WikiDu

PRIVACY POLICY

Welcome to WikiDu. We respect your privacy and are committed to protecting personal data in accordance with the Law of Ukraine “On Personal Data Protection” as well as, where applicable, the General Data Protection Regulation (GDPR) of the European Union and other applicable data protection laws.

This Privacy Policy (the “Policy”) describes how we collect, use, store, and protect your personal data during the registration process and while you use WikiDu, including your use of artificial intelligence-powered tools and integrations with external data sources, including Google Drive.

The data owner of the personal data processed under this Policy is Sole Proprietor Sofiia Skulba, Taxpayer Registration Number: 3860002467.

For the purposes of the GDPR, where applicable, Sole Proprietor Sofiia Skulba is the data controller and determines the purposes and means of the processing of personal data.

By using WikiDu, you agree to this Policy.

If you do not agree with this Policy, please refrain from using WikiDu.

COLLECTION OF INFORMATION

We collect and process personal, technical, and other data necessary to operate and improve WikiDu.

The types of information we may collect and process include:

1. Contact Information. When you register with WikiDu, start using a demo version, complete a feedback form, or contact customer support, we may collect your name, email address, and other information that you voluntarily provide. This information is used to manage your account, provide access to WikiDu, respond to your requests, and provide support.

2. Google Drive and Google API Data. If you connect Google Drive to WikiDu, we may receive and process data through Google APIs within the scope you select for use with WikiDu. The categories of data we may process, how such data is obtained, the purposes for which it is processed, and the applicable restrictions on its use are described in detail in the “Use of Google Drive and Google APIs” section of this Policy.

3. Cookies. WikiDu uses cookies and similar technologies. Detailed information about the types of cookies, their purposes, retention periods, and how you can manage them is provided in the Cookie Policy available on the WikiDu website.

4. Communication Records. If you contact WikiDu by email or through other communication channels, we may retain your contact details, communication metadata, and the content of your request to the extent necessary to process your request and provide support. Such data is used only to process your request, provide support, resolve technical issues, or comply with applicable legal requirements.

USE OF GOOGLE DRIVE AND GOOGLE APIs

WikiDu integrates with Google Drive and Google Shared Drives to allow users to connect their own document storage to WikiDu, work with files and folders through the WikiDu interface, search and analyze documents, generate summaries, receive answers to questions, and use other WikiDu features related to working with documents.

1. Connecting Google Drive

Google Drive is connected solely at the user’s initiative.

During the connection process, the user authorizes access through Google OAuth 2.0 and grants WikiDu the permissions necessary to interact with Google Drive.

After successful authorization, the user independently selects, within the WikiDu interface, a specific Google Shared Drive and a specific folder containing the files and subfolders they wish to work with through WikiDu.

After the user confirms the selection, WikiDu may automatically grant its technical Google Service Account wikidu@wikidu.iam.gserviceaccount.com (the “Service Account”) access to the relevant Google Shared Drive through the Google Drive API.

Due to the technical access model of Google Shared Drives, permission for the Service Account may be granted at the level of the entire relevant Shared Drive, even if the user has selected only a specific folder in WikiDu.

Although the technical permission granted to the Service Account may extend to the entire Shared Drive, WikiDu limits the actual reading, synchronization, indexing, modification, and other processing of data exclusively to the folder selected by the user in WikiDu and the files and subfolders within it.

Technical access at the Shared Drive level is used solely to enable the Google Drive integration and does not expand the actual scope of documents processed by WikiDu for the user.

2. Google Drive Data That WikiDu May Process

Within the folder selected by the user, WikiDu may receive and process data necessary to operate the service, including:

WikiDu processes such data only to the extent necessary to provide the functionality used by the user.

3. Purpose of Using Google Drive Data

WikiDu uses information obtained through the Google Drive API exclusively to provide WikiDu functionality.

