Privacy Policy

1. Introduction

Langkast(“we”, “us”, or “our”) provides a team AI workspace that gives your organization access to multiple frontier AI models through a single subscription. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have.

This policy applies to our website and to the Langkast application. It does not apply to third-party services you choose to connect, which are governed by their own privacy policies. By using Langkast, you agree to the practices described here.

2. Information We Collect

• Account information — your name, work email address, organization, and authentication details when you or your administrator create an account. If you sign in with Google, we receive your name, email address, and profile image from Google; we never receive your password.
• Content you submit — prompts, messages, files, and other material you send to Langkast, including your conversations with AI models and any knowledge sources your organization uploads.
• Usage data — product interactions, feature usage, approximate location derived from IP address, device and browser information, and server logs, which we collect to operate, secure, and improve the service.
• Cookies and similar technologies — used for authentication, session management, and product analytics. See section 7.

We do not intentionally collect special categories of personal data (such as health, biometric, or government identification data). Please do not submit such information unless your organization has a lawful basis for doing so.

3. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve Langkast.
• Authenticate users, secure accounts, and prevent abuse or fraud.
• Route your requests to the AI model provider you select.
• Respond to support requests and send service-related notices.
• Understand aggregate product usage to guide our roadmap and troubleshoot problems.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use the content you submit to train our own models or those of any third party.

4. Legal Bases for Processing

If you are in the European Economic Area or the United Kingdom, we process personal data on the following legal bases: to perform our contract with you or your organization; our legitimate interests in operating, securing, and improving the service, where those interests are not overridden by your rights; your consent, where we ask for it, which you may withdraw at any time; and legal obligation, where processing is required by law.

5. AI Model Providers

When you send a message or request in Langkast, the relevant content is transmitted to the third-party AI model provider you selected (for example, OpenAI, Anthropic, or Google) through our model gateway, so that provider can generate a response. Each provider processes this data under its own terms and privacy practices.

We select providers that offer enterprise-grade data handling commitments and configure our integrations to limit data retention and to opt out of training on your content wherever the provider offers that option. We cannot, however, control a provider’s independent practices, and you should review the policies of any model you rely on for sensitive work.

6. Data Sharing & Subprocessors

We share data with a limited set of subprocessors who help us operate Langkast:

• Hosting and database — infrastructure providers that run our application and store your data.
• Model gateway (OpenRouter) — routes requests to AI model providers on your behalf.
• Email (Resend) — transactional email delivery, such as password resets and account notifications.
• Analytics (PostHog) — product usage analytics and session replay, configured to mask sensitive input fields and text by default.

We may also disclose information when required by law or valid legal process, to protect the rights, safety, or property of Langkast, our users, or the public, or in connection with a merger, acquisition, or sale of assets — in which case we will notify you before your data becomes subject to a different privacy policy.

We do not share your data with third parties for their own marketing purposes.

7. Cookies & Tracking

We use strictly necessary cookies to keep you signed in and to maintain your session; the service will not function without them. We also use analytics cookies to understand how Langkast is used in aggregate. Most browsers let you block or delete cookies, though blocking necessary cookies will prevent you from signing in. We do not use advertising cookies or cross-site tracking.

8. Data Retention

We retain account and conversation data for as long as your account is active or as needed to provide the service. You may delete individual conversations at any time. When an account or organization is closed, we delete or anonymize the associated data within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Backups are purged on a rolling schedule.

9. Security

We use industry-standard technical and organizational measures to protect your information, including encryption in transit, encryption at rest for stored data, access controls limiting staff access to what their role requires, and ongoing monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and any applicable regulator as required by law.

10. Your Rights & Choices

Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal information; to object to certain processing; and to withdraw consent. Residents of California and certain other US states may additionally have the right to know what personal information we collect and to opt out of its sale or sharing — we do not sell or share personal information as those terms are defined. We will not discriminate against you for exercising any of these rights.

To exercise a right, contact us at the address in section 14. We will respond within the timeframe required by applicable law. If your account was created by your organization’s administrator, that organization may control your data, and we may direct your request to them.

11. Children’s Privacy

Langkast is intended for business use by adults and is not directed to children under 16. We do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it promptly.

12. International Data Transfers

We operate globally, and your information may be transferred to and processed in countries other than your own, including the United States, whose data protection laws may differ from those in your jurisdiction. Where required, we rely on appropriate safeguards, such as the European Commission’s standard contractual clauses, to protect data transferred internationally.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date above. If the changes are material, we will notify account administrators before they take effect. Your continued use of Langkast after changes take effect constitutes acceptance of the revised policy.

14. Contact

Questions about this Privacy Policy, or want to exercise a privacy right? Contact us at support@langkast.com.