Privacy Policy

Effective 3 August 2026

This policy explains what UNLIKE ANOTHER LLC ("Vooka", "we", "us") does with personal information when you use vooka.studio and the Vooka platform.

We have written it to be read, not to be survived. If anything here is unclear, email privacy@vooka.studio and we will explain it in plain language.

1. The most important thing: we serve writers, not readers

Vooka is a tool for authors. That produces two different relationships, and they are governed differently.

Your data — we are the "controller". Your account, your books, your billing. We decide what to collect and why, and this policy governs it.

Your readers' data — we are only the "processor". If you build a mailing list or a landing page, the people who sign up are *your* audience, not ours. You decide what to collect and what to send them; we only carry out your instructions. We do not market to them, do not sell their details, and do not use them for anything except running the features you asked for.

This is deliberate. Emails to your readers go out through your own sending account, from your own domain, and replies land in your inbox. Your landing pages can run on your own domain. We never insert ourselves between an author and their audience.

If you are a reader who signed up through an author's page and you want your data removed, contact that author. You can also unsubscribe from any email using the link it contains, or write to privacy@vooka.studio and we will pass your request to the author and act on their instruction.

2. What we collect

You give us:

• Account — name, email address, password (stored by our authentication provider as a

cryptographic hash; we never see it).

• Billing — handled entirely by Stripe. We store a customer reference, your plan, and

your token balance. We never see or store your card number.

• Your work — the books, outlines, images, covers and marketing material you create,

plus the prompts and instructions you give the AI.

• Connected accounts — where you choose to connect them: Amazon Advertising, Amazon KDP,

your email sending provider, and social accounts. See section 4.

• Support messages you send us.

We collect automatically:

• Usage — which features you use, when, and whether they succeeded. Used to run the

service, find faults, and bill token consumption accurately.

• Technical — IP address, browser and device type, and error reports (via Sentry).
• Cookies — see section 8.

We do not collect health data, biometrics, precise location, government identifiers, or anything about your race, religion, politics, sexuality or trade union membership. We do not knowingly collect data from anyone under 18.

3. Why we use it, and our lawful basis

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done so.

4. Acting on your behalf

Several features work by acting as you on another platform. Each is off until you explicitly connect it, and each can be disconnected at any moment from Settings.

• Amazon Advertising — you authorise us through Amazon's own login screen. We then read

your campaign performance and, in the autonomy mode *you* choose, adjust bids, keywords and budgets. We never see your Amazon password.

• Amazon KDP — our browser extension captures your KDP session so we can read your own

sales, royalty and page-read reports. Those credentials are encrypted and used for nothing else. Amazon offers no API for this data; this is the only way to show you your own numbers.

• Your email provider — you supply credentials for your own sending account (for example

Resend, or any SMTP provider). We use them only to send the emails you create. They are encrypted at rest.

• Social accounts — where connected, we post only what you schedule, only to the accounts

you pick.

All connected credentials are encrypted at rest. Deleting the connection deletes them.

5. Who we share it with

We share personal data only with service providers who help us run Vooka, each bound by contract to use it only on our instructions. Current subprocessors:

Our AI providers are contractually barred from training their models on your content, and neither do we. Your book is yours.

We also disclose data if the law requires it, to enforce our Terms, to prevent fraud or harm, or to a buyer if the business is ever sold — in which case you will be told before your data moves.

6. Where your data goes

We are based in the United States and most of our providers are too. If you are in the European Economic Area, the UK or Switzerland, your data will be transferred to the US. We rely on the EU-US Data Privacy Framework where our provider is certified, and on the European Commission's Standard Contractual Clauses otherwise.

7. How long we keep it

8. Cookies

We use only what the service needs to work: a session cookie to keep you signed in, and security cookies to prevent forgery. We use no advertising cookies and no third-party trackers. Because we set no non-essential cookies, there is nothing to consent to and nothing to opt out of.

Landing pages you publish set no cookies at all unless you add something that does — which is your responsibility as their controller.

9. Your rights, and how to use them

Wherever you live, you can ask us to:

• See the personal data we hold about you
• Correct anything wrong
• Delete your account and data
• Export your data in a portable format
• Object to or restrict how we use it
• Withdraw consent at any time, without affecting what happened before

In the EEA/UK these are your GDPR rights, and you may also complain to your national data protection authority — in Spain, the *Agencia Española de Protección de Datos* (aepd.es).

In California you may additionally ask what categories we collected, disclosed and to whom, and you are entitled not to be discriminated against for exercising any right. We do not sell or share personal information as those terms are defined by the CCPA/CPRA.

How to delete your data

Two ways, both free and neither requiring you to ask permission:

1. By email — write to privacy@vooka.studio from your account address, and we erase your

account and content within 30 days.

1. In the app, for connected services — Settings → Integrations → Disconnect destroys the

stored credentials for that service immediately, and you can delete the advertising data we synced from it at the same time.

A one-click "delete my whole account" button in the app is not built yet. Until it is, the email route above is the way, it is free, and we do not ask you why.

We never charge for a deletion request and never require you to speak to anyone first. Deleting your account also disconnects every linked service and destroys the stored credentials. Data we must retain for tax law (invoices) is kept, and nothing else.

We respond to all requests within 30 days.

10. How we protect it

Encryption in transit (TLS) and at rest; credentials for connected services encrypted with a separate key; row-level database isolation between organisations; least-privilege access; rate limiting and abuse protection; audit logging on sensitive actions. No system is perfectly secure, and we will not pretend otherwise — but if a breach affects you, we will tell you and the relevant regulator within 72 hours.

11. Children

Vooka is for adults. We do not knowingly collect data from anyone under 18, and will delete it promptly if we discover we have.

12. Changes

If we change this policy materially we will email you and post a notice in the app at least 14 days before it takes effect. The date at the top always shows the current version.

13. Contact

UNLIKE ANOTHER LLC

Privacy questions and requests: privacy@vooka.studio Everything else: support@vooka.studio