Privacy Policy

Last updated: 6 July 2026. This policy explains what personal data Akede (“we”) processes, why, and the rights you have. It is written to align with the UK GDPR, EU GDPR, and equivalent laws (Nigeria NDPA, California CCPA/CPRA, Canada PIPEDA, South Africa POPIA, Brazil LGPD, India DPDP, and others).

Akede is a marketing-content compliance and forecasting platform. For workspace data you upload, you are the data controller and Akede is your data processor. For your own account data (registration, billing), Akede is the controller. Contact: privacy@akede.co.

• Account data — your name, email, and a securely hashed (bcrypt) password. We never store your password in plain text.
• Workspace data — your business/brand details, brand guide, audience segments, products, content you assess, results you record, and your team members’ names, emails and roles.
• Third-party data you direct us to process — the names/handles of competitors and public web mentions, and publicly-available information about creators in your influencer recommendations.
• Usage data — assessments, scans and other actions, kept for your audit register and to meter usage.

We do not use tracking or advertising cookies. The only cookie is a strictly-necessary, httpOnly session cookie to keep you signed in.

• Contract — to provide the service you sign up for.
• Legitimate interests — to secure the platform, prevent abuse, and process competitor/creator information you ask us to analyse (balanced against those individuals’ rights).
• Legal obligation — where retention or disclosure is required by law.

Your content is processed server-side to produce your reviews, forecasts, competitor intelligence and learnings — and to build your audit register. Model calls run through our engine to Anthropic; your content is not used to train shared or public models. Each workspace’s data is isolated per organisation and never shared across tenants.

We use a small number of vetted providers to run the service:

• Anthropic, PBC (USA) — the AI engine that powers assessments, scans and the assistant. Content is sent to generate your outputs only, under Anthropic’s enterprise terms; not used for model training.
• Railway Corp. (USA) — application hosting and the PostgreSQL database that stores your workspace data.
• Google (Workspace SMTP) — transactional email (verification, digests), once enabled.

Some providers are in the United States. Where we transfer personal data outside the UK/EEA (or your local jurisdiction), we rely on appropriate safeguards such as Standard Contractual Clauses / the UK IDTA and the provider’s data-processing terms.

We keep account and workspace data for as long as your workspace is active. Your promotions register / audit trail is retained for 6 years to meet advertising and financial-promotion record-keeping expectations. When you delete your account or workspace, we delete the associated data (backups age out on our provider’s cycle).

Subject to your local law, you can access, correct, export (portability), delete, restrict or object to the processing of your data. Akede gives you self-serve tools in Settings → Privacy & data to export your data and delete your account and workspace. You may also email privacy@akede.co, and you have the right to complain to your data-protection authority (e.g. the UK ICO, Nigeria’s NDPC).

We use HTTPS/HSTS, hashed passwords, httpOnly signed sessions, per-tenant isolation, security headers, rate limiting, and server-side handling of secrets. No system is perfectly secure, but we take reasonable and appropriate measures and will notify affected users and regulators of a qualifying breach without undue delay.

Akede is a business tool and is not directed to children; we do not knowingly collect data from anyone under 16.

We’ll post updates here and, for material changes, notify workspace admins. Questions: privacy@akede.co.