Privacy Policy

Last Updated: June 29, 2026

PractikAI, Inc. ("PractikAI," "Company," "we," "us," or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website at www.practik.ai or any website of ours that links to this Privacy Notice (collectively, the "Site"), engage with our advisory services or technology solutions, or otherwise interact with us in other related ways, including any sales, marketing, or events.

Reading this Privacy Notice will help you understand your privacy rights and choices. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Site and our services.

1. Information We Collect

A. Information You Provide Directly

We collect information you voluntarily provide when you contact us, request a consultation, subscribe to our newsletter, or engage us for services. This may include:

Name, job title, and employer or company name
Business and personal email address
Phone number and mailing address
Information about your company's operations, technology environment, and AI readiness
Content of messages, inquiries, or feedback you send us
Payment and billing information when you purchase services (processed through our third-party payment processor)

B. Information Collected Automatically

When you visit the Site, we may collect certain information through automated means, using technologies such as cookies, web server logs, web beacons, and similar technologies, including:

IP address and approximate geographic location (city/region level)
Browser type, version, and operating system
Pages visited, time spent on pages, links clicked, and referring URLs
Device type and unique device identifiers
Date and time of Site visits

C. Information from Third Parties

We may receive information about you from third parties, including:

Analytics providers (such as Google Analytics and Wix Analytics) that provide aggregate and individual usage data
CRM and marketing platforms (such as HubSpot) that provide insights into site activity and visitor interactions
Social media platforms (LinkedIn, YouTube, X/Twitter, Facebook, Instagram) if you interact with our content or pages on those platforms
Third-party integrations or referral partners who recommend our services

D. Client and Engagement Data

When we deliver advisory services or technology solutions, clients may share with us business data, operational workflows, system documentation, employee information, and other materials necessary to perform the engagement. The handling of such data is governed by the applicable services agreement or statement of work between PractikAI and the client.

2. How We Use Your Information

We use the information we collect for the following purposes:

To respond to inquiries, schedule consultations, and provide customer support
To deliver our advisory services and technology solutions
To process payments and manage billing
To send newsletters, updates, and promotional communications (where you have opted in)
To improve and personalize the Site and our services
To analyze usage trends and measure the effectiveness of our marketing
To develop and improve AI-powered tools and agent workflows
To comply with legal obligations and enforce our agreements
To detect and prevent fraud, security incidents, and other harmful activity
To contact you for business development or follow-up purposes related to your inquiry

We will not use your personal information for any purpose materially different from those stated here without providing notice and, where required by law, obtaining your consent.

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (such as web beacons and pixels) to enhance your experience on the Site, understand how visitors use it, and support our marketing efforts.

Types of Cookies We Use:

Essential Cookies: Necessary for core Site functionality (e.g., session management, form submission).
Analytics Cookies: Help us understand visitor behavior and improve Site performance (e.g., Google Analytics, Wix Analytics).
Marketing/Advertising Cookies: Used to deliver relevant content and track the effectiveness of our marketing campaigns (e.g., HubSpot).
Preference Cookies: Remember your choices and settings to personalize your experience.

You can control cookies through your browser settings or through any cookie consent tool available on the Site. Note that disabling certain cookies may affect Site functionality. To opt out of Google Analytics tracking, you may use the Google Analytics Opt-Out Browser Add-on available at https://tools.google.com/dlpage/gaoptout.

We currently do not respond to Do Not Track (DNT) browser signals, as no uniform industry standard for recognizing and implementing such signals has been established. We will revisit this position if a standard is adopted.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

A. Service Providers

We engage third-party vendors who perform services on our behalf, such as website hosting, email communications, payment processing, customer relationship management (CRM), scheduling tools, and analytics. These providers access your information only as necessary to perform their functions and are contractually prohibited from using it for other purposes.

B. AI and Data Processing Partners

In delivering our technology solutions, we may use AI models and APIs from third-party providers, which may include Microsoft Azure AI, OpenAI, Anthropic, Google Cloud AI, and similar platforms. Where client data or user inputs are processed by these services, we configure such integrations to use zero-data-retention endpoints and/or enterprise API agreements where available. We do not permit AI service providers to use client or user data to train their general-purpose models without explicit consent. Specific AI processing arrangements are described in the applicable client services agreement.

C. Business Transfers

If PractikAI undergoes a merger, acquisition, financing, restructuring, or sale of all or substantially all of its assets, your information may be transferred as part of that transaction. We will notify you via the Site or email if such a transfer occurs and this Privacy Policy changes as a result.

D. Legal Requirements

We may disclose your information if required to do so by law or in good faith belief that such disclosure is necessary to: (i) comply with a legal obligation, court order, or government request; (ii) protect and defend our rights or property; (iii) prevent or investigate possible wrongdoing in connection with our services; or (iv) protect the personal safety of users or the public.

E. With Your Consent

We may share your information for other purposes with your explicit written consent.

5. Artificial Intelligence Products and Processing

PractikAI's core offering involves building and deploying AI-powered solutions. As part of these services:

We develop custom SaaS applications and AI agents that may process client operational data using third-party large language model (LLM) APIs.
We configure AI systems with guardrails including structured tool use, explicit allow-lists, human-in-the-loop checkpoints for material actions, and full audit trails of agent decisions.
Our platform uses model provider abstraction, and we prefer zero-retention API endpoints to minimize data persistence with third-party model providers.
AI-generated outputs may be used to automate or augment logistics workflows. PractikAI does not warrant that AI outputs are free from error, and clients are responsible for reviewing and validating outputs before acting on them in production environments.

