Privacy Policy

1. Who We Are

Techoai Ltd, a company incorporated in Hong Kong ("we", "us", "our"), is the data controller responsible for the personal data collected through the Techo.ai website, applications, and related services (collectively, the "Service"). You can reach us at support@techo.ai or +996 500 128 992.

2. Data We Collect

We may collect the following categories of personal data:

• Identity data — name, username, or similar identifier.
• Contact data — email address and, where provided, phone number.
• Account data — login credentials, preferences, and settings.
• Usage & technical data — IP address, browser type and version, device information, operating system, referral source, pages viewed, and interaction patterns.
• AI interaction data — queries you submit to the AI assistant and the responses generated, used to operate and improve the Service.
• Billing data — transaction records related to your purchases. Payment card details are collected and processed directly by Paddle.com, our Merchant of Record; we do not store your full card number.
• Communications — correspondence when you contact support or respond to surveys.

3. How We Use Your Data

We process personal data to:

• Provide, operate, and maintain the Service.
• Create and manage your account.
• Process transactions and send related information (via Paddle).
• Respond to support requests and communicate with you.
• Analyse usage to improve features, performance, and user experience.
• Detect, prevent, and address security issues, fraud, and abuse.
• Comply with legal obligations.
• Send marketing communications where you have given consent (you may opt out at any time).

4. Legal Bases for Processing

Where applicable data-protection law requires a legal basis, we rely on one or more of the following:

• Contract — processing necessary to provide the Service you requested.
• Legitimate interests — improving the Service, ensuring security, and preventing fraud, provided these interests are not overridden by your rights.
• Consent — where you have given explicit consent, for example for marketing emails or non-essential cookies.
• Legal obligation — compliance with applicable laws and regulations.

If you are located in the European Economic Area (EEA), Switzerland, or the United Kingdom, this section applies in accordance with the GDPR and equivalent local legislation.

5. Sharing Your Data

We do not sell your personal data. We may share data with the following categories of recipients:

• Paddle.com — as our Merchant of Record, Paddle collects and processes payment data, handles billing, issues receipts, and manages refunds. Paddle acts as an independent data controller for the data it collects during the checkout process. See the Paddle Privacy Notice for details.
• Hosting & infrastructure providers — to store and deliver the Service.
• Analytics providers — to understand usage patterns (data is aggregated or pseudonymised where possible).
• Professional advisers — legal, accounting, or audit professionals where necessary.
• Authorities — law enforcement or regulatory bodies where required by applicable law or to protect our rights.

6. International Data Transfers

Your data may be transferred to and processed in countries other than the one in which you reside. Where such transfers occur, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by relevant authorities, or reliance on an adequacy decision where available.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When data is no longer needed, it is securely deleted or anonymised.

8. Your Rights

Depending on your location and applicable law, you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten").
• Restrict or object to certain processing activities.
• Data portability — receive your data in a structured, commonly used format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at support@techo.ai. We will respond within the timeframe required by applicable law.

9. Children

The Service is not directed at individuals under the age of eighteen (18). We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. Cookies

We use cookies and similar technologies to operate and improve the Service. For full details on the cookies we use and how to manage them, please see our Cookie Policy.

11. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice on the Service. The "Effective date" at the top of this page indicates when the current version took effect.

13. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at support@techo.ai or call +996 500 128 992.