akta.pro by Wokelo AI

Privacy Policy

Last updated: Sep 23, 2026

1.Scope and Overview

This Privacy Policy ("Policy") describes how Wokelo Inc. (doing business as Akta by Wokelo) ("Akta," "Wokelo," "we," "us," or "our") collects, stores, uses, and shares your information when you access or use the Akta API, associated developer tools, documentation, websites, developer portal, dashboards, billing portal, support services, and any other services that link to this Policy (collectively, the "Services").

If you do not agree with this Policy, please do not use the Services. Questions or concerns? Contact us at [email protected].

If you have a separate written agreement with us — such as a Master Subscription Agreement (MSA) or Data Processing Agreement (DPA) — that agreement prevails over this Policy to the extent of any conflict with respect to the services it covers.

All personal information you provide to us must be true, complete, and accurate. You must notify us promptly of any changes.

2.Roles and Responsibilities

For Account Data, API Usage Data, billing data, website data, and support communications, Wokelo Inc. generally acts as an independent data controller because we determine the purposes and means of processing that information.

Where Query Data, Outputs, or other content submitted through the API contains personal data provided by or on behalf of a customer, Wokelo Inc. generally processes that personal data as a processor or service provider on behalf of that customer, except where we are required to process it as an independent controller for security, fraud prevention, legal compliance, abuse detection, enforcement of our terms, or protection of our rights and systems.

If you build or operate an application using the Akta API, you are responsible for your own application, your own privacy notices, and your own compliance with applicable privacy and data protection laws.

3.Information We Collect

3.1Account Data

When you register for API access or interact with the Services, we may collect:

Name, email address, organisation name, and job title;
Username, password, API Keys, authentication credentials, and account identifiers;
Billing address, payment status, subscription details, transaction identifiers, and other billing information;
Contact preferences and communication history;
Any other information you voluntarily provide when contacting us, requesting support, or otherwise communicating with us.

3.2Payment Data

We do not intentionally collect full payment card numbers or card security codes. Payment information is processed by our third-party payment processor, and we receive only limited billing information such as payment status, transaction identifiers, billing address, and limited payment method details where applicable.

3.3API Usage Data

When you use the API, we automatically log technical and operational metadata. This does not include the substantive content of your queries or outputs, but may include:

Timestamps, request volumes, endpoint usage, and rate-limit activity;
IP addresses, device, browser, network, and system information associated with API requests;
Authentication events, API Key usage logs, and access logs;
Error rates, latency, availability, and performance metrics;
Credit consumption records and other usage records for billing and account administration;
Security, fraud-prevention, and abuse-detection logs.

We use API Usage Data for account administration, billing, rate-limit enforcement, abuse detection, security, troubleshooting, analytics, and compliance.

3.4Query Data and Outputs

"Query Data" means prompts, search terms, queries, API inputs, and other content submitted to the API by you, your Authorised Users, or your downstream users. "Outputs" means responses, results, or other content generated or returned by the API.

Wokelo Inc. does not use Query Data or Outputs to train or fine-tune Wokelo or third-party AI models. Your queries are processed solely to generate and return the requested output and for the security and abuse-detection purposes described in this Policy.

API query fields are not intended for the submission of personal information. You should not submit personal information through the API unless you have all necessary rights, notices, consents, and legal bases to do so and, where required, a Data Processing Agreement is in place with Wokelo Inc.

Your rights to use, cache, or train on Outputs returned by the API are governed by the license terms in the akta.pro Terms & Conditions.

3.5Feedback and Communications

If you contact us with questions, support requests, feature requests, or feedback, we collect and retain those communications and use them to respond to you and provide support.

3.6Cookies and Similar Technologies

We and our service providers may use cookies, pixels, local storage, and similar technologies to operate our website, developer portal, billing portal, and dashboards; keep users logged in; secure accounts; and analyse usage. Where required by law, we will obtain consent before using non-essential cookies. You may manage cookies through your browser settings or any cookie preference tool made available on our website.

4.How We Use Data

We use the data we collect to:

Create, maintain, authenticate, and administer accounts;
Provide, operate, and maintain the Akta API and related Services;
Process payments, calculate credit consumption, and administer billing;
Enforce rate limits, usage restrictions, security controls, and acceptable-use obligations;
Monitor, secure, and debug;
Detect, prevent, and investigate fraud, abuse, security incidents, and unauthorised access;
Provide customer support and respond to inquiries;
Communicate with you about your account, API usage, service updates, legal notices, billing, and material changes to our terms or this Policy;
Send marketing communications where permitted by law and subject to your opt-out rights;
Comply with tax, accounting, sanctions, export-control, legal, regulatory, and law-enforcement obligations;
Protect the rights, property, safety, and security of Wokelo Inc., our users, and the public.

