Privacy Policy

Last updated: 19 July 2026

Who we are

Holka ("we", "us") provides an AI assistant that reads across the tools you choose to connect and answers your questions. Holka is operated by Digital Colliers. Contact: [email protected].

What we collect

Account data, your email, name and a hashed password.
Connected-tool data, when you connect a tool (e.g. Gmail, Slack, Airtable), we store the access token needed to read it on your behalf. We access the data only to answer your requests; we do not sell it or use it to train models.
Content you add, chats and files/notes you add to your knowledge base, stored to provide the service.
Usage metadata, message counts and token usage, used for billing and to run the service.

Google user data

If you connect Google services, Holka's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request read-only scopes, use the data solely to provide in-app features you request, do not transfer it except as needed to provide the service, and do not use it for advertising or to train generalized AI models.

How we use data

To operate the assistant (reading your connected tools and answering you), to authenticate you, to bill you, and to keep the service secure and reliable. Answers are generated by large language models we access through our model-routing provider (OpenRouter, which routes to providers such as Anthropic) under their data terms; connected-tool content is sent to the model only as needed to answer your request, and is not used to train their models.

Sharing

We share data only with infrastructure providers that run the service (hosting, database, model provider, payment processor) and only as needed. We do not sell personal data.

Retention & your rights

We keep your data while your account is active. You can disconnect a tool at any time (its token is deleted), remove files from your knowledge base, or delete your account by contacting us, after which we delete your personal data except where retention is legally required.

Security

Data is stored on managed infrastructure with access controls and encryption in transit. Access tokens and other connected-tool credentials are additionally encrypted at rest. No system is perfectly secure, but we take reasonable measures to protect your data.