1. Overview
Akera is a mail, calendar, and contacts service operated by Akera LLC, a California limited liability company (“Akera,” “we,” “our,” or “us”). We are currently operating Akera as a public beta. This Privacy Policy applies to your use of the Akera website, web application, mobile applications (including Android), and desktop client for Windows and Linux (collectively, the “Service”).
We do not sell or rent your personal information. We do not scan your messages to target advertising at you. We do not embed third-party advertising or analytics trackers in the Akera web client.
2. Who we are
- Controller: Akera LLC, California, United States.
- Privacy contact: privacy@akera.tech
- General contact: help@akera.tech
3. Information we collect
3.1 Information you provide
- Account information: the email username you choose, your chosen password (handled and hashed securely), display name, and (if you subscribe to a paid plan) billing information collected and stored by our payment processor.
- Content you create: the contents of emails you send and receive through Akera, drafts, signatures, contacts you add, calendar events, attachments, folder/label structures, and workflow configurations.
- Support and feedback: any messages you send to support or feedback addresses, including diagnostic information you choose to share.
- Telegram alerts (optional): if you enable Telegram alerts, your Telegram chat identifier and subscription preferences.
3.2 Information collected automatically
- Service logs: IP address, user agent, request timestamps, and high-level error metadata, used to operate, secure, and troubleshoot the Service.
- Mail delivery metadata: SMTP envelope information, message headers, anti-spam / anti-spoofing verdicts (SPF, DKIM, DMARC, virus scan results from delivery), and attachment metadata.
- Device and storage state: cookies and local storage used to keep you signed in and operate the Service in your browser. See section 3.4.
- Push notifications (mobile apps): if you enable notifications, we collect a device push token (for example via Firebase Cloud Messaging on Android) and associate it with your signed-in mailbox so we can deliver new-mail alerts. You can revoke notification permission in system settings at any time.
3.3 What we do not collect
- No third-party advertising or analytics SDKs in the web client.
- No social-login fingerprinting or cross-site behavioural tracking.
- We do not scan email contents to build advertising profiles.
3.4 Cookies and local storage
Third-party websites cannot set cookies in your browser through Akera. Remote content in email, including images, is retrieved by our servers rather than loaded directly from those sites.
We use cookies and browser local storage only as needed to authenticate you and keep you signed in. We do not use them for advertising or cross-site tracking. Because these uses are limited to operating the Service, we do not display a cookie consent banner. A fuller inventory is in the Cookie Policy.
4. How we use your information
We use the information described above to:
- Operate, maintain, and improve the Service (send and receive your mail, sync calendar events, store your contacts, deliver workflows).
- Provide Email AI and Akera Intelligence (writing assistance, thread overview and chat, calendar suggestions, phishing checks on incoming mail, and the Intelligence assistant with its saved chat history), as described in section 5.
- Authenticate you and prevent unauthorized access.
- Detect, investigate, and prevent abuse, fraud, spam, malware, and other security incidents.
- Process payments and provide receipts through Stripe.
- Respond to support requests, legal requests, and feedback.
- Communicate service notices and material changes to this Policy or our Terms.
5. Email AI and Akera Intelligence
Akera includes AI features: an AI writing assistant (Enhance and Smart Reply in the composer), AI email overview and follow-up chat while reading a thread, AI calendar suggestions, automatic checks of incoming mail for phishing, and Akera Intelligence, an assistant you can chat with to search your mailbox, read messages and files, and prepare actions. We call these “Email AI” in this Policy. These features are on by default. You can turn the writing assistant, overview, and calendar suggestions off at any time in Settings → AI. When a feature is off, our servers reject related requests. Akera Intelligence relies on the writing assistant and overview settings, so turning either of them off stops Akera Intelligence from processing your content.
When a feature runs, we send selected mailbox content to inference infrastructure operated by Akera so we can return a draft, a summary, an answer, a safety assessment, or suggested calendar events to you. That content may include truncated plaintext of the message or thread, the subject, sender and date, your instruction or chat turns, and signature context. When you use Akera Intelligence, it may also send to the model the results of searches it runs in your mailbox, the text of messages it opens, your calendar events and contacts it looks up, and text extracted from attachments it reads or files you upload to a chat (and, for images, a small version of the image). Original attachment files are not sent as files, but their extracted content may be.
Enhance, Smart Reply, overview, overview chat, and Akera Intelligence run only when you use them. Calendar suggestions may run automatically while you read a message if the feature is on and the message appears to contain scheduling information. If Email AI is on, we also automatically check incoming messages for phishing as they arrive, using the sender, recipients, subject, links, attachment names, and the first part of the message text. We keep the resulting safety assessment (a short summary and reasons) for up to one year so it can be shown with the message.
Akera Intelligence chat history. Unlike the features above, Akera Intelligence saves your conversations so you can return to them. For each chat we store: the title and preview; your messages; the assistant’s replies; the working steps shown to you, including results the assistant retrieved from your mailbox, calendar, contacts, and attachments (which can contain excerpts of your email); the assistant’s reasoning text; and any files you upload to that chat. This history is stored in our cloud infrastructure in the United States and is associated with your account. Like your mail, it is not end-to-end encrypted, and authorized Akera personnel may access it for the operational, support, security, and legal purposes described in section 9. We use it to show your history and to give the assistant context in later turns of the same chat.
