Privacy Policy

VKTR is an AI tool from the AI division of Pro Technology Middle East, a Dubai company established in 1998 whose legal name is PRO TECHNOLOGY CO. (L.L.C.). “VKTR”, “we” and “us” mean PRO TECHNOLOGY CO. (L.L.C.); “you” means the person or business using VKTR.

PRO TECHNOLOGY CO. (L.L.C.)Trade licence no. 503784, Dubai Department of Economy and TourismShowroom No. 3, Mohamed Hilal Bin Tarraf, Sheikh Zayed Road, Al WaslP.O. Box 30562, Dubai, United Arab Emirates

When you open an image in the Studio, your own browser reads and converts it. It is not uploaded to us or to anyone else, and the files you download are made on your device too.

When you choose an image on the home page, your browser keeps that one file in its own storage (IndexedDB) so the Studio can open it on the next page. Only the latest image is kept: choosing another replaces it, and clearing this site's data in your browser removes it. We cannot see it.

If we add a feature that needs to send an image to a server, ours or a processing partner's, the Studio will tell you before anything is sent, and this policy will first be updated to say who receives it and why.

• +Technical data. Like any website, our hosting and network providers (Vercel and Cloudflare) receive your IP address, browser type and the pages you request, to deliver the site and protect it from abuse, and keep these logs for a limited time.
• +Your account. If you create one, Firebase Authentication (a Google service we use for sign-in) keeps your name, your email address, your password in a scrambled (hashed) form that nobody can read, whether your email is verified, and when you signed up and last signed in. If you sign in with Google, it receives the name and profile photo on your Google account instead, and the site shows them in its header. We use your email address to send the verification email when you sign up and the password-reset emails you ask for, through our email provider (Brevo). While you are signed in, each page checks your sign-in with Firebase, so Google also receives your IP address and browser type, and your Google profile photo, if you use one, loads from Google.
• +The sign-up page. Its name, email and password go to your account as above. Its company and newsletter choice are kept once tokens open (see below); its “I'm a” choice is not saved.
• +Messages. If you contact us, we keep your message and our reply so we can deal with your request.

We will then also keep, in our database (Supabase):

• +your plan, token balance and purchase history, and a record of your downloads (the date and file type, never the image);
• +your company, if you give it;
• +whether you want the newsletter. It is only sent if you opt in, and every email lets you unsubscribe.

Payments will be handled by Stripe, and we will never see or store your full card number. We will update this policy before payments open.

VKTR uses no advertising or analytics cookies and loads no third-party trackers. Our host or Cloudflare may set a strictly necessary cookie to check that a visitor is not an automated bot; it does not build a profile of you. The browser storage described under “Your images” stays on your device. The sign-in code keeps your sign-in in this browser's storage (IndexedDB) so you stay signed in, and a small record Firebase uses to run; signing out removes your sign-in. Visitors who are not signed in contact Google only when they open the sign-up window.

• +to provide VKTR and your account (our agreement with you);
• +to take payments, keep records and meet legal duties (legal obligation);
• +to keep the service secure and prevent abuse (our legitimate interests);
• +to send the newsletter (only with your consent, which you can withdraw at any time).

Only with providers who help run VKTR (hosting and network: Vercel and Cloudflare; sign-in: Google Firebase; email: Brevo; database and payments, once tokens open: Supabase and Stripe), under agreements that limit what they may do with it; with authorities when the law requires it; and with a buyer if the VKTR business is ever sold, who must then keep to this policy. We do not sell personal data, and we do not share it for advertising.

Some of these providers work outside the UAE. Where data leaves the UAE, we rely on the safeguards the law requires.

• +Account details: while your account is open. After you close it, we delete them, except what the law requires us to keep.
• +Payment and invoice records: as long as tax and accounting law requires, usually five years.
• +Messages: as long as needed to deal with them.

Depending on where you live, including under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and the EU and UK GDPR, you can ask to see the personal data we hold about you, correct it, delete it, receive a copy of it, object to or limit how we use it, and withdraw consent at any time. Contact us to do any of these and we will reply within 30 days. You can also complain to your local data protection authority.

The site is served only over HTTPS, and access to personal data is limited to those who need it. No system is perfectly secure: if a breach affects your data, we will tell you as the law requires.

VKTR is not meant for children under 13, and we do not knowingly collect their personal data.

We may update this policy, and the date at the top shows when it last changed. If a change materially affects account holders, we will tell them before it applies. See also the Terms of Service.

Email [email protected]. We aim to reply within 2 working days.