OKMY.AI

Privacy Policy

Effective date: September 5, 2026

This Privacy Policy explains how OKMY.AI (“we,” “us,” or “our”) handles personal information when you use okmy.ai, its website and document tools, and services that expressly link to this policy.

1. Scope and contact

OKMY.AI provides tools for creating websites, working with documents and media, and accessing connected business services. Some connected services, including OKMY.SHOP, U.S. Agents, and ASCBuy, may display the OKMY.AI name during Google sign-in because they use a shared Google authentication project. Their own privacy notices govern their service-specific activities. Sharing a sign-in brand does not make your documents or business records public or automatically available to other users or services.

For privacy questions or requests, contact hey@okmy.ai and identify the service and account involved.

2. Information we collect

• Account information: information provided through sign-in, such as your name, email address, Google account identifier, email verification status, and basic profile information made available with your permission.
• Content you provide: prompts, business details, uploaded files, images, documents, saved designs, and other material you submit to a feature. The information received depends on the feature you use; some editing occurs within your browser.
• Support information: messages, contact details, and screenshots or attachments you choose to send when requesting help.
• Technical information: session identifiers, IP address, browser and device information, request logs, errors, and usage information needed to operate and protect the service.
• Transaction information: where paid features are used, plan, payment status, and transaction references. Payment providers handle payment credentials under their own notices.

3. Google sign-in and Google user data

Our basic Google sign-in requests the openid, email, and profile permissions. We use the resulting information to verify your identity, establish and secure your session, associate your work with your account, and provide account support. We do not receive your Google password. Basic sign-in does not grant access to your Gmail messages, Google Drive files, contacts, or calendars.

If a separate connected feature requests additional Google permissions, its consent screen and applicable notice will explain that access. We do not sell Google user data, use it for personalized advertising, or use it to train generalized artificial intelligence or machine-learning models. Access to Google user data is limited to providing and securing the features you use, authorized support, and legal obligations.

Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements where applicable.

4. How we use information

We use information to operate requested features; create, save, and publish your work at your direction; manage accounts and payments; respond to support requests; diagnose errors; prevent fraud and abuse; and meet legal obligations. Where applicable law requires a legal basis, processing relies on providing the service you request, legitimate interests in operating and securing it, legal obligations, or your consent, depending on the activity.

5. AI features and uploaded content

When you request an AI feature, the prompts, selected files, or other content needed for that request may be sent to the technology providers that process it. Only submit information you are authorized to use. Do not include sensitive information that is unnecessary for the task. Provider processing and retention can vary by the selected feature and provider; this policy does not promise that all uploaded content stays on your device. Google sign-in data is not used as training material for generalized AI models.

6. When information is shared

• Service providers: hosting, storage, authentication, AI processing, payments, and support providers receive information needed for their services.
• At your direction: information is shared when you publish a website, send an attachment, or use a connected service. Published content may be accessible to anyone and indexed by search engines.
• Legal and security purposes: information may be disclosed when reasonably necessary to comply with law, protect rights and safety, or address fraud and misuse.
• Business changes: relevant information may transfer in a merger, acquisition, or business reorganization, subject to applicable protections and notice requirements.

7. Cookies and browser storage

We use cookies and similar browser storage to maintain sign-in sessions, protect authentication, remember preferences such as language, and retain local work or choices. You can manage cookies and site storage through your browser. Clearing them may sign you out or remove locally saved work. Connected or embedded third-party services may apply their own cookie practices.

8. Retention and security

We retain information for as long as reasonably necessary to provide the service, maintain requested work, resolve disputes, protect security, and satisfy legal or accounting obligations. Retention depends on the information and purpose. Deleted information may remain temporarily in backups or records retained for these limited purposes. We use safeguards intended to protect information, but no online service or transmission method can guarantee absolute security.

9. Your choices and deletion requests

You can stop using a service, manage available account settings, and remove OKMY.AI access through your Google Account connections. Removing Google access prevents future access under that authorization; it does not by itself delete information previously saved in our services.

To request access, correction, export, or deletion of your account or personal information, email hey@okmy.ai with the subject “OKMY.AI Privacy Request,” your account email, the relevant service, and the requested action. Do not send passwords or authentication codes. We may verify your identity and will respond within applicable legal deadlines. Certain information may need to be retained for legal, security, or transaction obligations.

Depending on your location and applicable law, you may also have rights to restrict or object to processing, withdraw consent, appeal a decision about a request, or complain to your local privacy authority. We will not discriminate against you for exercising applicable privacy rights.

10. International processing and children

Information may be processed in the United States and other locations where our providers operate. Applicable transfer safeguards will be used where required. The services are intended for adults and authorized business users, and are not directed to children under 13. If you believe a child has submitted personal information, please contact us so we can investigate and address it.

11. Updates

We may update this policy as services or requirements change. We will revise the effective date and provide additional notice when required. Please also review our Terms of Service.