This Privacy Policy explains how **HAI INVESTMENT LTD** ("HAI INVESTMENT LTD," "Liko," "we," "us," or "our") collects, uses, discloses, and protects personal data when you use the **Liko** mobile application, identified as **com.liko.orgapp**, and related services (collectively, the "Service").
HAI INVESTMENT LTD is the controller of personal data processed for the purposes described in this Policy, except where another party independently determines how it processes your data.
## 1. Information We Collect
### 1.1 Account and profile information
We may collect:
- your internal user and authentication identifiers;
- your display name or name derived from a connected public social profile;
- language, country, and time-zone preferences;
- account status, settings, and support communications; and
- records associated with account creation, authentication, suspension, and deletion.
Liko does not ask for or store your Instagram or TikTok password.
### 1.2 Connected social profile and public content data
When you connect, verify, or monitor a social profile, we may collect and process information that is publicly available on Instagram, TikTok, or another supported platform, including:
- platform, username, platform user ID, display name, profile image, biography, website, category, and verification status;
- follower, following, and content counts;
- public posts, videos, captions, thumbnails, publication dates, and public links; and
- public performance information such as likes, comments, views, and historical snapshots.
To confirm profile control, we may generate a temporary code and check whether you placed that code in the profile's public biography. We record verification status and related timestamps.
We collect public social data through supported integrations and service providers. Availability and accuracy depend on the relevant platform and data provider.
### 1.3 Campaign data
We collect campaign details such as the connected profile, selected content, objective, audience preferences, credit budget, duration, status, review result, delivery progress, performance, and refund or stop history. Campaign materials may be reviewed automatically, including by AI systems, for safety, eligibility, and quality.
### 1.4 Purchases, credits, and transaction data
We collect information needed to validate and administer in-app purchases, including:
- product and package identifiers;
- app store, purchase, and transaction identifiers;
- purchase, refund, reversal, and validation status;
- Liko credit balance and credit transaction history; and
- credits reserved, used, returned, or spent in campaigns and Studio features.
Payments are processed by Apple App Store or Google Play. We do not directly receive or store your full payment card details.
### 1.5 Studio and AI data
When you use Liko Studio, we may collect and process your prompts, chat messages, tool selections, connected public profile context, selected public content, generated responses, usage history, and credit usage. This information may be sent to an AI service provider to generate a response.
Do not submit passwords, payment card details, health data, government identifiers, or other sensitive or confidential information to Studio.
### 1.6 Device, network, and diagnostic data
We may collect:
- device and installation identifiers;
- IP address and approximate country derived from network information;
- device type, operating system, app version, platform, language, and time zone;
- notification identifier and notification delivery or interaction events;
- app interactions, feature usage, screens viewed, session events, and campaign actions;
- crash, error, performance, security, and diagnostic information; and
- advertising identifier or similar tracking information where available and permitted.
Depending on your device and consent choices, analytics or advertising SDKs may receive device or usage information. On iOS, we request permission through Apple's App Tracking Transparency framework before accessing data or engaging in tracking where that permission is legally or technically required. Refusing tracking permission does not prevent you from using Liko's core features.
### 1.7 Information you provide to us
We collect information you submit in support requests, complaints, refund inquiries, legal requests, surveys, or other communications, including attachments you choose to provide.
## 2. How We Use Information
We use personal data to:
- create, authenticate, secure, and manage your account;
- connect and verify social profiles;
- provide profile insights and monitor public performance data;
- create, review, deliver, manage, and report on campaigns;
- provide Studio and AI-assisted features;
- validate purchases, maintain your credit balance, and prevent duplicate or fraudulent transactions;
- send service, campaign, credit, security, and optional promotional notifications according to your settings;
- personalize language, content, and app experience;
- understand usage, diagnose problems, maintain performance, and improve the Service;
- detect abuse, fraud, security incidents, and violations of our Terms;
- respond to support requests and enforce our agreements; and
- comply with legal, tax, accounting, regulatory, and app-store obligations.
We do not sell followers, likes, or other engagement, and we do not use your social media credentials to act as you on a connected platform.
## 3. Legal Bases
Where applicable law requires a legal basis, we rely on one or more of the following:
- **Contract:** processing needed to provide the Service you request, including account, campaign, credit, purchase, and Studio functions.
- **Legitimate interests:** securing and improving the Service, preventing fraud, understanding product performance, providing support, and operating our business, where those interests are not overridden by your rights.
- **Consent:** optional push notifications, certain analytics or tracking activities, and other processing where consent is required. You may withdraw consent through device or app settings, without affecting earlier lawful processing.
- **Legal obligation:** processing necessary to comply with applicable law, lawful requests, tax, accounting, consumer protection, and regulatory obligations.
- **Legal claims and vital interests:** establishing or defending legal claims and protecting users, third parties, or the Service where permitted by law.
## 4. How We Share Information
We may disclose personal data to the following categories of recipients only as needed for the purposes described in this Policy:
- **Cloud hosting and infrastructure providers** that store data, operate databases, deliver network services, or support application security.
