01 Who we are
AIM is a product of Hekmalabs. When this policy says “we,” it means Hekmalabs operating AIM. Contact us through the contact form for privacy requests.
02 Information we collect
We collect information you give us, information from the accounts you connect, and information generated when the product runs.
- Account. Name, email address, password hash or Google sign-in identifier, and the projects you belong to.
- Business brief. Website, description, offer, audience, goals, and brand material you enter so agents can work.
- Contact form. Name, email, optional company, and the message you send.
- Connected platforms. When you connect Facebook, Instagram, TikTok, Pinterest, Google Ads, Google Analytics, Google Tag Manager, Meta Pixel, Reddit, or a similar integration, we store the account you select and the tokens needed to read or stage work. Tokens are encrypted. We do not ask for your platform password.
- Agent activity. Prompts, tool calls, reports, and plans the agents produce for your project, plus technical logs needed to run and debug a job.
- Usage. Browser type, coarse log data, and cookie identifiers needed to keep you signed in.
03 How we use it
We use this information to provide AIM, authenticate you, run the agents you ask for, show reports, secure the service, reply to you, and understand whether the product is working. We do not sell your personal information.
04 AI agents and model providers
Agent jobs send the business context needed for the task to an AI model provider (currently via the OpenAI API configured for AIM). That can include your brief, public pages the agent crawled, and metrics pulled for a report. We send what the job needs, not your platform password. Model providers process that content to return the agent’s output. Do not put secrets you would not want in a prompt into a brief.
05 Connected platforms
If you connect an ad or analytics account, AIM exchanges data with that platform so agents can read results and stage work you review. Those platforms process data under their own terms. Disconnecting an integration stops new access. Revoke the app inside the platform as well if you want that platform to drop the grant.
07 How long we keep it
We keep account and project data while the account is open and for a short period afterward so we can finish deletion, resolve a dispute, or meet a legal duty. Agent logs are kept so you can see what a run did. You can ask us to delete a project or account. Backups roll off on their normal cycle.
09 Your choices
You can review and edit business fields in the product, disconnect integrations, and ask us to access, correct, or delete personal information we hold about you. Email us through the contact form from the address on the account. We may need to confirm it is you. Some records may remain where we must keep them for security, tax, or legal reasons.
If the law where you live gives you extra rights — such as objection, restriction, or a complaint to a regulator — you can exercise them by contacting us. We will not discriminate against you for making a request.
10 Security
We use encryption in transit, encrypted storage for integration tokens, and access limited to operating the service. No method of storage is perfect. Tell us if you believe an account has been accessed without permission.
11 Children
AIM is a business product. We do not aim it at children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
12 International processing
We and our providers may process information in countries other than yours, including the United States, where the model provider and hosting may run. Those countries may have different privacy laws. We use the information as this policy describes.
13 Changes
We will post updates on this page and change the date above. If a change is material, we will take extra steps the law requires, such as a notice in the product.
14 Contact
Privacy questions and requests go through the contact form. Hekmalabs operates AIM.