Privacy Policy

1. Introduction

Oko Labs Inc. d/b/a Litmusly ("Litmusly," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered UX testing platform. By using Litmusly, you agree to the collection and use of information in accordance with this policy.

Effective Date: January 5, 2026

2. Information We Collect

2.1. Information You Provide

• Account information (name, email, company, billing details)
• Product URLs and application interfaces for testing
• Persona definitions and user journey configurations
• Communications with our support team
• Payment information (processed securely through third-party providers)

2.2. Automatically Collected Information

• Usage data and platform interactions
• Device information (browser type, operating system, IP address)
• Log files and performance metrics
• Cookies and similar tracking technologies

2.3. AI Processing Data

• Screenshots and visual captures of tested interfaces
• User interaction patterns and journey data
• Simulation results and AI-generated insights
• Persona behavior analysis and scoring data

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To provide, maintain, and improve our UX testing services
• AI Processing: To generate UX insights using our AI models and vision technology
• Account Management: To manage your account, subscriptions, and billing
• Communication: To send service updates, security alerts, and marketing communications (with consent)
• Analytics: To analyze usage patterns and improve platform performance
• Security: To detect, prevent, and address technical issues and fraud
• Legal Compliance: To comply with legal obligations and enforce our terms

4. AI and Machine Learning

Litmusly uses artificial intelligence and machine learning technologies to analyze user interfaces and generate UX insights. You acknowledge and agree that:

• AI-generated insights are provided "as is" without warranties of accuracy or completeness
• AI results may contain errors, omissions, or hallucinations
• You are solely responsible for validating AI insights before making business decisions
• We may use aggregated, anonymized data to improve our AI models
• We do not use your proprietary data to train models for other customers without explicit consent
• AI processing involves third-party services (e.g., Google Gemini) subject to their own policies

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With trusted third parties who perform services on our behalf (e.g., payment processing, AI services, hosting)
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Legal Requirements: When required by law, court order, or government authority
• Protection of Rights: To protect our rights, property, or safety, or that of our users
• With Your Consent: When you explicitly authorize sharing

We do not sell your personal information to third parties for their marketing purposes.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security audits and vulnerability assessments
• Employee training on data privacy and security
• Compliance with SOC 2, ISO 27001, and other applicable standards

Disclaimer: Despite our efforts, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

• Account data: Retained while your account is active
• Simulation results: Retained according to your plan and account settings
• Payment data: Retained as required for tax and legal purposes
• Deleted accounts: Data is securely deleted within 30 days, except as required by law

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Objection: Object to certain processing activities
• Opt-Out: Opt-out of marketing communications

To exercise these rights, contact us at privacy@litmusly.com. We will respond within 30 days in accordance with applicable law.

9. International Data Transfers

Litmusly may transfer and process your information in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws, including the use of Standard Contractual Clauses (SCCs) and other legally approved mechanisms.

10. Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it immediately.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know what personal information we collect and use
• Right to delete your personal information
• Right to correct inaccurate personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

We do not sell personal information as defined by the CCPA. To exercise your rights, contact us at privacy@litmusly.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last Updated" date. Your continued use of the Service after such changes constitutes your acceptance of the updated policy.

13. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us: