Privacy Policy

Last updated: August 23, 2026

Hakimi Labs Business Analytics (“Hakimi Labs,” “we,” “us,” or “our”), based in Pune, Maharashtra, India, provides the HakimiAI conversational AI platform and related hosted services (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to visitors of hakimilabs.com, businesses that use our Service (“Customers” or “Tenants”), and end users who interact with a chatbot a Tenant has deployed (“End Users”).

1. Information We Collect

1.1 Information you give us directly

Website visitors: name, email address, company, phone number, and message content submitted through our contact form.
Tenants / account users: account and profile information (name, email, role), business data you connect to configure your chatbot (e.g. product catalogs, order data, coupon rules), and content of your interactions with our own AI assistant (the “system agent”) used to manage your account.
End users: messages you send to a chatbot deployed by a Tenant, and basic session metadata (timestamp, channel used).

1.2 Information from connected third-party accounts

Tenants may optionally connect third-party accounts to extend what their chatbot or system agent can do. We only access what is needed to provide the specific feature the Tenant enables, and only for as long as the connection remains active.

Google Analytics (GA4): see Section 2 below — this integration has its own dedicated explanation because of the sensitivity of the data involved.
Google Ads, WooCommerce, and similar commerce/ads platforms: order, product, and coupon data needed to power chatbot actions the Tenant configures (e.g. applying a discount).
Telegram and WhatsApp: messages sent to a Tenant’s connected bot number/account, so the system agent can respond on the Tenant’s behalf.

2. Google Analytics Integration

Hakimi Labs’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

A Tenant may connect their own Google account to let our system agent answer questions about that Tenant’s own Google Analytics 4 property — for example, “how many visitors did we get last week?” or “what are our top landing pages?”

We request the analytics.readonly scope only — read-only access to reporting and account/property metadata. We cannot modify a Tenant’s Google Analytics configuration or data.
The connection is initiated and authorized by the Tenant through Google’s own consent screen. We never see the Tenant’s Google account password.
Analytics data is retrieved on demand to answer the Tenant’s own question in that conversation, and is used solely to generate that response (which may involve sending the relevant data to our AI model provider, Google Gemini, purely to compose the answer). We do not use Google Analytics data for advertising, do not sell it, and do not share it with any party other than the Tenant who owns the connected property.
We store the Tenant’s encrypted OAuth refresh token so the connection can be reused across conversations, and the selected GA4 property ID. We do not store historical Analytics report data beyond what is needed to answer an individual question.
A Tenant can disconnect Google Analytics at any time from their account settings. Disconnecting immediately deletes the stored refresh token and stops all further access.

3. How We Use Information

To provide, operate, and maintain the Service, including generating chatbot responses.
To respond to inquiries submitted through our contact form.
To maintain account security and prevent abuse.
To improve the Service, including monitoring performance and reliability.
To comply with legal obligations.

4. How We Share Information

We do not sell personal information. We share information only with:

Service providers who process data on our behalf under contract, such as our cloud infrastructure and database providers, our AI model provider (Google Gemini), our vector search provider (for retrieval-augmented chatbots), and messaging platforms (Telegram, WhatsApp) a Tenant has connected.
The relevant Tenant — End User conversation data is made available to the Tenant who owns the chatbot the End User spoke with, since that Tenant is the operator of that chatbot.
Legal or safety reasons — if required by law, or to protect the rights, property, or safety of Hakimi Labs, our users, or the public.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to the same protections described here.

5. Data Retention

We retain information for as long as needed to provide the Service and for legitimate business purposes, such as maintaining chatbot conversation history for a Tenant’s reference, complying with legal obligations, and resolving disputes. A Tenant may request deletion of their account data at any time; see Section 7.

6. Data Security

We use industry-standard safeguards to protect information, including encryption of sensitive credentials (such as OAuth refresh tokens) at rest, access controls, and secure transmission (TLS) for data in transit. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Access and correction: Tenants can review and update their account information directly in the platform.
Deletion: you may request deletion of your account or personal information by contacting us at the address below, subject to legal retention requirements.
Revoking connected accounts: disconnect any third-party integration (including Google Analytics) at any time from your account settings, or directly through your Google Account’s third-party access settings.
Marketing communications: contact form submissions are used only to respond to your inquiry; we do not add you to a mailing list without separate consent.

8. Cookies

Our website may use minimal cookies or local storage required for basic functionality (such as our contact form). We do not currently use third-party advertising or tracking cookies on hakimilabs.com.

9. Children’s Privacy

The Service is intended for business use and is not directed at children. We do not knowingly collect personal information from children under 13 (or the relevant age of digital consent in your jurisdiction).

10. International Data Transfers

We are based in India and use service providers that may process data in other countries, including the United States. Where required, we rely on appropriate safeguards for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

Questions about this Privacy Policy or how we handle your data can be sent to info@hakimilabs.com, or by mail to Hakimi Labs, Pune, Maharashtra, India.