Privacy Policy

Okky Service Last updated: August 3, 2026

1. General

This Policy describes what data OKKY LLC (the "Company," "we") collects when you use the service at okky.nyc and in related applications (the "Service"), how we use it, with whom we share it, and what rights you have.

By using the Service, you agree to this Policy. If you do not agree, do not use the Service.

Data controller: OKKY LLC, address: 48 Wall Street, Suite 1100 PMB 1076, New York, NY 10005, United States. Privacy contact: support@okky.nyc.

2. What Data We Collect

2.1. Account data. Name, email address, login, and any information you add to your profile.

2.2. Payment data. Payments are processed through a third-party payment provider. We receive information about the payment status, the subscription type, and the last digits of the card, but we do not store full payment card details.

2.3. Content you submit to the Service (Input). Prompts, uploaded images, and files are processed as transit data: the Service receives them in order to pass them to the selected neural network and return the result to you (Output). We do not use your Input or Output for our own purposes: we do not train models on them, do not use them for advertising, and do not sell them. Storage is limited to a technical minimum: the generation history displayed in your Account dashboard (which you can delete), service logs necessary for operation, security, and Token accounting, and cases expressly required by law. Biometric data is handled under the special rules of Section 2.7.

2.4. Technical data. IP address, device and browser type, device identifiers, usage logs, date and time of access, and data about actions within the Service.

2.5. Cookies and similar technologies (see Section 5).

2.6. Partner data. If you participate in the Partner Program, we additionally process the data necessary for compensation accounting and tax reporting (see the Partner Agreement).

2.7. Biometric data. Certain features of the Service (the photo/video studio, avatars, face-swap templates, voice features) process facial images and voice recordings, which in a number of jurisdictions are considered biometric data. We process them only with your explicit consent, expressed by uploading such content and launching the relevant feature, and solely to perform the requested generation. We do not sell, lease, or transfer biometric data for advertising, profiling, or identification purposes; disclosure is possible only to processing providers necessary to perform the feature, and where required by law. Biometric data is deleted or de-identified upon satisfaction of the purpose of processing, and in any event no later than 3 years after your last interaction with the Service — whichever occurs first; you may request earlier deletion via support@okky.nyc. In jurisdictions where separate written consent is required (for example, the states of Illinois, Texas, and Washington), the feature may request additional consent or may be unavailable.

3. How We Use Data

We use data to:

provide and maintain the Service, process your Input, and produce Output;
and in doing so, we do not use your Input or Output to train our own or third-party models, for advertising, or for sale;
process payments and manage the subscription and auto-renewal;
ensure security and prevent fraud and violations of the Acceptable Use rules;
improve the quality of the Service, and perform analytics and debugging;
send service notices and (where we have consent or another lawful basis) marketing communications;
comply with legal requirements.

We do not sell your personal data to third parties.

4. With Whom We Share Data

We share data with a limited set of recipients, only to the extent necessary for the Service to operate:

4.1. AI Model Providers. To produce Output, your Input may be transmitted to third-party neural-network providers to which the Service provides access. Their processing is governed by their own policies. Do not submit through the Service any confidential personal data that you do not want sent to third-party providers.

4.2. Payment providers — to process and protect payments.

4.3. Infrastructure providers — hosting, cloud storage, communications, and notification-delivery services.

4.4. Analytics services — for usage statistics.

4.5. As required by law — to public authorities, where necessary under law or a court order, or to protect rights, safety, and property.

4.6. Corporate transactions — in the event of a merger, asset sale, or other corporate transaction, with the data-protection regime preserved.

5. Cookies

5.1. We use cookies and similar technologies for authentication, saving preferences, security, and analytics.

5.2. Essential cookies are required for the Service to operate. Analytics and other non-essential cookies are used on the basis of your consent where required by applicable law. Detailed terms are set out in the Cookie Policy.

5.3. You can manage cookies in your browser settings; disabling some cookies may limit the functionality of the Service.

6. Retention

6.1. We retain data for as long as necessary for the purposes described in Section 3, for the life of your Account, and for a reasonable period after its deletion.

6.2. Certain data may be retained longer where required by law (for example, for tax and accounting records relating to partner payouts) or to resolve disputes.

6.3. After the retention period expires, data is deleted or anonymized.

7. Security

We apply organizational and technical data-protection measures (access controls, encryption in transit, and other reasonable measures). However, no method of transmission or storage is completely secure, and we cannot guarantee absolute protection.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

access your data and obtain a copy;
correct inaccurate data;
delete data (the "right to be forgotten");
restrict or object to certain types of processing;
withdraw consent;
data portability.

For California residents (CCPA/CPRA) and for users in the EEA/United Kingdom (GDPR), additional rights apply, including the right not to be subject to the sale of data (which we do not carry out) and the right to lodge a complaint with a supervisory authority.

Do Not Sell or Share (California). We do not sell personal data. If we ever share data for cross-context behavioral advertising, we will place a "Do Not Sell or Share My Personal Information" link on the website and provide an opt-out mechanism for California residents.

To exercise your rights, send a request to support@okky.nyc. We may ask you to verify your identity.

9. International Data Transfers

9.1. The Company is registered in the United States and processes data primarily in accordance with the laws of the United States of America. Our providers may be located in other countries.

9.2. By using the Service, you understand that your data may be transferred, stored, and processed outside your country, including in the United States, where data-protection requirements may differ from those of your jurisdiction.

9.3. When transferring data from the EEA, the United Kingdom, and Switzerland, we use the safeguards provided by law, including Standard Contractual Clauses and other appropriate guarantees.

9.4. The Service is available to users in various countries; however, its use is prohibited for persons subject to U.S. sanctions or located in jurisdictions subject to comprehensive U.S. sanctions (see the relevant section of the Terms of Service).

10. Children

The Service is not intended for persons under 18 years of age. We do not knowingly collect data from minors. If we become aware of such collection, the data will be deleted.

11. Changes to This Policy

We may update this Policy. The new edition is published on the website with its date. In the event of material changes, we will notify you additionally. Continued use of the Service constitutes acceptance of the updated Policy.

12. Contact

OKKY LLC Address: 48 Wall Street, Suite 1100 PMB 1076, New York, NY 10005, United States Data inquiries: support@okky.nyc Website: okky.nyc