Such functionality includes connecting the Google Drive folder selected by the user, retrieving and reading documents, synchronizing and indexing their content, searching for information, analyzing documents, generating summaries, generating answers to questions, comparing documents, and managing files and folders through WikiDu Data Manager.

WikiDu does not use Google Drive data for advertising, marketing, retargeting, or other purposes not directly related to providing WikiDu functionality.

The provisions of this Policy concerning advertising, marketing, behavioral profiling, or other similar uses of personal data do not apply to data obtained by WikiDu through the Google Drive API.

4. WikiDu Data Manager

After connecting Google Drive, the user may use WikiDu Data Manager to work with files and folders within the connected scope.

Depending on the available functionality, the user may view and read files and folders, analyze documents, edit, rename, move, organize, and delete files and folders, and use documents to search for information, generate summaries and answers to questions, and perform other processing.

Any modification, renaming, moving, or deletion of files and folders is performed through WikiDu functionality based on actions initiated by the user through the WikiDu interface.

WikiDu does not use the granted access permissions to independently edit, move, rename, or delete files or folders outside the scope connected by the user.

5. Use of Artificial Intelligence and Automated Processing Technologies

WikiDu uses artificial intelligence and automated data processing technologies to analyze documents, search for information, generate answers to questions, create summaries, and provide other functionality related to working with documents.

To provide such functionality, WikiDu may use its own technological infrastructure and/or engage third-party technology service providers.

In such cases, only the data or portions of data necessary to perform the specific function used or requested by the user are processed or transferred.

WikiDu does not use, and does not permit its service providers to use, Google Drive data or data derived from it to create, train, or improve general or non-personalized artificial intelligence or machine learning models.

6. Restrictions on the Use of Google Drive Data

WikiDu does not sell data obtained through the Google Drive API, use it for advertising, retargeting, advertising or marketing profiling, transfer it to data brokers, use it for creditworthiness assessment, or use it for other purposes not directly related to WikiDu functionality.

Such data may be transferred to third parties only to the extent necessary to provide WikiDu functionality used or requested by the user, including to technology service providers, or where necessary for security purposes or to comply with applicable law.

7. Google API Services User Data Policy and Limited Use

WikiDu’s use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. Access to Data by WikiDu Employees and Contractors

WikiDu employees and contractors do not use the contents of user documents for their own purposes and do not routinely conduct manual reviews of such documents.

Human access to such data may occur only where the user has expressly consented to access to specific data for the purpose of resolving a technical support request, where access is necessary to investigate a security incident, fraud, or abuse, where access is necessary to comply with applicable law, or in other circumstances permitted by applicable Google policies.

9. Termination of Access to Google Drive

The user may revoke WikiDu’s OAuth access to their Google Account through the settings of the relevant Google Account.

Because WikiDu may use a Service Account for continued technical interaction with a connected Shared Drive, revoking the user’s OAuth access alone may not terminate access already granted to the Service Account for that Shared Drive.

The user or an authorized administrator of the relevant Google Shared Drive may fully terminate WikiDu’s technical access by removing wikidu@wikidu.iam.gserviceaccount.com from the list of members of the relevant Shared Drive.

After the relevant access is terminated, WikiDu stops receiving new data from that Shared Drive and can no longer perform file operations through the relevant Service Account.

10. Retention and Deletion of Google Drive Data

WikiDu retains data obtained through the Google Drive API and data generated as a result of its processing only to the extent and for as long as necessary to provide the relevant WikiDu functionality.

If the integration is discontinued, the relevant connection is removed, the user’s account is deleted, or WikiDu receives a valid data deletion request, WikiDu deletes the relevant data and the results of its processing, except where further retention is required by law.

Users may also request the deletion of the relevant data by contacting us at info@wikidu.ai.

11. Security of Google Drive Data

WikiDu implements appropriate technical and organizational measures to protect Google Drive data, OAuth authorization, the Service Account, and other technical means of access against unauthorized access, loss, alteration, disclosure, or destruction.

