oktaioktai← Back to home

Last updated 29 June 2026

Privacy Policy

This policy explains what personal data oktai collects when you use getoktai.com and the oktai app, why we process it, and the rights you have under the GDPR.

Who we are

oktai is operated by Glorya GmbH, Oranienburger Straße 17, 10178 Berlin, Deutschland ("oktai", "we"). For privacy questions contact joshua@primepage.ai.

Data we process

  • Account data: your name, email and password hash, created when you sign up (email or Google).
  • Brand & marketing data: the website you submit for audit, brand assets, copy, generated creatives, and content you upload or generate in the app.
  • Connected accounts: when you connect Meta or Google, we store the access tokens and the ad-account, page and campaign data needed to analyse and manage your advertising.
  • Billing data: handled by Stripe; we store your plan, credit balance and invoices, not your card number.
  • Usage data: log, device and product-analytics data to keep the service secure and improve it.

Why we process it (legal bases)

To provide the service you requested and perform our contract with you (Art. 6(1)(b) GDPR); to keep the service secure and improve it, based on our legitimate interests (Art. 6(1)(f)); to comply with legal obligations such as tax law (Art. 6(1)(c)); and on your consent where required, e.g. non-essential cookies (Art. 6(1)(a)).

AI processing

oktai uses AI models to audit sites, generate ad creatives, videos, copy and landing pages from the brand context and assets you provide. We do not use your private brand content to train third-party foundation models, and we instruct our sub-processors not to retain it for training where they offer that option.

Sub-processors & sharing

We share data with vendors that run the service on our behalf, under data-processing agreements: cloud hosting and storage, AI model providers, Stripe (payments), and the advertising platforms you connect (Meta, Google). We do not sell your personal data.

International transfers

Some providers process data outside the EEA. Where they do, transfers are covered by an adequacy decision or the EU Standard Contractual Clauses.

Retention

We keep account and brand data for as long as your account is active and delete or anonymise it within a reasonable period after closure, except where we must retain records (e.g. invoices) to meet legal obligations.

Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing based on legitimate interests. To exercise these, email joshua@primepage.ai. You may also lodge a complaint with a supervisory authority.