Privacy Policy

Welcome to aiga_ (“we”, “us”, “our”). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at aiga.io and our related services (collectively, the “Services”).

AI WORX LTD is the data controller responsible for your personal data. We are a company registered in the United Kingdom.

This Privacy Policy is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our Services, you acknowledge that you have read and understood this Privacy Policy.

We use your personal data for the following purposes:

• To provide and maintain our Services: Creating and managing your account, processing transactions, and delivering the features you request.
• To personalise your experience: Customising content and recommendations based on your preferences and usage patterns.
• To communicate with you: Sending service-related notifications, responding to your enquiries, and providing customer support.
• To improve our Services: Analysing usage patterns, conducting research, and developing new features.
• To ensure safety and security: Detecting and preventing fraud, abuse, and security incidents.
• To comply with legal obligations: Meeting regulatory requirements and responding to lawful requests from authorities.
• To send marketing communications: With your consent, sending promotional emails about new features, products, or offers. You can opt out at any time.

Under the UK GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our Services to you under our Terms of Service.
• Legitimate Interests: Processing for our legitimate business interests, such as improving our Services, preventing fraud, and ensuring security, provided these interests do not override your rights.
• Consent: Where you have given explicit consent, such as for marketing communications or optional data collection.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations.

We may share your personal data in the following circumstances:

• Service Providers: We work with third-party companies that help us operate our Services, including cloud hosting providers, payment processors, analytics services, and customer support tools. These providers are contractually obligated to protect your data.
• AI Service Providers: To generate game content, images, and narratives, we use AI services (such as OpenAI and image generation services). The content you create may be processed by these services.
• Other Users: If you choose to make your content public or share it with other users, that content will be visible to them.
• Legal Requirements: We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We do not sell your personal data to third parties.

We retain your personal data for as long as necessary to provide our Services and fulfil the purposes described in this Privacy Policy. Specifically:

• Account Data: Retained while your account is active and for a reasonable period afterwards in case you decide to reactivate.
• User-Generated Content: Retained while your account is active. You may delete your content at any time through your account settings.
• Transaction Records: Retained as required for accounting and legal purposes (typically 7 years).
• Usage Data: Generally retained in anonymised or aggregated form for analytical purposes.

When you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct inaccurate or incomplete personal data.
• Right to Erasure: You can request that we delete your personal data in certain circumstances.
• Right to Restriction: You can request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You can request to receive your personal data in a structured, commonly used format.
• Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time.

To exercise any of these rights, please contact us at the details provided in Section 12. We will respond to your request within one month as required by law.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. Visit ico.org.uk for more information.

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for the operation of our Services, such as maintaining your login session.
• Analytics Cookies: Help us understand how visitors interact with our Services so we can improve them.
• Preference Cookies: Remember your settings and preferences.

Most web browsers allow you to control cookies through their settings. However, disabling certain cookies may affect the functionality of our Services.

Our Services are hosted and operated in various locations, and your data may be transferred to, stored in, and processed in countries outside the United Kingdom, including the United States.

Where we transfer your personal data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Government, or transfers to countries with adequacy decisions.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and monitoring
• Access controls and authentication procedures
• Secure password hashing

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

Our Services are not intended for users under the age of 18. We do not seek or knowingly collect personal data from children under 13 years of age. If we become aware that we have collected personal data from a child without appropriate parental consent, we will take steps to delete that information promptly.

If you believe a child has provided us with personal data, please contact us immediately.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your enquiry as soon as possible and in any event within the timeframes required by applicable law.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will notify you by updating the “Last updated” date at the top of this policy and, where appropriate, by providing additional notice (such as an email notification or an in-app announcement).

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.