What we collect
Your account: your email address, the name you give, a photo if you add one, your language and timezone, and the letterhead you set up. Sign-ins: the time, the address and the device, kept as a record of who used the account. Agreements: the text you write, the people you send to, every event on the agreement (drafted, sent, opened, signed, declined) with its time, address and device, the signatures drawn or photographed for it, and the sealed PDF. Signatures on file: only the ones you ask us to keep. Kaigi: who was invited, who joined and when, and the caption transcript and write-up when the host turns those on. Calendar: if you connect Google Calendar, the busy times on the calendars you choose and the events Hanko writes there; the tokens are encrypted at rest.
Hank, the assistant: what is said in a conversation with him, as a transcript, and the summary and write-up made from it, kept under Conversations for you to read. The pages he opens and the actions you ask him to take, as an activity log. The calendar he reads at your request: your Kaigi calls, the busy times synced from Google Calendar with their titles, and your time off, and the time he blocks or the calls he books, moves or cancels after you say yes.
The front office: when someone visits your office, their name and email as they signed in, the phone number and message they give Hank, how urgent they said it was, and the transcript and write-up of the visit, all kept for you and emailed to you. A visitor's request for a call, with the time asked for and your decision. A visitor sees nothing of your calendar beyond which stretches are free and which are blocked off; never what fills them. The demo office at /office/hank keeps the same record of a visit, for a minute, once a day.
Credits: what was bought, granted or spent, including the fee a visitor's credits pay for a front office visit.
What we do not do
We do not sell your data. We do not show advertising. We do not read your agreements except as the smart assistant does at your request, when the text you give it is sent to the model provider to produce the answer you asked for. We do not email a signature image; only the executed agreement travels by email.
Who sees what
The other party to an agreement sees the agreement, your name on it, your signature, and the certificate page. The people on a kaigi see who else is on it. Administrators of Hanko can see accounts, activity and the health of the platform, and the agreements only as needed to keep the service running or when the law requires it. Email is sent through a delivery provider; video runs on the Zoom Video SDK; the smart assistant runs on Anthropic's API. Hank, the video assistant, runs on Anam's service: what is said in a conversation with him goes to Anam to hear it, answer it and speak, and his write-ups run on Anthropic's API. Each receives only what that function needs.
Your choices
You may change your name, photo, language, timezone and letterhead at any time. You may remove signatures on file, disconnect a calendar, delete draft agreements you have not sent, and decline or withdraw a call request. Your conversations with Hank and the messages left at your office are yours to read under Conversations; write to privacy@hanko.world to have them removed. Agreements that were signed remain on record for both parties. To close your account, write to privacy@hanko.world.
Security
Sign-in codes are short-lived and rate-limited; passkeys are supported. Sessions are stored server-side and can be revoked. Calendar tokens are encrypted with a key derived from a server secret. Sealed PDFs are stored outside the web root and served only to the parties. If you find a security problem, write to security@hanko.world.