Privacy Policy

Okapi (“Okapi,” “we,” “us”) provides software that helps businesses manage the documents and workflows of international trade transactions. This policy explains what information we collect, why we collect it, and the choices you have. It applies to our website, our application and our related services (together, the “Services”).

2.1 Account information. If your organization uses our application, we store the name, email address, organization, role and settings of each user it invites.

2.2 Customer content. When your organization shares documents and data with us during a pilot or through the application, such as letters of credit, invoices, packing lists, bookings, certificates and related emails, we process that content to provide the Services. Customer content may include information about other people, such as contacts at buyers, banks or carriers. Your organization controls its customer content, and a separate written agreement covers it.

2.3 Demo requests and messages. When you request a demo or write to us, we collect the details you provide, such as your name, work email, company, role and message. Please don’t send confidential trade documents through the website; documents shared during a pilot are covered by a separate written agreement.

2.4 Usage and device information. We collect information about how the Services are used, such as pages visited, features used, session length, IP address, browser type and device information. We use cookies that the site needs to work and stay secure, and privacy-friendly analytics to understand site usage.

• To provide, maintain and secure the Services, including isolating each organization’s data.
• To process customer content as your organization instructs, including extracting information, checking documents against applicable rules and preparing drafts for your approval.
• To communicate with you about demo requests, your account, updates and support.
• To improve the Services. We do not use customer content to train shared models unless your organization agrees in writing.
• To detect and prevent fraud, abuse and security incidents, and to comply with the law.

Some features use artificial intelligence models, including models provided by third parties. We send them only the content needed for the task, under terms that restrict how they may use it. Important results are shown with their source, and consequential actions require a person’s approval.

We do not sell personal information. We share information only:

• With service providers who host, secure, process or support the Services on our behalf, under contracts that limit their use of the information.
• At your direction, for example when you approve a draft for sending to a counterparty.
• For legal reasons, when we believe in good faith that disclosure is needed to comply with the law, enforce our terms, or protect the rights, property or safety of our users or others.
• In a business transfer, such as a merger or acquisition, subject to this policy’s protections.

We keep account information while the account is active. We keep customer content for as long as your organization’s agreement requires and delete or return it when that agreement ends, unless the law requires us to keep it longer. We keep demo requests for up to 24 months.

We use reasonable administrative, technical and physical safeguards, including encryption in transit and at rest and access controls that separate each organization’s data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You may ask to access, correct, export or delete your personal information, and you can opt out of marketing emails at any time. Where customer content belongs to your organization, we will work with its administrator to respond. Residents of California and other states with privacy laws may have additional rights, such as the right to know what we collect and to request deletion. We do not sell or share personal information for cross-context behavioral advertising. To make a request, email adijha@stanford.edu. We will not discriminate against you for exercising your rights.

We are based in the United States. Our service providers may process information in the United States and other countries, with appropriate safeguards.

The Services are for businesses and are not directed to children under 16. We do not knowingly collect their personal information.

We may update this policy from time to time. When we do, we will post the new version here and change the “Last updated” date. We will communicate significant changes by email or in the application.

• Aditya Kumar Jha · adijha@stanford.edu
• Hridank Bhagath · hridank@wharton.upenn.edu