5.Legal Bases for Processing

5.1EEA, UK, and Switzerland (GDPR / UK GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, we process personal data only where we have a valid legal basis, including:

Performance of a contract: to provide the API, create and manage accounts, authenticate access, process billing, provide support, and communicate service-related information;
Legitimate interests: to secure, monitor and prevent abuse of the Services; enforce rate limits and acceptable-use obligations; analyse usage; debug errors; and protect Wokelo Inc., our users, and the public;
Legal obligations: to comply with tax, accounting, sanctions, export-control, law-enforcement, regulatory, and other legal requirements;
Consent: where required for marketing communications, optional cookies, or other processing activities for which consent is required by law;
Vital interests: where processing is necessary to protect the vital interests of an individual.

If you are located in the EEA or UK and believe we are unlawfully processing your personal information, you have the right to complain to your local data protection supervisory authority.

5.2Canadian Users (PIPEDA)

If you are located in Canada, we may process personal information with your express or implied consent, or without consent where permitted by applicable Canadian privacy law. Situations where processing without consent may be permitted include:

When the collection is clearly in an individual's best interests and consent cannot be obtained in a timely manner;
For investigations, fraud detection, and fraud prevention;
For business transactions when specific legal conditions are met;
When contained in a witness statement and necessary to assess, process, or settle an insurance claim;
To identify injured, ill, or deceased individuals and to communicate with next of kin;
If we have reasonable grounds to believe a person is or may be a victim of financial abuse;
When obtaining consent would compromise the availability or accuracy of the information and collection is reasonable for investigating a breach of an agreement or contravention of Canadian law;
When disclosure is required to comply with a subpoena, warrant, court order, or court rules;
When the information was created by an individual in the course of their employment, business, or profession and collection is consistent with the original purpose;
When the collection is solely for journalistic, artistic, or literary purposes;
When the information is publicly available and collection is permitted under applicable regulations.

6.How We Share Data

We do not sell personal data. We may share personal data in the following circumstances:

Service providers: We share data with cloud hosting providers, infrastructure and database providers, payment processors, analytics providers, customer support tools, email delivery providers, and security monitoring providers. All such providers are contractually restricted from using your data except to provide services to us or as otherwise permitted by law;
Business transfers: In connection with a merger, acquisition, financing, corporate reorganisation, or sale of assets, your data may be transferred to the acquiring entity subject to appropriate confidentiality protections;
Legal obligations: We may disclose information when required by law, regulation, legal process, court order, subpoena, or governmental request, or to protect the rights, property, safety, or security of Wokelo Inc., our users, or the public;
With your consent: We may share your information with third parties where you have given us prior written consent.

All data is stored on servers in the United States, except where transferred internationally as described in Section 8.

7.Third-Party AI, Model, and Data Providers

We may use third-party AI, model, infrastructure, and data providers to deliver, support, or supplement API functionality. Where those providers process Query Data, Outputs, or other personal data, they do so under contractual restrictions designed to protect the data and limit use to providing services to Wokelo or as otherwise permitted by law.

8.International Transfers

Data is stored and processed in the United States. If you are located outside the United States — including in the EEA, UK, Switzerland, or another jurisdiction with data-transfer restrictions — your information may be transferred to, stored in, and processed in the United States, which may not provide the same level of data protection as your home jurisdiction.

Where required by applicable law, Wokelo Inc. relies on appropriate legal transfer mechanisms, which may include Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA), or other legally recognised transfer mechanisms.

9.Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law, contract, tax, accounting, security, or compliance obligations.

10.Security

We implement appropriate technical and organisational measures designed to protect data processed through the Services, including:

Encryption of data in transit using TLS/SSL;
Encryption of sensitive data at rest where appropriate;
Access controls and authentication requirements for API infrastructure;
Logging, monitoring, and incident-response procedures;
Internal access restrictions based on role and need to know;
Safeguards designed to detect and prevent unauthorised access, abuse, and misuse.

No security system is impenetrable. You are responsible for securing your account credentials, API Keys, applications, systems, and any data you transmit through the API. Do not share API Keys with unauthorised parties or embed them in public repositories or client-side code.

If you believe your account or API Key has been compromised, contact us immediately at [email protected]. Wokelo Inc. will notify you of security incidents affecting your data as required by applicable law.

11.Developer Responsibilities for End User Data

If you build an application using the Akta API that processes personal data of downstream end users, you are responsible for:

Providing end users with accurate and legally compliant privacy notices that describe your data practices, including your use of the Akta API;
Obtaining all necessary consents, permissions, authorisations, and legal bases before processing end user personal data through the API;
Ensuring your application complies with all applicable privacy and data protection laws, including the GDPR, UK GDPR, CCPA/CPRA, PIPEDA, and other applicable privacy regulations;
Honouring end users' data subject rights requests with respect to personal data processed through your application;
Not submitting to the API personal data that you are not authorised to process;
Not submitting sensitive personal data, protected health information, payment card data, government identifiers, biometric data, children's data, or other highly regulated data unless Wokelo Inc. has expressly agreed in a written agreement or Data Processing Agreement covering such processing;
Notifying Wokelo Inc. promptly at [email protected] if you become aware of any data protection incident involving personal data processed through the API.

12.Sensitive Data and Prohibited Personal Data

The Services are not designed for the processing of sensitive personal data, protected health information, payment card data, children's data, biometric data, precise geolocation data, government identifiers, or other highly regulated data unless Wokelo Inc. expressly agrees in writing.

