Privacy Policy

1. Who processes your data

IKU LOBI OCHA is the data controller for the personal data we collect through the Platform. You can contact us using the details at the bottom of this page for any privacy-related question.

2. What data we collect

• Account data: email, display name, password (always stored hashed, never in plain text).
• Creator profile data: TikTok username, region/country, and any information you enter yourself.
• Content you upload: videos, images and text used with the AI editor, clip generator, motion graphics and sticker creator.
• Usage data: interactions with the Platform, AI job history, credits consumed, configured overlays.
• Billing data: name/company, NIF/VAT, address, country — as entered by you to generate invoices.
• Payment data: handled directly by Stripe and/or PayPal; we do not store your full card number.
• Referral program data: your referral code, who signed up with your link, commissions generated, PayPal email or payout account you provide to get paid.
• Technical data: IP address, browser type, technical and analytics cookies (see Cookies section).

3. What we use your data for

• Providing the service: creating and managing your account, processing your videos/images with AI tools, generating your overlays and enabling access to subscribed features.
• Managing payments, subscriptions, invoicing and tax compliance.
• Calculating and paying referral-program commissions and, once active, Marketplace earnings.
• Sending necessary service communications (confirmations, billing notices, password recovery) and, if you opted in, marketing communications.
• Preventing fraud and abuse of the referral/Marketplace system, and protecting Platform security.
• Improving the service through aggregated usage statistics.

4. Legal basis (GDPR)

• Contract performance: to deliver the service you subscribed to (account, plan, tools).
• Legal obligation: to issue invoices and comply with tax regulations.
• Consent: for marketing communications and non-essential cookies, which you can withdraw at any time.
• Legitimate interest: to prevent fraud and improve security and the service itself.

5. Who we share your data with

We only share data with the providers necessary to operate the Platform, all acting as data processors, or under their own policies when acting as independent controllers (e.g. payment gateways):

• Stripe / PayPal — payment processing and, once active, commission payouts to users.
• AI providers (e.g. Google Gemini models) — to generate the content you request (video, images, text); your content is sent solely for that purpose.
• Cloudinary — temporary storage of videos and images you upload or generate.
• Render — hosting of our servers.
• TikTok LIVE data provider (e.g. EulerStream) — to read public events from your live stream (gifts, comments) and display them in your overlays and stats.
• Email delivery provider — for notifications and password recovery.

We do not sell your personal data to third parties for advertising purposes.

6. International transfers

Some of our providers (e.g. Google or Stripe services) may process data outside the European Economic Area. In those cases, they rely on safeguards recognized under GDPR, such as the European Commission's Standard Contractual Clauses.

7. How long we keep your data

We keep your account data while your account remains active. After closing it, we retain billing data for the period required by tax law (generally 4-6 years in Spain) and delete or anonymize the rest within a reasonable time, unless a legal obligation or pending dispute requires longer retention.

8. Your rights

Under GDPR, you may exercise the following rights at any time by writing to our contact email:

• Access to your personal data.
• Rectification of inaccurate data.
• Erasure ("right to be forgotten"), where applicable.
• Restriction and objection to processing.
• Portability of your data to another provider.
• Withdraw your consent at any time, where processing is based on it.

You may also file a complaint with the Spanish Data Protection Agency (aepd.es) if you believe we have not properly handled your request.

9. Cookies

We use technical cookies necessary to keep you logged in and analytics cookies to understand and improve Platform usage. The first time you visit our public website you will see a banner where you can accept all cookies or only the technical ones.

10. Security

We apply reasonable technical measures to protect your data: passwords hashed with secure algorithms, payment credentials stored encrypted, and role-based access control in our admin panels. No system is 100% infallible; if we detect a security breach affecting your data, we will notify you as required by law.

11. Minors

The Platform is not directed at minors under 16 and we do not knowingly collect data from anyone under that age.

12. Changes to this policy

We may update this Privacy Policy to reflect new features (such as the Creator Marketplace or automated referral payouts) or legal changes. The last-updated date appears at the top of this page.