How your data is protected.

Connecting Gmail lets oka find your direct connections to investors. To do that, we read the To, From, Cc, and Date headers of your messages — who you've been in touch with.

We read message content only while “Read investor replies” is switched on. It is off until you turn it on — we ask you once right after you connect, and you can change it anytime in Settings. While it is on, oka reads investor replies to your outreach, and — where your workspace has Oka's agent switched on — keeps the text of your email conversations with investors on your deals. The text of other mail is never kept, and attachments are never stored. Switch it off and the stored conversation text is deleted. LinkedIn chats have their own switch, “Read LinkedIn chats with investors” — off until you turn it on, and while it is off oka keeps nothing from your LinkedIn chats.

The same switch decides whether Oka Notes, our notetaker, can be used for your investor calls where your workspace has Oka's agent on. It never joins on its own — only a call you turn it on for, after you have told the participants. It keeps a transcript, never audio or video. Switching it off takes Oka Notes off your upcoming calls, unless a teammate (editor) who has it on is invited too; transcripts of calls already held stay with your workspace until it is deleted, you ask us to delete them, or the workspace has been closed for 12 months.

A draft is a draft until you send it. Where your workspace has Oka's agent switched on, oka can send an email or LinkedIn message from your own account — one message at a time, only after you have approved that exact message, and only from an account you have allowed sending from once (withdraw it in Settings anytime).

Your pipeline, notes, matches, and the direct-connection map we build for you belong to your workspace and are never shown to other customers. Every database read is scoped to your workspace before it runs, and our data access is written to fail closed: a query that lacks its workspace scope fails rather than returning someone else's data.

One thing is shared by design: the professional profile of an investor — their name, the fund they work at, their role, and their public LinkedIn — becomes part of oka's collaborative investor graph, so every founder benefits from an accurate map. Direct contact details you import — an investor's email address and phone number — are the exception: they stay private to your workspace and are never shared with other customers. See our privacy policy for the legal basis and how to object or request erasure.

Gmail, Google Calendar, and LinkedIn connect through our EU partner Unipile (France), which holds the authorization — oka never sees your passwords. Older direct Google connections, where they still exist, keep their tokens encrypted at rest with AES-256-GCM, decrypted only in memory to make the calls you authorized.

From Settings → Your data you can disconnect Gmail or LinkedIn (we delete the connection at Unipile and the conversations synced from it), export everything we hold, or delete your account with a 7-day grace window. If your workspace is closed, the workspace owner exports or deletes from the page they see after they sign in. No support ticket, no waiting.

A closed workspace keeps your fund list, pipeline and contacts for your next round. The text of stored conversations with investors, of messages drafted in or sent from oka, and call transcripts are deleted once it has been closed for 12 months without being reopened.