Data transmitted between Google, WikiDu, and technology service providers engaged by WikiDu is transmitted using secure data transmission protocols.

OAuth credentials, Service Account private keys, access tokens, and other technical authorization mechanisms are used exclusively to provide WikiDu functionality and are not disclosed to users or unauthorized third parties.

LEGAL BASIS AND PURPOSES OF PROCESSING

Personal data is processed in accordance with the Law of Ukraine “On Personal Data Protection” and, where applicable, the General Data Protection Regulation (GDPR), only where a lawful basis for such processing exists.

Such legal bases may include the data subject’s consent, the necessity of processing for the performance of a contract, compliance with legal obligations, legitimate interests, and other grounds permitted by applicable law.

1. Account and Communication Data. Processed to create and manage your account, provide access to WikiDu, and communicate with you.

2. User Support and Technical Assistance. Processed to provide assistance, resolve technical issues, and respond to user requests.

3. Google Drive and Google API Data. Processed to enable the Google Drive integration and provide the relevant WikiDu functionality. The specific purposes, scope, and restrictions applicable to such processing are described in the “Use of Google Drive and Google APIs” section of this Policy.

4. Artificial Intelligence and Automated Processing. Data may be processed using artificial intelligence technologies and other automated systems to provide WikiDu functionality used or requested by the user. The processing of Google Drive data using such technologies is described in the “Use of Google Drive and Google APIs” section of this Policy.

5. Analytics and Cookies. Device data, browser type, usage statistics, and navigation paths may be processed to analyze the operation of WikiDu and improve its functionality, structure, and content.

Optional cookies, including analytical cookies, are used only with your consent. You may withdraw your consent at any time through the cookie settings.

6. Security and Fraud Prevention. IP addresses, access logs, session metadata, and other necessary technical data may be processed to protect WikiDu and its integrations with external services against unauthorized access, fraud, abuse, and other security threats.

SHARING OF DATA

We do not sell, rent, or trade your personal data. Information may be shared with third parties only in the circumstances described below and in accordance with applicable law.

1. Service Providers. We may share personal data with third-party service providers whose services are necessary for the operation of WikiDu, including:

The sharing and use of data obtained through Google APIs are governed separately by the “Use of Google Drive and Google APIs” section of this Policy.

2. Disclosure Required by Law. We may disclose information where expressly required by applicable law or pursuant to a lawful and binding request from a court, law enforcement authority, regulatory authority, or other competent authority.

RETENTION OF PERSONAL DATA

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy or for the periods required by applicable legal, regulatory, or tax requirements.

Retention periods depend on the nature of the data and your interaction with WikiDu:

1. Account and Contact Data. Personal data provided during registration or communication, including your name, email address, and messages, is retained for as long as necessary to maintain your account, process your request, or communicate with you further.

If your account is deleted or a valid deletion request is received, such data will be securely deleted unless further retention is required by law.

2. Google Drive Data and Derived Data. Information obtained through the Google Drive API and the results of its processing are retained only for as long as necessary to provide the relevant WikiDu functionality.

3. Email Correspondence and Support Requests. Communications relating to support requests may be retained to process such requests and improve WikiDu. You may request the deletion of such records unless their retention is required by law.

4. Cookies and Browsing Data. Session cookies are deleted when you close your browser. Persistent and analytical cookies are retained for the periods specified in the applicable cookie settings and may be deleted through your browser settings or cookie management panel.

5. Chat History. When using the AI assistant, your chat history may be retained in your account for as long as your account remains active. You may delete your chat history through the relevant WikiDu functionality or by contacting customer support.

6. Blocked and Inactive Accounts. If an account is blocked due to non-payment, we may retain the data associated with it, including chat history, for up to 6 (six) months, after which such data may be permanently deleted in accordance with the WikiDu Terms and Conditions.

7. Retention for Legal or Regulatory Purposes. Certain categories of data may be retained for a longer period where necessary to comply with legal requirements, protect our rights and legitimate interests, or resolve disputes.

