Privacy Policy

Last updated: 19 June 2026

⚠️ Template, have a qualified lawyer review this before you rely on it. This document is a starting point tailored to LOKIO's business. Because you operate across the UK and the Gulf (UAE, KSA, Qatar), a data-protection professional should confirm it against UK GDPR, the UAE Federal Decree-Law No. 45 of 2021 (PDPL), the Saudi PDPL, and any other applicable law before publishing.

This Privacy Policy explains how LOKIO ("we", "us", "our") collects, uses and protects personal data. It applies to our website and to the AI concierge services we provide to business clients.

1. Who we are & our two roles

LOKIO provides AI-powered WhatsApp concierge assistants for businesses. We handle personal data in two distinct roles:

As a data controller, for visitors to our website and prospective clients (e.g. people who contact us, use the site chatbot, or request a demo).
As a data processor, for the end-customer data we process on behalf of our business clients when their AI agent handles conversations. In that case the business client is the data controller and their own privacy policy and instructions govern that data.

2. Data we collect

Website & enquiries (we are controller):

Contact details you give us (name, business name, email, phone, sector).
Messages you send us via the site chatbot, email or messaging apps.
Technical & usage data (IP address, device/browser, pages viewed) via analytics and cookies.

Service delivery (we are processor for our clients):

The content of conversations between a client's customers and the AI agent (which may include names, contact numbers, booking details and anything the customer chooses to share).
We process this only to provide the service to that client, on their instructions.

3. How we use data & our legal bases

Purpose	Legal basis (UK GDPR)
Respond to enquiries and provide demos	Legitimate interests / steps prior to a contract
Provide, operate and support the service	Performance of a contract
Billing and accounting	Legal obligation / contract
Improve and secure the service; prevent abuse	Legitimate interests
Marketing communications (where relevant)	Consent / legitimate interests

Under the UAE and KSA PDPLs, processing is likewise carried out on the equivalent lawful grounds (consent, contract, legitimate/legal purposes).

4. Sub-processors we rely on

We use trusted third parties to run the service. Each processes data only as needed:

Anthropic, the AI model that powers the assistant.
Cloudflare, proxy, security and delivery.
Our website host, serving the site.
Meta / WhatsApp Business Platform, message delivery on WhatsApp.
Our payment processor, subscription billing (we do not store full card details).
Our analytics provider, anonymised/aggregated usage insight.

5. International transfers

Some providers process data outside your country. Where required, we rely on appropriate safeguards (e.g. UK/EU Standard Contractual Clauses or equivalent transfer mechanisms) and, for regional clients, offer regional storage arrangements where feasible.

6. How long we keep data

We keep enquiry and account data for as long as needed for the purpose collected and to meet legal/accounting obligations, then delete or anonymise it. Conversation data processed on behalf of clients is retained per that client's instructions and our service agreement, and deleted on request or on termination.

7. Security

We use encryption in transit, access controls, and keep API credentials on secured servers (never in client-side code). No system is perfectly secure, but we take reasonable and appropriate measures to protect personal data.

8. Your rights

Depending on your location (UK GDPR, UAE PDPL, KSA PDPL), you may have the right to: access your data; correct it; erase it; restrict or object to processing; data portability; and withdraw consent. To exercise any right, email lokio.ai.chat@gmail.com. You also have the right to complain to your local data-protection authority (e.g. the UK ICO, the UAE Data Office, or SDAIA in Saudi Arabia).

9. Cookies

We use essential cookies to run the site and, where enabled, analytics cookies to understand usage. You can control cookies through your browser settings.

10. Children

Our services are for businesses and are not directed at children. We do not knowingly collect children's data.

11. Changes

We may update this policy; the "last updated" date shows the latest version. Material changes will be highlighted on this page.

12. Contact

Questions or requests: lokio.ai.chat@gmail.com.