Sign In

Privacy Policy

Last updated: 31 October 2026

1. Introduction

Adikt.AI ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Current product and available operator details are on our About page. Contact Adikt support for a privacy request.

3. Information We Collect

We collect the following categories of personal data:

  • Account Information: Name, email address, password hash, verification and security settings, and any profile information you provide.
  • Usage Data: API call logs, generation history, credit consumption, session duration.
  • Payment Data: Billing information processed securely via Stripe. We do not store card details.
  • Technical Data: IP address, browser type, device information, cookies, and similar technologies.
  • Generated Content: Scripts, videos, images, and other creative assets you produce using the Service.

Support, partnership and creator enquiries

When you submit a support, privacy or security request, partnership enquiry or brand ambassador application, we store the name, email address, request topic and message you provide, together with any organisation or creator details, profile link and area of interest included in that form. We also keep your acknowledgement of this notice, a submission reference, processing status and internal review notes. Authorised administrators use this information to assess and respond to your enquiry. Submitting a form does not subscribe you to marketing or enrol you in a paid programme.

These submissions are held in Adikt’s private application database; they are not public and are not sent to a generation model by the enquiry form. Cloudflare Turnstile and request limits help protect the forms against automated abuse. Contact Adikt privacy support with your submission reference to request a correction or removal. On removal from the enquiry inbox, contact details, message and review notes are cleared; a minimal non-readable request fingerprint and submission reference remain to prevent a delayed retry from restoring the removed information. Infrastructure backups may retain earlier copies according to their backup cycle.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract: Processing necessary to perform our contract with you (providing the Service).
  • Legitimate Interests: Processing necessary for our legitimate interests (improving the Service, fraud prevention).
  • Consent: Where you have given consent (marketing communications, cookie preferences).
  • Legal Obligation: Where processing is necessary to comply with the law.

5. How We Use Your Data

  • To provide, maintain, and improve the Service.
  • To process transactions and manage subscriptions.
  • To send transactional emails (welcome, generation notifications, invoices).
  • To monitor usage and enforce rate limits.
  • To detect and prevent fraud, abuse, and security incidents.
  • To respond to support requests and communicate with you.

6. Data Sharing

We share personal data only with the following categories of recipients:

  • Railway: Application hosting and private database infrastructure.
  • Stripe: Payment processing.
  • Resend: Transactional email delivery.
  • Google Analytics: When enabled and you choose analytics, Google can receive a view of First Pour or the captioned vertical ad guide and a linked Studio export using pseudonymous browser and session identifiers. Advertising features are disabled for these events.
  • Sentry: Optional browser error diagnostics when configured and analytics consent is granted. Error messages and outgoing fields are restricted; session replay is disabled.
  • Cloudflare: Content delivery, storage (R2) and bot protection (Turnstile).
  • AI Providers: Selected services such as KIE.ai, ElevenLabs and APIClaw process the content needed for the generation or writing operation you request.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Generated content is retained until you delete it or your account is terminated. Account deletion removes the account and eligible workspace records. Media cleanup is tracked separately and can remain pending if storage is unavailable. Shared workspace content, required billing records and infrastructure backups may remain subject to their purpose and retention cycle. Contact support to check a deletion request.

8. Your Rights

Under UK GDPR, you have the right to:

  • Access: Request a copy of your personal data.
  • Rectification: Request correction of inaccurate data.
  • Erasure: Request deletion of your personal data ("right to be forgotten").
  • Portability: Request export of your data in a machine-readable format.
  • Restriction: Request restriction of processing in certain circumstances.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw Consent: Withdraw previously given consent at any time.

To exercise these rights, contact us at Adikt support or use the data export and account deletion features in your account settings.

9. Cookies

We use essential cookies for authentication, security and remembering privacy choices. With analytics consent, we group public-page visits into sessions and record the landing page, referring site and sanitised campaign tags. When you choose a Studio template from an article, a short-lived identifier in browser storage connects that click to the matching campaign and its successful exports after sign-in. This identifier expires after one hour. These records exclude prompts, uploaded media and private page URLs. Our first-party consent receipts and analytics events expire within 90 days. Published browser preferences expire within the period shown in Privacy choices, at most 180 days. Use Privacy choices to reject, customise or withdraw optional tracking at any time.

Advertising measurement

When configured and you grant marketing consent, Meta or TikTok can receive conversion events and campaign attribution for advertising measurement. The current beta restricts these connections to test events. Server events use deduplicated identifiers; email addresses, IP addresses, campaign click IDs, prompts and uploaded content are not included. Withdrawing consent stops pending optional deliveries. Information already delivered is also subject to the receiving provider’s privacy practices.

10. International Transfers

Some providers may process data outside your country. The destination and contractual terms depend on the provider used for the operation. Contact support for information about a specific provider and its applicable transfer terms before submitting sensitive material.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page. Changes that require a new consent choice will ask for that choice again.

12. Contact & Complaints

For privacy enquiries: Adikt support. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.