Privacy Policy

Effective Date: January 31, 2026

Ginko AI, Inc. ("Ginko," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI collaboration platform and related services (the "Service").

1. Information We Collect

Information You Provide

• Account Information: Email address, name, and password when you create an account
• Profile Information: Optional information such as your organization name, role, and preferences
• Payment Information: Billing details processed securely through our payment provider (Stripe)
• Communications: Information you provide when contacting support or providing feedback

Information Collected Automatically

• Usage Data: How you interact with the Service, including features used and session duration
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and referring URLs
• Cookies: We use cookies and similar technologies to maintain sessions and analyze usage

Project Context Data

Ginko processes context about your development projects to provide our AI collaboration features. This may include:

• Project structure and file metadata
• Sprint and task information you create
• Session logs and handoff notes
• Patterns and architectural decisions you document

Important: By default, your project context is stored locally on your machine. Data is only transmitted to our servers when you explicitly use team collaboration features or sync to the Ginko dashboard.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: With third parties who perform services on our behalf (e.g., payment processing, hosting, analytics)
• Team Members: Project context you explicitly share through team collaboration features
• Legal Requirements: When required by law, subpoena, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us explicit permission

4. Third-Party Services

Our Service integrates with or uses the following third-party services:

• Stripe: Payment processing
• Google Analytics: Usage analytics
• AI Model Providers: To power AI features (prompts are processed but not retained for training)

These services have their own privacy policies governing use of your information.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS) and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure infrastructure hosted on reputable cloud providers

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time. Some information may be retained as required by law or for legitimate business purposes.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request a portable copy of your data
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, contact us at privacy@ginkoai.com.

8. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

9. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have additional rights including the right to lodge a complaint with a supervisory authority. Our legal basis for processing includes contract performance, legitimate interests, and consent where applicable.

10. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Ginko AI, Inc.
Email: privacy@ginkoai.com