Privacy Policy

1. Who we are

Skedari is developed and operated by AXII L.L.C ("Axii", "we"), a company registered in the Republic of Kosovo.

2. Our role: controller and processor

This distinction matters, because it determines who you contact for what.

If you are a client of a firm that uses Skedari and want to know what that firm holds about you, the request must go to the firm, not to us. We cannot disclose or delete a firm's content without the firm's instruction.

3. The data we process

3.1 Account data

Name, email address, role within the firm, and permissions. We need these to create access, enforce permissions, and communicate with you.

3.2 Content you upload

Documents and their versions, emails you choose to archive from Outlook or Gmail, client and matter data, and scans from the mobile app. This content belongs to your firm.

3.3 Billing data

Plan, seat count, workspace and AI-unit configuration, payment history, and invoices. We do not see or store your card number. Payments are processed by Paysera. When you enable auto-renewal, we store only a reusable token from Paysera, encrypted in our database; it cannot be used outside Skedari.

3.4 Technical and audit data

Access logs, the time and type of actions in the workspace, IP address, and basic device information. These serve security, troubleshooting, and the audit trail that your firm sees inside the product.

4. Why we process it and on what legal basis

• To perform the contract — providing the workspace, billing, support.
• Our legitimate interest — keeping the service secure and stable, preventing abuse, and improving the product.
• Legal obligation — retaining financial and tax records.
• The controlling firm's instruction — for all content the firm keeps in Skedari.

We do not sell your content, do not use it for advertising, and do not use it to train artificial-intelligence models.

5. Skedari AI

Skedari AI is an optional feature. If your firm does not buy AI units, no content is sent to any language-model provider.

When you use it, this is what happens:

• Your question, the conversation history, and the relevant portions of the documents, emails, clients, and matters that the assistant reads in order to answer are sent to OpenRouter, which routes them to an OpenAI language model hosted by Microsoft Azure. Skedari restricts this routing to Azure endpoints that OpenRouter identifies as supporting Zero Data Retention.
• The assistant respects the permissions of the user asking — it cannot read or reveal content that the person is not entitled to see.
• If web search is enabled, a model-generated search query is sent to Exa through OpenRouter to retrieve public-web results. Your documents are not sent directly to Exa.
• Conversations and cited sources are stored in your firm's workspace so you can review them later.

Model providers may be located outside the European Union. Therefore, do not use Skedari AI for material that your firm does not allow an external provider to process. The firm's administrator controls which users have access to the assistant.

We do not use your content to train models. Every language-model inference request sent by Skedari requires Zero Data Retention and denies provider data collection. This means OpenRouter may route the request only to an eligible endpoint that does not retain the prompt or response and does not collect it for model training. OpenRouter may retain non-content operational metadata such as the selected model, token counts, latency, and cost. For specific requests from your firm on this matter, write to support@axii-llc.com.

6. Outlook and Gmail integrations

Our add-ons read an email only when you explicitly ask to archive it. We do not read, scan, or index your mailbox in the background. You can disconnect the integration at any time from your workspace settings.

Google user data and Limited Use. Skedari's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We access the current Gmail message (scope gmail.addons.current.message.readonly) only when you open that message and launch Skedari to archive it.
• We use this data solely to provide and improve the email-archiving feature you invoked.
• We do not transfer this data to others except as necessary to provide or improve that feature, to comply with applicable law, or as part of a merger or acquisition.
• We do not use Gmail data for advertising, and we do not sell it.
• We do not allow humans to read this data unless we have your consent for specific messages, it is necessary for security or to comply with the law, or the data has been aggregated and anonymized.
• We do not use Gmail data to develop, improve, or train generalized artificial-intelligence models.

7. Where data is stored

Documents, files, application servers, and databases are located at Hetzner, in Germany (European Union). Each firm's data is logically separated from that of other firms, and the firm context is enforced on every request.

The only exception is the processing of Skedari AI queries, described in section 5, which may take place outside the European Union.

8. Who we share it with

We use a small number of providers, each bound by confidentiality obligations:

Paysera acts as an independent controller for the payment data it collects itself. Except where required by law, we do not give your data to third parties for their own purposes.

9. How long we keep it

• Workspace content — for as long as the firm has an active account. After the relationship ends, data is deleted within 90 days, unless the firm requests earlier deletion.
• Invoices and financial data — as long as required by Kosovo tax law.
• Security and audit logs — up to 90 days.

10. Your rights

Skedari is currently offered only in the Republic of Kosovo, so Law No. 06/L-082 on the Protection of Personal Data applies. Under it you have the right to request access, rectification, erasure, restriction, or objection to processing, as well as portability of your data.

Write to support@axii-llc.com. We respond within 30 days. If the request concerns the content of a firm for which we are only a processor, we will refer you to the relevant firm. You also have the right to complain to the Information and Privacy Agency of Kosovo.

11. Security

Communication runs over HTTPS, access is controlled by role-based permissions, actions are recorded in the audit trail, and payment tokens are stored encrypted with keys that are rotated periodically. No system is completely invulnerable, so if you suspect a security problem, write to us immediately at support@axii-llc.com.

12. Cookies

This marketing site uses no tracking cookies and has no third-party analytics. The workspace uses only the technical cookies necessary to keep your session open.

13. Changes

If we change this policy, we will update the date above and, for material changes, notify firm administrators by email before the change takes effect.

14. Contact

For any privacy questions: support@axii-llc.com. Full company details are on the contact page.