Privacy policy

Last updated: October 2026

About this policy

Akamind Inc. ("Akamind", "we") operates akamind.net, Oveyon, Rivva and Akamind Agents. This policy describes what we collect and why. Short version: we collect what the services need to run, and we don't sell it.

Oveyon is our transactional email service. Rivva is our smart links service. Akamind Agents is a platform where AI agents answer a business’s customers by email, with the business’s own team supervising and approving. Its console is at app.akamind.net.

What we collect

• Account data — name, email address, and billing information you provide.
• Service data — for Oveyon: message metadata (sender, recipient, delivery status, timestamps) needed to route and log delivery. Message content is processed for delivery, not mined. For Rivva: click metadata (destination, coarse geography, device class, timestamp) needed to route and report.
• Technical logs — IP addresses, user agents, and request logs kept for security and abuse prevention.
• Website usage data — pages viewed, clicks, device and browser, truncated IP address, collected by Google Analytics 4 on this public site only.

Akamind Agents also collects sign-up information and processes customer content as described below. The information collected for a sign-up request is separate from the emails, attachments and conversations processed for a customer using the platform.

What we don't do

• We don't sell personal data.
• We don’t run advertising scripts on this site. We do run Google Analytics 4 to measure visits and clicks — pseudonymous usage data, no advertising features, not loaded when your browser sends Do-Not-Track.
• We don't use service data to build advertising profiles.

Signing up for Akamind Agents

The sign-up form at app.akamind.net/cadastro collects your company name, your name, your work email and your language. You may also provide your company website, but this is optional.

The form records technical data for security and abuse prevention. This includes your IP address, the country derived from that address by Cloudflare, and your browser (user agent). For IPv6 addresses, rate limits count the /64 block. We also record the date, time and versions of the Terms of Service and Privacy Policy you accepted. This is the consent record.

We use Cloudflare Turnstile for bot protection on the sign-up form. We also run these checks on the email address you provide:

• DNS lookups of the email domain to check whether it receives email.
• Reputation lookups of the email domain and IP address against blocklists, using Cloudflare’s security resolver and Spamhaus.
• A check of whether the domain is a disposable-email domain, using Oveyon, our own service.
• A check of the domain’s registration age through public RDAP registries.

These checks send only the domain name or the IP address — not your name. You confirm your email through a link. A person at Akamind then reviews every request before any account is created. The emails we send for this process have fixed text.

Account security and payments

Passwords are stored only as hashes. When you set a password, we check it against known breached passwords using the Pwned Passwords range service. Only the first 5 characters of the password’s SHA-1 hash leave our servers for this check, never the password.

Payments for Akamind Agents are processed by Stripe on Stripe-hosted pages. Card data goes to Stripe and is never stored by Akamind.

Customer content in Akamind Agents

Akamind Agents processes emails and attachments that a customer’s contacts send to the customer’s mailboxes. It also processes conversation history and the team’s internal notes. Contact email addresses are stored encrypted.

For this content, we process data on behalf of the customer. In the terms used by Brazil’s LGPD, Akamind is the operator and the customer is the controller. Content is processed by AI language models through our AI model provider to read messages and draft replies. The business’s own team supervises the agents and approves their replies, unless it lets them reply on their own for specific topics.

Email for Akamind Agents is sent and received through Oveyon, our own service. Team notifications come from [email protected].

A customer can connect a Google Drive or Dropbox folder to the platform. Its documents become reference material that the agents consult when they reply. This connection runs through Composio, an integration provider operated by Sampark, Inc. in the United States. Composio holds the authorization that the customer grants in Google or Dropbox and retrieves the files for us, under a data processing agreement with Akamind and with zero data retention turned on, so it does not keep the content of these requests. We read only the folder the customer chooses, and only files that can be turned into text. Downloaded files pass through Composio’s temporary storage and are deleted there within about 24 hours. When the customer disconnects the folder, the authorization is deleted at Composio and the folder’s documents are removed from the platform.

The customer chooses how long its content is kept. It can turn on automatic deletion after a number of days. The customer also answers its own contacts’ requests for access, portability, correction and deletion using tools in the platform.

Retention

Delivery and click logs are retained for as long as operationally necessary for troubleshooting, security, and abuse handling, then deleted or aggregated. Account data is retained while the account is active. For Akamind Agents sign-up data, these periods apply:

• Unconfirmed requests expire after 24 hours and are deleted after 7 days.
• Refused requests are anonymized after 90 days. Only the domain, the reason and domain-level checks remain.
• Approved requests are kept while the account exists, as the record of acceptance.
• Anti-abuse logs of attempts are kept for 30 days.

Customer content in Akamind Agents follows the retention period chosen by the customer, including automatic deletion if the customer turns it on.

Sharing

We share data only with processors necessary to operate the services (such as payment processing) and, for this website only, Google LLC for audience measurement (Google Analytics 4, United States, standard contractual clauses) and when legally required. Legal requests must be served at our registered address.

The services and checks described above involve Cloudflare, Spamhaus, public RDAP registries, Pwned Passwords, our AI model provider, Composio (for customers who connect a Google Drive or Dropbox folder) and Stripe. Oveyon, which handles Akamind Agents email and the disposable-domain check, is our own service.

Your rights

You may request access, correction, or deletion of your personal data by writing to [email protected] or [email protected]. We respond within 30 days.

For content that we process on behalf of an Akamind Agents customer, that customer answers its contacts’ requests for access, portability, correction and deletion using the platform’s tools.

Contact

Akamind Inc., 111 NE 1ST 8TH, Miami, FL 33132, United States — [email protected].

Our data protection officer, the Encarregado under Brazil’s LGPD, can be contacted at [email protected].