1.Who we are
Atiko App LLC (“Atiko”, “we”, “us”) operates the atiko.app website and the Atiko platform, an AI service that unifies advertising, creative, and analytics for eCommerce brands. For the personal data described in this policy, Atiko App LLC is the data controller. You can reach us at info@atiko.app or by mail at Atiko App LLC, 15 Tanguay Ave, Suite 112, #2D, Nashua, NH 03063.
Where Atiko processes data from your connected advertising accounts on your instructions (for example, campaign performance data pulled from your Meta account), we act as a processor on your behalf, and you remain the controller of that data.
2.Information we collect
Information you provide
- Account information: your name, work email address, company name, and a password, which we store only as a salted cryptographic hash.
- Billing information: your billing contact and address. Full payment card numbers are collected and stored by our payment processor, never by Atiko.
- Communications: the contents of support requests, demo bookings, and any other messages you send us.
Information collected automatically
- Usage data: the pages and features you use, the actions you take in the platform, and their timestamps.
- Device and log data: IP address, browser type and version, operating system, referring URLs, and error logs.
- Cookies: a single first-party session cookie that keeps you signed in. We describe this in detail in our Cookie Policy.
Details on the cookies we set, and the trackers we deliberately do not set, are in our Cookie Policy.
3.Connected ad-platform data
Atiko works by connecting to the advertising platforms you already use, such as Meta, TikTok, and Google. When you connect an account, you authorize us through each platform’s official API, using the scopes you grant during that platform’s consent flow. We never see or store your platform passwords.
Depending on the platform and scopes, we receive:
- Campaign structure: campaigns, ad sets, ads, budgets, and targeting settings.
- Performance metrics: impressions, clicks, spend, conversions, revenue, and derived metrics such as ROAS and cost per acquisition.
- Audience definitions and aggregated audience insights as exposed by the platform’s API.
- Creative assets and copy associated with your ads.
You can disconnect a platform at any time from your workspace settings or by revoking Atiko’s access inside the platform itself. After disconnection, we stop syncing and delete the associated platform data on the schedule described in Section 7.
4.How we use information
- To provide and operate the service: syncing your connected accounts, generating campaign recommendations, producing creative variants, and rendering analytics for your workspace.
- To administer your subscription, including billing, invoicing, and plan management.
- To respond to support requests and communicate service updates, security notices, and changes to our terms.
- To secure the service: detecting fraud, abuse, and unauthorized access.
- To improve the product, using aggregated and de-identified data such as feature-adoption statistics and category-level performance benchmarks.
We do not use one customer’s connected ad-account data to build or deliver recommendations to another customer, except in aggregated and de-identified form that cannot reasonably be linked back to you or your brand.
5.Legal bases for processing
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
- Performance of a contract: providing the platform, syncing the accounts you connect, and billing your subscription.
- Legitimate interests: securing the service, preventing abuse, and improving the product using aggregated data.
- Consent: where we ask for it explicitly, such as optional marketing emails. You can withdraw consent at any time.
- Legal obligation: retaining billing records for tax and accounting law.
6.How we share information
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share data only with:
- Service providers acting as our processors: Vercel Inc. hosts our infrastructure in the United States; our payment processor handles card transactions; our email provider delivers transactional messages; Cal.com schedules demo calls booked through our site. Each is bound by a data-processing agreement.
- Advertising platforms, at your direction: when you publish or edit a campaign through Atiko, the relevant data is transmitted to the platform you targeted.
- Legal authorities, where required by law, subpoena, or to protect the rights, safety, or property of Atiko, our customers, or the public.
- A successor entity, if Atiko is involved in a merger, acquisition, or sale of assets. We will notify you before your data becomes subject to a different privacy policy.
7.Data retention
- Account data is retained for the life of your account and deleted within 90 days after account closure.
- Connected ad-platform data is deleted within 30 days after you disconnect the platform or close your account.
- Encrypted backups roll off automatically within 30 days of the underlying deletion.
- Invoices and billing records are retained for up to 7 years where tax and accounting law requires it.
8.Security
We encrypt data in transit using TLS and at rest using industry-standard encryption. OAuth tokens for connected platforms are stored encrypted, access to production systems is restricted to personnel who need it and protected by multi-factor authentication, and we log administrative access.
No method of transmission or storage is completely secure. If you believe you have found a vulnerability or that your account has been compromised, contact us immediately at info@atiko.app.
9.Your rights
If you are in the EEA or UK
You have the right to access, correct, delete, and receive a portable copy of your personal data; to restrict or object to certain processing; and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local supervisory authority.
If you are a California resident
Under the CCPA and CPRA you have the right to know what personal information we collect, to request its deletion or correction, and to opt out of the sale or sharing of personal information. Atiko does not sell personal information and does not share it for cross-context behavioral advertising, so there is nothing to opt out of. We will never discriminate against you for exercising any of these rights.
To exercise any of these rights, email info@atiko.app from the address associated with your account. We may ask you to verify your identity before acting on a request, and we respond within the timelines the applicable law requires.
10.International transfers
Atiko is operated from the United States, and the service providers listed in Section 6 process data there. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses approved by the European Commission, together with the UK Addendum where applicable, and we assess each transfer for adequate safeguards.
11.Children’s privacy
Atiko is a business tool. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us personal data, contact us and we will delete it.
12.Changes and how to reach us
We may update this policy as the product and the law evolve. For material changes we will notify you by email or by a prominent notice in the platform at least 30 days before the change takes effect. The date at the top of this page always reflects the current version.
Questions, requests, and complaints can be sent to Atiko App LLC at info@atiko.app. How we bill is described in our Billing Terms, and your use of the service is governed by our Terms of Service.