Who we are
This website is operated by Anunnaki Technologies Limited, trading as Aki Labs ("we", "us"), a company registered in England and Wales (company number 15845352), registered office c/o Alexander & Co, Centurion House, Manchester M3 3WR, United Kingdom. We are the controller of the personal data described in this policy.
For any privacy question or request, email hello@akilabs.tech with "Privacy request" in the subject line.
What we collect and why
We keep data collection to the minimum needed to run this website and respond to you.
| Data | When | Why (lawful basis) | How long |
|---|---|---|---|
| Your name, company, email address and message | You contact us by email, including through the contact form (which opens your own email app) | To reply to you and handle your enquiry (legitimate interests; or steps before entering a contract) | Up to 24 months after our last contact, unless we start working together |
| Questions you type into the AI assistant and its answers | You use the "Ask Aki" assistant | To answer your question (legitimate interests) | We do not store conversations on our server. See AI assistant below |
| Technical data: IP address, browser type, pages requested, date and time | Every visit, recorded automatically by our hosting provider | To deliver the site securely and prevent abuse (legitimate interests) | In line with our hosting provider's log retention, typically no more than 90 days |
| Vulnerability reports and related correspondence | You report a security issue | To investigate and fix it, and to credit you if you wish (legitimate interests) | Up to 36 months after the issue is closed |
We do not sell personal data, use it for advertising, or make automated decisions about you that have legal or similarly significant effects.
AI assistant
The "Ask Aki" assistant answers questions about Aki Labs and our work. When you send a message, it travels through our server to Anthropic, the provider of the Claude AI model, which generates the reply. Anthropic acts as our service provider (processor). Under its commercial terms, Anthropic does not use inputs and outputs sent through its API to train its models, and it retains them only for a limited period for purposes such as trust and safety.
Our server does not save or log the content of your conversation. To prevent abuse, our hosting provider (Netlify) uses your IP address to limit how many messages can be sent per minute. Your browser keeps the conversation for the current tab only, and it disappears when you close the tab.
Free security tools
Exposure Check. When you check a domain, our server (hosted by Netlify) looks up its public DNS records and makes a few standard TLS handshakes with that website (including tests for old TLS versions and for post-quantum key exchange) and one ordinary HTTPS request, then sends the results back to your browser. We do not store or log the domain you enter or the results. Our hosting provider, Netlify, keeps short-lived technical logs of each request (for at least 24 hours) and uses your IP address to deliver the service and to enforce a rate limit of a few checks per minute.
Supply-chain Check. The files you choose are read by your own browser and are never uploaded to us. Your browser sends only package names and version numbers to OSV.dev, an open vulnerability database operated by Google, which receives your IP address as part of that request. If your browser cannot reach OSV.dev directly, the same list of names and versions passes through our server to OSV.dev; we do not store or log it, and Netlify keeps only short-lived technical logs of the request. Values from your files, such as Dockerfile settings or file names, are never sent.
PHP2Shell version checker. It runs entirely in your browser; the version you type is not sent to us or anyone else.
You may only check domains you own or are authorised to test. See our terms.
Assessment requests and clients
The assessment request form on our pricing page does not send anything to our website: it opens an email in your own email app. When you email us, we use your name, company, work email and what you tell us about your systems to reply and, if you go ahead, to prepare a proposal and deliver the work (steps before a contract, and the contract itself).
During an assessment we only collect what the agreed scope needs, keep it confidential and stored securely, and delete or return it when the engagement ends, unless the law requires us to keep records such as invoices.
If we contact you about our services
We may occasionally email people at businesses about our services, based on our legitimate interests. Every such email says who we are and how to opt out. Reply "unsubscribe" or email hello@akilabs.tech and we will stop and keep a note so we do not contact you again.
Who we share data with
- Our hosting provider, which stores and serves this website and its logs.
- Our email provider, which stores the messages you send us.
- Anthropic PBC, for the AI assistant, as described above.
- Google (OSV.dev), which receives package names and versions when you use the Supply-chain Check, as described above.
- Professional advisers or authorities, where required by law or to protect our rights.
We do not use Google Fonts, analytics tags, advertising pixels or social media trackers. All fonts on this site are served from our own server.
International transfers
Some providers, including Anthropic, Netlify and Google, may process data outside the UK, for example in the United States. Where this happens, we rely on appropriate safeguards recognised under UK law, such as the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework, as applicable to each provider.
How we protect it
We use HTTPS with HSTS on every page, strict security headers, minimal data collection and access limited to people who need it. No method of transmission or storage is completely secure, but we work to protect your data in line with the standards we help our customers meet.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- ask us to correct or delete it;
- object to, or ask us to restrict, how we use it;
- ask us to transfer it to you or another organisation (data portability).
To make a request, email hello@akilabs.tech. We will respond within one month. If you are unhappy with how we handle your data, please tell us first so we can try to fix it. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
This website does not use cookies. See our cookie policy for details of the small amount of browser storage the AI assistant uses.
Changes to this policy
We may update this policy as our website and services change. The date at the top shows when it was last revised.