If you have questions about how AI processing applies to your engagement, please contact us at privacy@practik.ai.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

Website inquiry and contact data: retained for 5 years after last interaction
Newsletter subscriber data: retained until you unsubscribe or request deletion
Client engagement data: retained for the duration of the engagement and for 7 years thereafter, or as required by applicable law or contract
Analytics data: typically retained for 14 months per provider settings

When information is no longer needed, we will delete or anonymize it. Where deletion is not immediately possible (e.g., data in backup archives), we isolate it from further processing pending deletion.

7. Data Security

We implement appropriate technical and organizational measures designed to protect your information against unauthorized access, disclosure, alteration, or destruction. These measures include:

Encryption in transit using TLS 1.2 or higher
Encryption at rest for stored data
Single sign-on (SSO) with enforced multi-factor authentication (MFA) for platform access
Least-privilege access controls and dedicated per-client data tenancy
Secure software development lifecycle practices, including code review and dependency scanning

Despite these measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and encourage you to use caution when sharing sensitive information online. If you believe a security incident has occurred involving your data, please contact us immediately at privacy@practik.ai.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

Right to Know / Access: Request information about the personal data we hold about you and how it is processed
Right to Rectification: Request correction of inaccurate or incomplete information
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to certain exceptions
Right to Restrict Processing: Request that we limit how we use your data in certain circumstances
Right to Object: Object to processing of your personal data based on legitimate interests or for direct marketing
Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format
Right to Withdraw Consent: Where processing is based on your consent, withdraw it at any time without affecting prior lawful processing
Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights

To exercise any of these rights, contact us at privacy@practik.ai. We will respond within the timeframe required by applicable law (typically 30 days, with a possible extension for complex requests). We may need to verify your identity before processing your request.

A. Additional Rights for Residents of Other Jurisdictions

If you are located outside the United States and your jurisdiction provides additional privacy rights under applicable local law, you may have rights beyond those listed above. To exercise any such rights, please contact us at privacy@practik.ai and indicate your jurisdiction. We will respond in accordance with applicable law.

B. Additional Rights for Canadian Residents (PIPEDA / Quebec Law 25)

If you are located in Canada, your personal information is subject to the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, if you are a Quebec resident, to Quebec's Act respecting the protection of personal information in the private sector (Law 25). Under these laws, you have the right to:

Access the personal information we hold about you and request corrections if it is inaccurate or incomplete
Know the purposes for which your information is collected, used, or disclosed
Withdraw consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice — noting that withdrawal may limit our ability to provide services
File a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca, or with the Commission d'acces a l'information (CAI) if you are a Quebec resident

Quebec residents are also entitled to request the communication or de-indexing of personal information that has been collected about them, to the extent provided under Law 25. To exercise any of these rights, contact privacy@practik.ai. We will respond within 30 days or such other period as required by applicable law.

C. Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), affords you specific rights regarding your personal information. In the past 12 months, we have collected the following categories of personal information: identifiers (name, email, IP address); professional or employment-related information; internet or other network activity; and inferences drawn from the above. We do not sell or share (for cross-context behavioral advertising) your personal information.

California residents have the right to:

Know what personal information we collect, use, disclose, or sell
Access the specific personal information we have collected about you
Request deletion of your personal information, subject to certain exceptions
Correct inaccurate personal information
Opt out of the sale or sharing of personal information (we do not sell personal information)
Limit use and disclosure of sensitive personal information (if applicable)
Non-discrimination for exercising your CCPA rights

To submit a CCPA request, contact us at privacy@practik.ai. Only you, or an authorized agent registered with the California Secretary of State, may make a request related to your personal information. We will respond within 45 days of receipt; if more time is needed (up to 90 days), we will notify you in writing.

California's "Shine the Light" law (Civil Code Section 1798.83) permits California residents to request information once per year about disclosures of personal information to third parties for their direct marketing purposes. To make such a request, contact privacy@practik.ai.

D. Other U.S. State Privacy Laws

Residents of states with applicable consumer data privacy laws may have similar rights to those described above, including rights to access, correct, delete, and opt out of certain processing. To exercise these rights, contact privacy@practik.ai. You may appeal any denial of your request by emailing privacy@practik.ai within 30 days of receiving our response.

C. Other U.S. State Privacy Laws

9. Children's Privacy

Our Site and services are not directed to children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have inadvertently collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a minor, please contact us at privacy@practik.ai.

10. International Data Transfers

PractikAI is based in the United States. If you access our Site or services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. Data protection laws in these countries may differ from those in your country of residence. By using our site or providing us with your information, you consent to this transfer and processing.

11. Third-Party Links

Our Site may contain links to third-party websites, social media platforms, and external resources. These sites have their own privacy policies that we do not control and are not responsible for. We encourage you to review the privacy policies of any third-party site you visit before providing personal information.

12. Email Communications and Marketing

If you subscribe to our newsletter or opt in to marketing communications, we may send you periodic updates about PractikAI news, industry insights, and services. You may unsubscribe at any time by clicking the "unsubscribe" link in any email or by contacting us at privacy@practik.ai. Note that even after unsubscribing from marketing emails, we may still send you service-related communications necessary for an active engagement.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where appropriate, provide notice via the Site or email. Your continued use of the Site or services after the effective date of the revised policy constitutes your acceptance of the changes. We encourage you to review this policy periodically.

14. Governing Law

This Privacy Policy is governed by the laws of Maryland, without regard to its conflict-of-law provisions, except where superseded by applicable data protection law.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us by email at privacy@practik.ai.