You must not submit such data to the Services unless you have all necessary rights, consents, notices, authorizations, and legal bases and, where required, a Data Processing Agreement or other written agreement with Wokelo Inc. covering such processing.

13.Your Privacy Rights

Depending on where you are located, you may have rights with respect to your personal data under applicable law. These may include the right to:

request access to personal data we hold about you;
request correction of inaccurate or incomplete personal data;
request deletion of personal data;
request restriction of or object to certain processing;
request portability of personal data, where applicable;
withdraw consent where processing is based on consent; and
lodge a complaint with a data protection authority or regulator.

To exercise these rights, contact us at [email protected]. We will respond within the timeframes required by applicable law.

We may need to verify your identity before fulfilling a request. Where permitted by law, you may designate an authorized agent to submit a request on your behalf. We may decline or limit requests where permitted by applicable law, including where fulfilling the request would interfere with legal obligations, security, fraud prevention, enforcement of our terms, or the rights of others.

13.1EEA and UK Users (GDPR / UK GDPR)

If you are located in the EEA or UK, you have the right to: access personal data we hold about you; request correction of inaccurate or incomplete data; request deletion in certain circumstances; request restriction of processing; receive your data in a portable format; object to processing based on legitimate interests or for direct marketing; and lodge a complaint with your local data protection supervisory authority.

13.2Canadian Users (PIPEDA)

If you are located in Canada, you have the right to access and correct personal information we hold about you. Contact us at [email protected] to make a request.

13.3California Residents (CCPA/CPRA)

If you are a California resident, you may have the right to: know what personal information we collect, use, and disclose; request deletion of personal information; request correction of inaccurate personal information; opt out of the sale or sharing of personal information (we do not sell personal information); and not receive discriminatory treatment for exercising your CCPA rights.

California Civil Code Section 1798.83 (the "Shine the Light" law) permits California residents to request, once a year and free of charge, information about categories of personal information disclosed to third parties for direct marketing purposes. To make such a request, contact us at [email protected].

If you are under 18 years of age, reside in California, and have a registered account with our Services, you have the right to request removal of unwanted data that you publicly post on the Services. To request removal, contact us at [email protected] including your email address and a statement that you reside in California. We will ensure the data is not publicly displayed, but please be aware that it may not be completely removed from all our systems (e.g., backups).

13.4California Notice at Collection

We may collect the following categories of personal information: Identifiers (name, email, organisation, billing address, IP address, account identifiers, API Keys); Commercial information (subscription, payment, transaction, and billing records); Internet or other electronic network activity information (API usage logs, authentication events, endpoint usage, error logs, device and browser information); Professional or employment-related information (job title, company name, business contact information); and Inferences (limited internal usage analytics derived from account activity and API usage).

We use these categories for account administration, API delivery, authentication, billing, security, fraud prevention, analytics, customer support, compliance, and enforcement of our terms. We do not sell personal information. We do not knowingly collect, sell, or share personal information of individuals under 18.

13.5All Users

To exercise any privacy right described in this Section 13, contact us at [email protected]. We will respond within the timeframes required by applicable law. We may need to verify your identity before processing your request. We may decline or limit requests where permitted by applicable law, including where fulfilling the request would interfere with legal obligations, security, fraud prevention, or the rights of others.

14.Withdrawing Consent & Opting Out

14.1Withdrawing Consent

If we are relying on your consent to process your personal information, you have the right to withdraw that consent at any time by contacting us at [email protected]. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

14.2Marketing Opt-Out

You may opt out of marketing and promotional communications at any time by clicking the "unsubscribe" link in our emails or by contacting [email protected]. Once you opt out, we will remove you from our marketing lists. We may still send transactional, security, legal, billing, and service-related communications.

14.3Account Closure

To review, change, or delete your account information or terminate your account, contact us at [email protected]. Upon account termination, we will deactivate or delete account information from active systems within a reasonable period, subject to legal, tax, accounting, security, and compliance retention requirements.

15.Children

The Services are not intended for users under 18 years of age. We do not knowingly collect personal information from anyone under 18. By using the API Services, you represent that you are at least 18 years old. If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected] and we will take steps to delete it promptly.

16.Do Not Track

Most browsers and devices include Do-Not-Track ("DNT") features or settings. At this time, there is no uniform standard for recognising or responding to DNT signals, and we do not currently respond to DNT browser signals. If a standard is adopted that we are required to follow, we will update this Policy accordingly.

17.Updates to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date and will be effective when posted. If we make material changes, we may notify you by email, in-product notice, or by prominently posting a notice on our website. Your continued use of the Services following an update constitutes your acceptance of the revised Policy.

18.Contact

For any questions or concerns about this Privacy Policy or our data practices, to exercise your privacy rights, or to request a Data Processing Agreement, please contact us at:

Wokelo Inc. (Akta by Wokelo)

92 Lenora Street, PMB 195

Seattle, WA 98121, United States

[email protected]

akta.wokelo.ai