Privacy Policy

1. Introduction

Vakoi AI Ltd (“Vakoi,” “we,” “our”) is a company incorporated in England and Wales, with its registered office in London, United Kingdom. We provide an AI-powered, scene-aware monetization platform for video game developers and advertisers.

This Privacy Policy describes how we collect, use, disclose, and protect information when you use our website (vakoi.ai), SDK, APIs, and related services (collectively, the “Services”). We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Vakoi AI Ltd is the data controller for personal data collected through the Services. If you have questions about how we handle your data, contact us at founders@vakoi.ai.

3. Information We Collect

a. Information You Provide

• Account and contact information (name, email address, company name) when you sign up, request early access, or contact us.
• Payment and billing information if you use paid features of the platform.
• Communications you send to us, including support requests and feedback.

b. Information Collected Automatically

• Website analytics: Pages visited, referral source, browser type, and device information via Vercel Analytics. We do not use third-party tracking cookies.
• SDK telemetry: When our SDK is integrated into a game, we collect scene-level metadata (e.g., environment type, lighting conditions, surface geometry) to deliver contextually appropriate ads. We do not collect personal data from end-users of games through the SDK.
• Ad delivery and performance data: Impression counts, viewability metrics, and interaction data associated with ads rendered through our platform.

4. How We Use Your Information

We use data to provide and improve our Services — full stop. We will never sell your personal data to third parties.

• Provide, maintain, and improve the Services.
• Analyze game scenes using AI to deliver ads that match the visual style and context of each game environment.
• Use aggregated, anonymised data to train and improve our AI models and ad matching algorithms.
• Process transactions and send transactional communications.
• Respond to your requests, comments, or questions.
• Send product updates and marketing communications (you may opt out at any time).
• Detect, prevent, and address fraud, abuse, or technical issues.

5. Lawful Basis for Processing (GDPR)

Under the UK GDPR, we rely on the following lawful bases:

• Contract: Processing necessary to perform our contract with you (e.g., operating your account, delivering the SDK service).
• Legitimate interests: Analytics, fraud prevention, and product improvement, where these interests are not overridden by your rights.
• Legal obligation: Where processing is required to comply with applicable law.
• Consent: For marketing communications. You may withdraw consent at any time.

6. How We Share Your Information

We do not sell your personal information. We may share data with:

• Service providers who help us operate the platform (hosting, analytics, payment processing), bound by data processing agreements.
• Advertisers receive aggregated, non-personally-identifiable performance data about their campaigns only.
• Legal obligations: When required by law, regulation, court order, or legal process.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to you where required.

7. International Data Transfers

Some of our service providers are based outside the UK or European Economic Area. Where we transfer personal data internationally, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or UK International Data Transfer Agreements) in accordance with the UK GDPR. We also take reasonable steps to comply with applicable US privacy laws for users based in the United States.

8. Data Retention

We retain personal information for as long as your account is active or as needed to provide you with the Services. SDK scene-analysis data is processed in real time and not stored in a personally identifiable form. We will delete or anonymise your data upon request, subject to legal obligations.

9. Security

We implement enterprise-grade technical and organisational security measures to protect your information, including end-to-end encryption in transit (TLS), encryption at rest, strict access controls, and regular security reviews. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security — but we take this seriously and invest heavily in it.

10. Your Rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (“right to be forgotten”) where applicable.
• Restrict or object to certain processing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent for consent-based processing at any time.

To exercise any of these rights, contact us at founders@vakoi.ai.

11. Children's Privacy

Our Services are not directed to children under 13 (or under 16 where required by local law). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us so we can promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Where required by law, we will notify you directly.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at founders@vakoi.ai.

Vakoi AI Ltd, London, United Kingdom.