Privacy Policy

1. Scope and who we are

Aucot is operated by Volion's Bilişim ve Reklam Teknolojileri (“Aucot,” “we,” “us,” or “our”). We provide AI-assisted tools for creating marketing copy, product visuals, model imagery, logos, social media content, videos, background removal and image enhancement. Volion's Bilişim ve Reklam Teknolojileri is the data controller for personal information processed in connection with the Services unless a separate notice states otherwise. This Policy applies to the Aucot website, mobile applications, associated APIs, customer support and other services that link to this Policy (collectively, the “Services”).

This Policy does not apply to third-party websites, applications or services that you choose to access through links or integrations. Those parties process information under their own privacy notices.

2. Information we collect

Information you provide

• Account information: your name, email address, account identifier, profile details and authentication information.
• Creative inputs: prompts, instructions, uploaded product photographs, reference images, brand materials, logos, audio, video and other content you submit to create or edit an output.
• Generated content: images, text, videos, logos, drafts, variations and associated project settings produced through the Services.
• Communications: information included in support requests, feedback, surveys or other messages you send to us.
• Transaction information: plan, subscription status, purchase history, billing country and transaction identifiers. Our payment provider processes full card or payment credentials; Aucot does not intend to store complete payment card numbers.

Information collected automatically

• Device and network data: device type, operating system, browser, language, IP address, approximate region and app version.
• Usage data: features used, buttons selected, generation type, usage units, session timestamps, errors, performance information and referring pages.
• Security data: login events, authentication signals, suspected abuse indicators and records needed to protect accounts and the Services.
• Cookies and similar technologies: essential cookies or local storage used for sessions, security and preferences. If we introduce optional analytics or advertising cookies, we will provide controls where required.

Information from third parties

We may receive account details from an authentication provider if you choose sign-in through that provider; subscription and payment status from payment processors or mobile app stores; and technical or fraud-prevention signals from service providers. We receive only the information those providers are permitted to share based on your settings and their terms.

3. How we use information

We use information to:

• create and maintain your account, authenticate you and synchronize your subscription status;
• process prompts and uploaded content, generate outputs and save project history when that feature is enabled;
• calculate and display creative usage or video time, prevent duplicate charges and enforce plan limits;
• operate, maintain, personalize and improve the Services, including diagnosing errors and measuring feature performance;
• respond to support requests and send essential service, security, billing or policy notices;
• detect, investigate and prevent fraud, abuse, harmful activity, security incidents and violations of our Terms;
• comply with law, enforce agreements and establish, exercise or defend legal claims; and
• with your consent where required, send product news or marketing communications. You can opt out of promotional email at any time.

Legal bases

Where laws such as the GDPR or UK GDPR apply, we process information as necessary to perform our contract with you, pursue legitimate interests such as securing and improving the Services, comply with legal obligations, and obtain consent where required. You may withdraw consent at any time, without affecting processing completed before withdrawal.

4. AI processing and creative content

The Services use artificial intelligence and related processing systems to interpret your instructions and generate or transform content. To fulfill a request, your prompt, selected settings and uploaded references may be transmitted to specialized infrastructure or AI service providers acting for us.

• Do not upload information you are not authorized to use, confidential third-party materials, biometric identifiers, government identifiers, health records, financial account credentials or other highly sensitive personal information.
• Generated output may be inaccurate, incomplete, similar to existing material or unsuitable for a particular commercial purpose. You are responsible for reviewing output before publication or use.
• We may use limited service data, logs and feedback to evaluate safety, prevent abuse and improve product quality. We will not use private creative content to train generalized models unless our disclosures permit it and any consent required by law has been obtained.
• When a provider temporarily retains request data for security or abuse monitoring, that retention is governed by our agreement with the provider and applicable law.

5. How we share information

We do not sell your personal information. We may disclose information to the following categories of recipients:

• Infrastructure and AI providers that host data, process prompts, generate content, deliver media or monitor system reliability.
• Authentication, analytics and support providers that help us operate accounts, understand product performance and assist users.
• Payment providers and app stores that process purchases, manage renewals, handle refunds and report subscription status.
• Professional advisers and authorities when reasonably necessary to comply with law, protect rights or respond to valid legal process.
• Business transaction participants in connection with a merger, financing, acquisition, reorganization or sale of assets, subject to appropriate confidentiality protections.

We require service providers to process information only for agreed purposes and to apply appropriate safeguards. We may share aggregated or de-identified information that cannot reasonably identify you.

6. International data transfers

Aucot and its providers may process information in countries other than the country where you live. Where required, we rely on recognized transfer mechanisms such as adequacy decisions, standard contractual clauses or equivalent safeguards. You may contact us for information about the safeguards relevant to your data.

7. Data retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining transaction and entitlement records, resolving disputes, enforcing agreements, protecting security and meeting legal obligations.

• Account information is generally retained while your account remains active and for a limited period afterward.
• Creative projects and history are retained until you delete them, delete your account, or the relevant feature’s retention period expires.
• Temporary generation files may be removed sooner after processing or delivery.
• Billing, tax, fraud-prevention and legal records may be retained for the period required by applicable law.
• Backups may retain deleted information for a limited period before being overwritten or isolated from active systems.

Retention periods may vary based on the nature and sensitivity of the information, the risk of harm, technical requirements and applicable law.

8. Your choices and privacy rights

Depending on your location, you may have the right to request access, correction, deletion, portability or restriction of your personal information; object to certain processing; withdraw consent; or appeal a decision regarding a request. Where applicable, you may also object to direct marketing and request human review of a decision based solely on automated processing that produces legal or similarly significant effects. You may complain to your local data protection authority.

You can update certain account information through the Services. To submit another request, email hello@aucot.com. We may verify your identity and ask for information needed to locate your account. Authorized agents may submit requests where permitted, but we may require proof of authority and identity.

We will not discriminate against you for exercising a privacy right. Some rights are subject to exceptions, including where retention is required for security, fraud prevention, legal compliance or the establishment of legal claims.

9. Security

We use administrative, technical and organizational measures designed to protect information, including access controls, encrypted transport, service monitoring, authentication protections and restricted access to production systems. No online service can guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials and for promptly notifying us if you suspect unauthorized access.

10. Children

The Services are not directed to children under 13, and users must meet any higher minimum age required in their country to consent to online services. If you are under the age of legal majority, you may use the Services only with permission from a parent or legal guardian. If we learn that we collected personal information from a child in violation of applicable law, we will take reasonable steps to delete it.

11. Changes to this Policy

We may update this Policy to reflect changes in the Services, law or our practices. We will update the “Last updated” date and, when required, provide additional notice in the Services or by email. Material changes take effect on the date stated in the notice.