Privacy Policy

Last updated: October 1, 2026

This policy explains what information ATIKO APP LIMITED collects when you visit atikoapp.co or use the Atiko platform, why we collect it, who we share it with, and the rights you have over it.

1. Who we are

ATIKO APP LIMITED ("Atiko", "we", "us") is a private limited company registered in England and Wales under company number 17492180, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. We operate the atikoapp.co website and the Atiko platform, an AI service that unifies advertising, creative, and analytics for eCommerce brands. For the personal data described in this policy, ATIKO APP LIMITED is the data controller. You can reach us at info@atikoapp.co or by post at the address above.

Where Atiko processes data from your connected advertising accounts on your instructions (for example, campaign performance data pulled from your Meta account), we act as a processor on your behalf, and you remain the controller of that data.

2. Information we collect

Information you provide

• Account information: your name, work email address, company name, and a password, which we store only as a salted cryptographic hash.
• Billing information: your billing contact and address. Full payment card numbers are collected and stored by our payment processor, never by Atiko.
• Communications: the contents of support requests, demo bookings, and any other messages you send us.

Information collected automatically

• Usage data: the pages and features you use, the actions you take in the platform, and their timestamps.
• Device and log data: IP address, browser type and version, operating system, referring URLs, and error logs.
• Cookies: a single first-party session cookie that keeps you signed in. We describe this in detail in our Cookie Policy.

3. Connected ad-platform data

Atiko works by connecting to the advertising platforms you already use, such as Meta, TikTok, and Google. When you connect an account, you authorise us through each platform's official API, using the scopes you grant during that platform's consent flow. We never see or store your platform passwords.

Depending on the platform and scopes, we receive:

• Campaign structure: campaigns, ad sets, ads, budgets, and targeting settings.
• Performance metrics: impressions, clicks, spend, conversions, revenue, and derived metrics such as ROAS and cost per acquisition.
• Audience definitions and aggregated audience insights as exposed by the platform's API.
• Creative assets and copy associated with your ads.

You can disconnect a platform at any time from your workspace settings or by revoking Atiko's access inside the platform itself. After disconnection, we stop syncing and delete the associated platform data on the schedule described in Section 7.

4. How we use information

• To provide and operate the service: syncing your connected accounts, generating campaign recommendations, producing creative variants, and rendering analytics for your workspace.
• To administer your subscription, including billing, invoicing, and plan management.
• To respond to support requests and communicate service updates, security notices, and changes to our terms.
• To secure the service: detecting fraud, abuse, and unauthorised access.
• To improve the product, using aggregated and de-identified data such as feature-adoption statistics and category-level performance benchmarks.

We do not use one customer's connected ad-account data to build or deliver recommendations to another customer, except in aggregated and de-identified form that cannot reasonably be linked back to you or your brand.

5. Legal bases for processing

Under the UK GDPR, the Data Protection Act 2018 and, where applicable, the EU GDPR, we rely on the following legal bases:

• Performance of a contract: providing the platform, syncing the accounts you connect, and billing your subscription.
• Legitimate interests: securing the service, preventing abuse, and improving the product using aggregated data.
• Consent: where we ask for it explicitly, such as optional marketing emails. You can withdraw consent at any time.
• Legal obligation: retaining billing records for tax and accounting law.

6. How we share information

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We share data only with:

• Service providers acting as our processors: Vercel Inc. hosts our infrastructure; our payment processor handles card transactions; our email provider delivers transactional messages; our scheduling provider manages demo calls booked through our site. Each is bound by a data-processing agreement.
• Advertising platforms, at your direction: when you publish or edit a campaign through Atiko, the relevant data is transmitted to the platform you targeted.
• Legal authorities, where required by law, court order, or to protect the rights, safety, or property of Atiko, our customers, or the public.
• A successor entity, if Atiko is involved in a merger, acquisition, or sale of assets. We will notify you before your data becomes subject to a different privacy policy.

7. Data retention

• Account data is retained for the life of your account and deleted within 90 days after account closure.
• Connected ad-platform data is deleted within 30 days after you disconnect the platform or close your account.
• Encrypted backups roll off automatically within 30 days of the underlying deletion.
• Invoices and billing records are retained for up to 7 years where tax and accounting law requires it.

8. Security

We encrypt data in transit using TLS and at rest using industry-standard encryption. OAuth tokens for connected platforms are stored encrypted, access to production systems is restricted to personnel who need it and protected by multi-factor authentication, and we log administrative access.

No method of transmission or storage is completely secure. If you believe you have found a vulnerability or that your account has been compromised, contact us immediately at info@atikoapp.co.

9. Your rights

If you are in the UK or EEA

You have the right to access, correct, delete, and receive a portable copy of your personal data; to restrict or object to certain processing; and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk, or with your local supervisory authority.

If you are a California resident

Under the CCPA and CPRA you have the right to know what personal information we collect, to request its deletion or correction, and to opt out of the sale or sharing of personal information. Atiko does not sell personal information and does not share it for cross-context behavioural advertising, so there is nothing to opt out of. We will never discriminate against you for exercising any of these rights.

To exercise any of these rights, email info@atikoapp.co from the address associated with your account. We may ask you to verify your identity before acting on a request, and we respond within the timelines the applicable law requires.

10. International transfers

Atiko is operated from the United Kingdom. Some of the service providers listed in Section 6, including our hosting provider, may process data outside the UK, including in the United States. Where we transfer personal data outside the UK or EEA, we rely on adequacy regulations where available, or on the UK International Data Transfer Agreement or the International Data Transfer Addendum to the European Commission's Standard Contractual Clauses, and we assess each transfer for adequate safeguards.

11. Children's privacy

Atiko is a business tool. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us personal data, contact us and we will delete it.

12. Changes and how to reach us

We may update this policy as the product and the law evolve. For material changes we will notify you by email or by a prominent notice in the platform at least 30 days before the change takes effect. The date at the top of this page always reflects the current version.

Questions, requests, and complaints can be sent to ATIKO APP LIMITED at info@atikoapp.co. How we bill is described in our Billing Terms, and your use of the service is governed by our Terms of Service.