop Application settings, task artifacts, logs, caches, models and temporary files may remain locally until removed through an available control, expiration, uninstallation or manual deletion, while information transmitted to Taku follows the applicable server-side retention rule;
• Screen Capture Data is retained under Section 5.5 and the notice and controls presented for the feature;
• Browser Bridge Data is retained only as necessary for the requested task, security, reliability and legally required records;
• Agent Memory and activity history are retained until deleted, the related account or workspace is closed, or the applicable retention period expires;
• Community Content and Listing records may remain while published and for reasonable backup, moderation, license-evidence, security and legal periods after removal;
• transaction and billing records may be retained for applicable tax, accounting, fraud-prevention and legal periods; and
• security, fraud, abuse and legal records may be retained for as long as reasonably necessary to protect the Services, users and Taku or comply with law.

Deleted information may remain in restricted backups until overwritten through ordinary cycles. We may retain information longer when required by law, necessary to preserve legal claims or requested by a business customer acting as controller. We may retain de-identified information that cannot reasonably identify you.

12. Security

We maintain reasonable administrative, technical and physical safeguards designed to protect personal information, including access controls, authentication, encryption or equivalent protections where appropriate, monitoring, vulnerability management, secure development practices, incident response and personnel confidentiality requirements.

No system, storage method or transmission is completely secure. You are responsible for protecting your credentials, using appropriately scoped permissions, reviewing integrations and Agent Actions, maintaining backups and avoiding submission of prohibited or unnecessary sensitive information.

If you believe your account or information has been compromised, contact support@taku.ai with the subject “Security Report.” Do not include passwords, private keys, authentication codes or full payment-card information in the report.

13. Your U.S. Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

• confirm whether we process your personal information;
• access or obtain a copy of personal information;
• correct inaccurate personal information;
• delete personal information;
• obtain portable personal information in a usable format;
• opt out of sale, sharing or targeted advertising;
• opt out of profiling used to make decisions producing legal or similarly significant effects;
• limit certain uses or disclosures of sensitive personal information;
• withdraw consent where processing is based on consent;
• appeal a denial of a privacy request; and
• receive equal service and pricing without unlawful discrimination for exercising a privacy right.

To exercise a right, email support@taku.ai with the subject “Privacy Request” and describe the right and information involved. For an appeal, use the subject “Privacy Appeal.” AI-training choices are governed by Section 7, and sale, sharing and targeted-advertising choices are governed by Section 9.

We may need to verify your identity and authority using information reasonably related to your account and request. We will use verification information only for verification, security and legal compliance. If we cannot verify a request, we may ask for additional information or deny the request as permitted by law.

An authorized agent may submit a request on your behalf. We may request evidence of the agent's authority and, where permitted, ask you to verify your identity or confirm the authorization directly. We will respond within the time required by applicable law and explain any denial and available appeal process.

14. California Privacy Notice

This Section supplements the rest of this Policy for California residents and is intended to provide the disclosures required by the California Consumer Privacy Act, as amended (“CCPA”). Terms defined by the CCPA have the same meanings here.

14.1 Notice at Collection

We may collect the following CCPA categories of personal information:

• Identifiers: name, username, email address, account identifiers, IP address, device identifiers and similar identifiers.
• Customer-record information: contact, account, billing and other information described in California Civil Code section 1798.80.
• Commercial information: subscriptions, Credits, transaction history, Community activity and service usage.
• Internet or electronic-network activity: browsing and interaction data, logs, device information, Taku Web App activity, Taku Desktop Application and Local Device Data, Browser Bridge Data, Screen Capture Data and application activity.
• Geolocation information: approximate location derived from IP address and more precise location only when a feature requests it and you permit it.
• Audio, electronic, visual or similar information: User Content, images, audio, video, Screen Capture Data and support materials.
• Professional or employment-related information: organization, role and information included in User Content or managed workspaces.
• Inferences: preferences, summaries, classifications, suggested actions, safety signals and other inferences described in Section 3.16.
• Sensitive personal information: account credentials, contents of communications directed to the Services, precise geolocation if enabled, and information a user chooses to include that may be sensitive under California law.

We collect these categories from the sources described in Section 3 and use them for the purposes described in Sections 4 through 7. Our retention criteria are described in Section 11.

14.2 Disclosure for Business Purposes

During the preceding 12 months, we may have disclosed each category above to service providers, Third-Party AI Providers, organization administrators, connected services and other recipients described in Section 8 for the business purposes described in this Policy.

14.3 Sale and Sharing

During the preceding 12 months, we may have sold or shared—within the CCPA's definitions—identifiers, internet or electronic-network activity, approximate geolocation information and related inferences with advertising and analytics partners for targeted or cross-context behavioral advertising. We do not knowingly sell or share personal information of people under 18.

We do not sell or share User Content, Local Device Data, Customer Personal Data, Screen Capture Data, Browser Bridge Data, Agent Memory or Connected Credentials for cross-context behavioral advertising.

California residents may opt out as described in Section 9. We honor legally recognized opt-out preference signals, including Global Privacy Control, as required by law.

14.4 Sensitive Personal Information

We use and disclose sensitive personal information only as reasonably necessary to provide requested Services; authenticate users; prevent, detect and investigate security incidents; resist fraud or illegal activity; ensure safety; perform short-term transient use; maintain or improve service quality; comply with law; or for another purpose disclosed with any legally required right to limit.

Taku does not use sensitive personal information to infer characteristics about a person for advertising. If we begin a use that creates a California right to limit, we will provide the required notice and control before that use.

14.5 California Rights

California residents may exercise the rights to know, access, correct, delete, opt out of sale or sharing, limit qualifying uses of sensitive personal information and receive non-discriminatory treatment, subject to CCPA exceptions. Requests may be submitted as described in Sections 9 and 13.

15. De-identified and Aggregated Information

We may create and use information that has been aggregated or de-identified so it cannot reasonably be linked to you. We take reasonable measures to maintain de-identified information in that form and do not attempt to re-identify it except to test safeguards or as permitted by law.

The model-training exclusions in Sections 5.4, 6 and 7 continue to apply to Screen Capture Data, Browser Bridge Data and Customer Personal Data as stated there, including where those Sections expressly address de-identified or aggregated information.

16. International Processing

Taku is based in the United States. We and our providers may process information in the United States and other countries where we or they operate. Those locations may have privacy laws different from the laws where you live.

The Services are not currently directed to or marketed to residents of the European Economic Area, United Kingdom, Switzerland or China. If Taku later offers the Services in a jurisdiction requiring an international data-transfer mechanism or jurisdiction-specific disclosure, Taku will provide the required supplemental terms before the regulated processing begins. This statement does not limit a mandatory right that applies despite the Services' U.S. focus.

17. Changes to This Policy

We may update this Policy to reflect changes in the Services, law or our practices. We will post the updated Policy and revise the “Last Updated” date. If a change is material, we will provide additional notice by email, in-product message or another appropriate method before the change takes effect where required.

An updated Policy applies from its stated effective date. Where law requires consent, we will request it. If you do not agree with an update, you may stop using the Services and close your account, subject to information we must retain for legal, security and dispute-resolution purposes.

18. Contact Us

For privacy questions or requests, contact:

Taku AI Inc.
20289 Stevens Creek Boulevard
Cupertino, California 95014
United States
support@taku.ai

Use a clear subject line such as “Privacy Request,” “Privacy Appeal,” “AI Training Opt-Out,” “Do Not Sell or Share,” “Screen Capture Privacy,” “Underage User Report” or “Security Report.”