Privacy choices

1. What you can ask us to do

Depending on where you live, your relationship with BKApp.ai, and whether the relevant statutory thresholds are met, you may have some or all of the rights below. Rights and exceptions vary by jurisdiction, and not every right is available to every person.

• Know what personal information we hold about you and how it is used.
• Get a copy of it, in a portable form where that applies.
• Correct information that is wrong.
• Delete information, subject to the exceptions described below.
• Opt out of any sale or sharing of personal information, and of targeted advertising.
• Limit the use of information treated as sensitive under applicable law.
• Appeal a decision we make about your request.
• Be treated no differently for exercising a privacy right.

2. How to make a request

Email privacy@bkapp.ai. That address is the request channel — there is no separate form to complete, and you do not need to be signed in to use it.

Tell us what you are asking for, and which email address or business the request concerns. If you are making a request on behalf of somebody else, say so and describe your authority to act for them.

3. Verifying who you are

We may need to confirm your identity, or an agent’s authority, before acting on a request. What we ask for is proportionate to the request: deleting a financial record needs more confidence than updating a marketing preference.

Verification is not a way of discouraging requests. If we cannot verify you, we will say so and explain what would let us proceed.

4. What happens next, and how long it takes

We acknowledge requests when we receive them, tell you if we need anything else, and answer within the period the applicable law allows.

We do not publish a single deadline in days. Which deadline applies depends on where you live, which statute governs the request, and whether we are acting for ourselves or on behalf of a business customer. A number that looked reassuring here but did not match the law governing your request would be worse than no number, so we tell you the applicable timing when we acknowledge your request.

5. When we may not be able to do what you ask

Some information stays with us after a deletion request. This is not a preference — it is what financial recordkeeping, security, and legal obligations require.

• Financial and accounting records we are required to retain.
• Audit, security, and fraud-prevention records.
• Information under a legal hold, or needed to establish or defend a legal claim.
• Contractual records, and billing records for the applicable accounting period.
• Copies inside backups, until those backups expire on their normal cycle.
• Information about another person that we cannot release to you.

6. Requests about a business, not a person

Where a business uses BKApp.ai to process information about its own employees, guests, vendors, or customers, that business decides how the information is used and we act on its instructions. If your request concerns data held by a business that uses BKApp.ai, contact that business directly. If you contact us instead, we will tell you so rather than acting on data that is not ours to decide about.

7. Things you can do yourself, now

Some choices do not need a request. These are live in the product today:

• Disconnect a bank, card, or other source, which stops future reads from it — Settings, Connections.
• See and manage the AI settings and AI usage for your businesses — Settings, AI and AI usage.
• Change your profile and sign-in details, and manage two-factor authentication.
• See who has access to a business and what their role permits — Settings, Permissions.

8. If you disagree with our decision

Reply to the decision and tell us why. We will reconsider it. Where the law that applies to your request gives you a right to appeal, or to complain to a regulator or attorney general, that right is not affected by anything on this page — and we will tell you how to exercise it.