- **Social data and integration providers**, including providers used to retrieve public Instagram or TikTok profile and content information, such as RocketAPI.
- **AI service providers**, which may include Anthropic or OpenAI-compatible providers, to process Studio prompts, public profile context, selected content, and campaign-review inputs.
- **Purchase and app-store providers**, including Apple, Google, and RevenueCat, to process, validate, restore, refund, and administer in-app purchases.
- **Notification providers**, including OneSignal, to associate an app installation with notification delivery and interaction events.
- **Analytics and SDK providers**, which may include Google Firebase and Meta/Facebook technologies, to measure app usage, performance, attribution, and campaign-related events, subject to applicable permissions and settings.
- **Professional advisers and authorities**, including lawyers, auditors, accountants, insurers, regulators, courts, law enforcement, or tax authorities where reasonably necessary or legally required.
- **Corporate transaction participants** in connection with an actual or proposed merger, financing, acquisition, restructuring, insolvency, or sale of assets, subject to appropriate confidentiality and legal safeguards.
Service providers may process data only under our instructions for contracted purposes, unless they act as independent controllers under their own terms or applicable law. We do not sell your personal data for money. Some SDK activity may be considered "sharing," "targeted advertising," or "tracking" under certain privacy laws; where required, we provide consent or opt-out controls.
## 5. International Data Transfers
We and our service providers may process personal data in countries other than the country where you live. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for international transfers, such as contractual protections, adequacy decisions, or another legally recognized transfer mechanism.
## 6. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Service, comply with legal and app-store requirements, maintain transaction integrity, resolve disputes, enforce agreements, prevent fraud, and protect security.
Retention periods depend on the type of information and why it is processed. For example:
- active account, connected-profile, campaign, insight, and Studio information may be retained while your account is active and for a limited period afterward;
- public profile and content data may be refreshed, replaced, or removed as it changes or is no longer needed;
- purchase, wallet, refund, tax, accounting, fraud-prevention, and dispute records may be retained for longer periods required or permitted by law;
- security logs and backups may remain for limited operational cycles before deletion or overwriting; and
- support and legal communications may be retained while a request or dispute remains open and afterward as needed for legal claims.
When you delete your account, we deactivate the account, disconnect linked social profiles, invalidate active authentication tokens, and remove or clear certain directly identifying account information. Some campaign, purchase, wallet, security, anti-fraud, and operational records may remain where required or reasonably necessary for the purposes above. Retained information is restricted and deleted or anonymized when it is no longer needed.
## 7. Your Choices and Rights
Depending on where you live, you may have the right to:
- request access to or a copy of your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of personal data;
- object to or request restriction of certain processing;
- withdraw consent where processing relies on consent;
- request portability of certain data;
- opt out of certain targeted advertising, sharing, sale, or profiling where applicable; and
- complain to a competent data-protection authority.
You may manage notification categories in Liko and may disable push notifications in your device settings. You may manage app tracking permission in iOS settings and reset or limit advertising identifiers through your device settings.
You can request account deletion through the in-app deletion function. You may also exercise a privacy right by emailing **battalaydin36@gmail.com**. Please describe your request and the account or profile involved. We may need to verify your identity and authority before acting. We will not discriminate against you for exercising a privacy right.
These rights may be limited by applicable exceptions, including where data must be retained for legal compliance, transaction records, fraud prevention, security, or legal claims.
## 8. Security
We use reasonable technical and organizational measures designed to protect personal data, such as access controls, authentication controls, transport security, restricted service credentials, and monitoring. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.
You are responsible for securing your device and promptly notifying us if you suspect unauthorized account access.
## 9. Children
Liko is intended only for people aged 18 or older. We do not knowingly collect personal data from children under 18. If you believe a child has provided personal data through the Service, contact us at **battalaydin36@gmail.com** so we can investigate and take appropriate action.
## 10. Third-Party Platforms and Links
The Service may contain links to, display information from, or interact with third-party platforms. This Policy does not govern the independent privacy practices of Instagram, Meta, Facebook, TikTok, ByteDance, Apple, Google, or other third parties. Review their privacy notices before using their services.
Liko is not sponsored, endorsed, administered by, or affiliated with Instagram, Meta, Facebook, TikTok, ByteDance, Apple, or Google.
## 11. Automated Processing
We may use automated systems, including AI, to review campaign eligibility, detect abuse or fraud, prioritize security events, and generate Studio output. A campaign may be rejected or limited based on an automated review. Where applicable law grants a right concerning a decision based solely on automated processing that produces legal or similarly significant effects, you may contact us to request information or human review.
AI outputs are suggestions and should be reviewed by you before use.
## 12. Changes to This Policy
We may update this Privacy Policy to reflect changes to the Service, law, or our practices. We will update the effective date and provide additional notice where changes are material or where required by law. We encourage you to review this Policy periodically.
## 13. Contact Us
For privacy questions, requests, or complaints, contact:
**HAI INVESTMENT LTD**
Email: **battalaydin36@gmail.com**
You may also have the right to contact the data-protection authority in the country where you live or work.