Deleting chats. You can delete a chat, or several at once, from the Akera Intelligence history. Deleting a chat removes its messages and its uploaded files from our active systems. Archiving a chat does not delete it. Turning Email AI off does not delete existing chat history. Chats are kept until you delete them or your account is deleted.
We use Email AI only to provide the result or history to you and to keep the Service secure. We do not use it to target advertising, to build advertising profiles, or to sell or share personal information for cross-context behavioural advertising. Model inference runs on hardware operated by Akera; we do not send your content to a third-party AI model provider. Requests between our servers and that infrastructure are routed through Cloudflare, Inc. for access control and encrypted transport. See Subprocessors.
6. Lawful bases (GDPR / UK GDPR)
If you are in the EEA, UK, or Switzerland, we rely on the following lawful bases under Article 6 of the GDPR:
- Contract: to provide the Service you signed up for.
- Legitimate interests: to secure the Service, prevent abuse, and improve product quality, balanced against your rights and expectations.
- Legal obligation: to comply with applicable laws and lawful requests.
- Consent: where required (for example, optional Telegram alerts or other features you explicitly enable).
8. Data retention
- Mailbox content: retained for as long as your account is active. Items you delete from Trash are removed in the ordinary course of operation. Backups may persist for a short technical period.
- Email AI requests (Enhance, Smart Reply, overview, calendar suggestions): not stored as mailbox items. Completions are returned to the client. Transient processing occurs on our AI infrastructure; short operational logs may be kept for security, abuse prevention, and reliability.
- Akera Intelligence chats and uploads: stored until you delete them or your account is deleted. Deleting a chat removes its messages and uploaded files from our active systems.
- Phishing assessments and categorization feedback: phishing assessments for incoming messages are kept for up to one year; corrections you make to automatic categories (sender and subject) are kept for up to 180 days.
- Billing records: retained for as long as required to meet tax and accounting obligations.
- Service logs: typically retained for a short rolling window for security and debugging.
- Account closure: you can request deletion at any time from Settings → Security in the app, or via the Account Deletion page / privacy@akera.tech. We will delete personal data, including your mailbox content, Akera Intelligence chats and uploaded files, within a reasonable period (typically within 30 days), subject to legal retention obligations and backup cycles.
9. Security
We protect your data with a combination of administrative, technical, and physical safeguards. These include encryption for data in transit and at rest, secure password management, controlled access permissions, and least-privilege access.
Mail stored in Akera is not zero-access or end-to-end encrypted. Authorized Akera personnel can access stored mail content for operational, support, security, and legal purposes. That access is limited and logged. See the Security page for details.
10. International data transfers
Akera operates from the United States, and our primary sub-processors are located in the United States (with cloud infrastructure in standard U.S. regions). If you access the Service from outside the United States, your information will be transferred to and processed in the United States. Where required, we rely on Standard Contractual Clauses or other appropriate transfer mechanisms.
11. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data.
- Request restriction of, or object to, certain processing.
- Request a copy of your data in a portable format.
- Withdraw consent (where processing is based on consent).
- Lodge a complaint with a supervisory authority.
To exercise any of these rights, email privacy@akera.tech. We will respond within the time required by applicable law.
12. California privacy rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”) gives you specific rights:
- Right to know: the categories and specific pieces of personal information we have collected about you.
- Right to delete: subject to certain exceptions.
- Right to correct: inaccurate personal information.
- Right to opt out of sale or sharing: we do not sell personal information for money, and we do not share personal information for cross-context behavioural advertising. There is nothing for you to opt out of in this category, but if that ever changes we will provide a “Do Not Sell or Share My Personal Information” control.
- Right to limit use of sensitive personal information: we only use sensitive categories (such as account credentials and email contents) to provide the Service you signed up for, including the Email AI features described in section 5 unless you disable them in Settings → AI.
- Right to non-discrimination: we will not deny, charge different prices for, or provide a different level of service because you exercised a CCPA right.
Authorized agents may submit requests on your behalf. We may need to verify identity before fulfilling a request. Submit requests to privacy@akera.tech with the subject line “California Privacy Request.”
13. Children
Akera is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it. Parents and legal guardians can contact privacy@akera.tech with concerns.
14. Beta program data handling
While Akera is in public beta, the Service may undergo significant changes, outages, and data-handling improvements. We recommend that you keep your own backups of any data you cannot afford to lose, and that you avoid using the beta Service for regulated workloads (HIPAA, PCI, or similar) until we publish appropriate compliance documentation.
15. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will provide notice through the Service or by email to the address associated with your account. The “Last updated” date at the top of this page always reflects the most recent revision.
16. Contact us
For privacy questions or requests, write to privacy@akera.tech. For general support, write to help@akera.tech.
Akera LLC
California, United States