Privacy Policy

1. Introduction

AIOAK Incorporation ("AIOAK", "we", "us") provides security services for software-based AI agents and firmware-driven hardware equipment. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our websites, register an account or organization, or engage our security services.

2. Information We Collect

• Account information — name, business email address, phone number, organization details, and role, provided during registration or login (including social sign-in).
• Engagement information — service requests, threat profiles, system and device descriptions, attachments, and communications you submit through our platform.
• Security assessment data — technical information about the systems, agents, and equipment you authorize us to assess, including configurations, logs, and vulnerability findings.
• Billing information — invoicing details required to administer engagements.
• Usage data — standard technical data such as IP address, browser type, and pages visited, used for security and service improvement.

3. How We Use Information

• To deliver, scope, and manage security engagements you request;
• To operate accounts, organizations, and access controls on our platform;
• To communicate about engagements, findings, invoices, and support requests;
• To send service notifications, such as job alerts or platform updates, which you can unsubscribe from at any time;
• To protect our platform against fraud, abuse, and unauthorized access;
• To comply with legal obligations.

4. Security Findings and Client Data

Vulnerability findings, assessment reports, and client system data are treated as confidential client information. We do not sell client data. Findings are shared only with the client's authorized personnel and are retained only as long as necessary to deliver the engagement and meet legal or contractual retention requirements.

5. Sharing of Information

We share information only with:

• Service providers who support our operations (e.g., hosting, email delivery) under confidentiality obligations;
• Authorized personnel within your organization, as directed by your account settings;
• Legal authorities where required by law, court order, or to protect rights, safety, or the integrity of our services.

6. Data Security

As a security company, we apply the standards we advise: encryption in transit, least-privilege access controls, audit logging, and segregation of client engagement data. No method of transmission or storage is completely secure, and we encourage clients to report any suspected issue to [email protected] immediately.

7. Data Retention

We retain account information for as long as your account is active. Engagement records and reports are retained for the period required to provide the Services, satisfy legal and audit obligations, and resolve disputes, after which they are deleted or anonymized. You may request deletion of your account data as described below.

8. Your Rights and Choices

• Access, correct, or update your account information at any time from your profile;
• Unsubscribe from notification emails using the link included in each message;
• Request a copy or deletion of your personal data by contacting [email protected];
• Depending on your jurisdiction, you may have additional rights under laws such as the GDPR or CCPA.

9. Cookies

We use cookies and similar technologies necessary for authentication, session management, and platform security, and limited analytics to improve our services. You can control cookies through your browser settings; disabling essential cookies may affect platform functionality.

10. Children's Privacy

Our services are intended for business use and are not directed to children under 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated revision date.

12. Contact Us

For privacy questions or requests, contact our team at [email protected] or via the contact form.