Privacy Policy

Who we are

Aibuku connects your product or service to AI assistants. This policy covers our marketing website at aibuku.com, our web app, and the hosted connection that routes AI requests to your systems.

For the purposes of the EU General Data Protection Regulation (GDPR), the data controller is Klevox Studio B.V., Tinnegeiter 4, 3894CA Zeewolde, the Netherlands. For any privacy question, contact us at info@aibuku.com.

Information we collect

We collect the following categories of information:

• Account and waitlist information: your name, email address, and any messages you send us when you sign up, join the waitlist, or get in touch.
• Connected sources: when you connect a Google Calendar, describe a service, import an API specification, or install our GitHub App, we access the information in those sources needed to generate your tools.
• Credentials and tokens: the scoped access credentials or authorization tokens you provide so the connection can reach your systems on your behalf. We store these securely and use them only to operate your tools.
• Request data in transit: when an AI assistant calls one of your live tools, the request passes through our connection to your system. Today this traffic passes through in real time and is not stored.
• Usage and device data: basic technical information about how the website and app are used, such as pages viewed, approximate location, and browser type.
• Cookies and analytics: information collected through cookies and similar technologies, including Google Analytics.

How we use information

We use personal data to:

• Provide, operate, and maintain the service, including generating your tools and routing AI requests to your systems.
• Create and manage your account and waitlist entry.
• Respond to your questions and provide support.
• Keep the service secure, prevent abuse, and troubleshoot problems.
• Understand and improve how the website and product are used.
• Send you service messages and, where you have opted in, product updates.
• Comply with our legal obligations.

Legal bases for processing

Where GDPR applies, we rely on the following legal bases:

• Performance of a contract: to provide the service you sign up for.
• Legitimate interests: to secure, maintain, and improve the service and to communicate with you, where these interests are not overridden by your rights.
• Consent: for optional analytics cookies and marketing messages, where required. You can withdraw consent at any time.
• Legal obligation: where we must process data to comply with the law.

How the connection handles your data

The hosted connection routes requests from AI assistants to your systems using the scoped credentials you provide. A tool can only do what those credentials already allow.

Today, requests pass straight through in real time and we do not store the contents of your customers’ requests or responses. Optional analytics and monitoring features are on our roadmap and, when available, will be opt-in.

When you connect a codebase, we read it only to generate your tools, and only from the repositories you grant access to. We do not read secrets, environment variables, or anything outside those repositories.

Google user data

When you connect a Google account, Aibuku requests access to your Google Calendar so it can run your booking tools. We use this access only to check your availability and to create, reschedule, or cancel bookings your customers make through AI assistants. You can disconnect your Google account at any time, which revokes this access.

Aibuku’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not sell it or share it with others except as needed to provide the service, comply with the law, or as part of a merger or acquisition with appropriate notice.

Sharing and sub-processors

We do not sell your personal data. We share it only with service providers who help us run Aibuku, and only as needed:

• Cloud hosting and infrastructure providers that run our website, app, and connection.
• Google Analytics, for website usage analytics.
• Email and communication providers, to send you service messages.
• The sources you connect, such as GitHub and Google, which you authorize directly and whose own terms and privacy policies apply.

These providers process data on our behalf under appropriate agreements. We may also disclose data where required by law or to protect our rights, our users, or the public.

International transfers

We are based in the Netherlands and aim to keep data within the European Economic Area (EEA). Where a provider processes data outside the EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Data retention

We keep personal data only as long as needed for the purposes described here, or as required by law. Account and waitlist data is kept while your account is active and for a reasonable period afterward. Credentials are kept until you disconnect the source or close your account. Request traffic is not stored.

Security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit and access controls. No method of transmission or storage is completely secure, but we work to protect your information and to limit who can access it.

Your rights

Depending on your location, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at info@aibuku.com.

You also have the right to complain to your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

Cookies and analytics

Our website uses cookies and similar technologies, including Google Analytics, to understand how the site is used and to improve it. You can control cookies through your browser settings. Where required, we ask for your consent before setting non-essential cookies.

Children

The service is not directed to children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will change the “last updated” date above, and for significant changes we will provide additional notice where appropriate.

Contact us

For any question about this policy or your personal data, contact us at info@aibuku.com, or by post at Klevox Studio B.V., Tinnegeiter 4, 3894CA Zeewolde, the Netherlands.