Where data is no longer necessary for the purposes for which it was processed and there is no legal basis for further retention, we delete or appropriately anonymize such data.

YOUR PRIVACY RIGHTS

In accordance with the Law of Ukraine “On Personal Data Protection” and, where applicable, the GDPR, you have the following rights:

1. Right to Information and Access. You have the right to obtain information about the processing of your personal data, confirmation as to whether your personal data is being processed, and access to your personal data.

2. Right to Rectification. You have the right to request the correction or update of inaccurate, incomplete, or outdated personal data.

3. Right to Erasure. You may request the deletion or destruction of your personal data where its processing is unlawful, the data is no longer necessary for the specified purposes, or in other circumstances provided by applicable law.

4. Right to Restriction of Processing. In circumstances provided by applicable law, you may request the restriction of the processing of your personal data.

5. Right to Withdraw Consent. Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

6. Right to Object. You have the right to object to the processing of your personal data in circumstances provided by applicable law.

7. Right to Lodge a Complaint. You have the right to lodge a complaint regarding the processing of your personal data with the relevant competent authority or a court. The scope and conditions for exercising these rights may depend on your jurisdiction and applicable data protection law.

To exercise your rights, you may contact us using the contact details specified in this Policy. We will process your request within the time limits prescribed by applicable law.

PERSONAL DATA SECURITY AND DATA BREACH NOTIFICATION

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, misuse, alteration, disclosure, or destruction.

Such measures include, where appropriate, access control systems, encryption, and secure data processing procedures.

Security measures applicable to Google Drive data and means of access to Google APIs are described in the “Use of Google Drive and Google APIs” section of this Policy.

In the event of a personal data breach, we will conduct an appropriate assessment and, where required by applicable law, notify affected users and/or the relevant competent authorities within the time limits prescribed by applicable law.

PRIVACY BY DESIGN AND BY DEFAULT

We apply the principles of Privacy by Design and by Default by integrating personal data protection into the development and operation of WikiDu.

Our commitments include:

1. Data Minimization. We collect and process only the data necessary to provide the relevant WikiDu functionality.

2. Purpose Limitation. Personal data is used only for the purposes for which it was obtained and in accordance with this Policy.

3. Access Limitation. Personal data and the content of user documents are not publicly accessible. Access is restricted according to WikiDu’s functional, technical, and security requirements.

4. Security Measures. We implement technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction.

ELECTRONIC COMMUNICATIONS

WikiDu may use the contact details you provide to communicate with you in connection with your use of WikiDu, respond to your requests, and, where you have provided the relevant consent, send marketing communications.

1. Communications in Response to Your Request. If you provide your contact details through a form on the WikiDu website (for example, to receive support or information about the product), we may contact you to respond to your request. Such communications are made in response to your request and do not require separate marketing consent under applicable law.

2. Voluntary Marketing Communications. We may send marketing or promotional emails only where you have provided your explicit consent, for example, by subscribing to a mailing list or selecting an option to receive updates.

You may withdraw your consent at any time by using the unsubscribe link in the relevant communication or by contacting us directly.

CHANGES TO THIS PRIVACY POLICY

We may periodically update this Policy due to legal, technical, functional, or other changes in the operation of WikiDu.

We will notify registered users of updates to this Policy using the contact details provided during registration.

The current version of this Privacy Policy is published on WikiDu, together with the date of its most recent update.

LANGUAGE VERSIONS

This Policy is available in Ukrainian and English.

If there is any discrepancy between versions, the Ukrainian version shall prevail for users located in Ukraine, unless otherwise required by applicable law.

For international users, the English version shall be the authoritative version.

CONTACT US

If you have any questions, requests, or inquiries regarding this Policy, the processing of your personal data, or the exercise of your rights, please contact us at info@wikidu.ai.

Effective Date: September 18, 2026