Privacy Policy

Last Updated: January 2026

Welcome to Luka AI. This Privacy Policy explains how Luka Technology Co., Ltd. (“Luka AI,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you visit our website and use our services.

By accessing our website or submitting information through our forms, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1Information We Collect

1.1 Information You Provide Directly

Waitlist Registration

  • Email address
  • Submission timestamp
  • Source of registration (website)

Distributor Partnership Application

  • Full name and job title
  • Email address and phone number
  • Organization/Company name and size
  • Partnership types and markets covered
  • Additional information (optional)

1.2 Information Collected Automatically

  • IP address, browser type, device information
  • Pages visited and time spent
  • Session cookies for website functionality
  • Analytics cookies for understanding site usage

2How We Use Your Information

Communication

  • • Send product updates and launch dates
  • • Respond to inquiries
  • • Process partnership applications

Service Improvement

  • • Analyze website usage
  • • Improve user experience
  • • Develop new features

Business Operations

  • • Manage waitlist
  • • Evaluate partnerships
  • • Comply with legal obligations

Legal Bases for Processing

We process your personal information based on one or more of the following legal grounds: (a) Your consent; (b) To perform a contract with you (e.g., to fulfill your waitlist request); (c) Our legitimate business interests, such as improving our Services and marketing, where such interests are not overridden by your rights; and (d) Compliance with legal obligations.

3Information Sharing

We do not sell, rent, or trade your personal information. We may share your information only with:

  • Service Providers:Companies that process information on our behalf under strict contractual terms that prohibit them from using your information for their own purposes (e.g., Supabase for data hosting, CDN providers for content delivery).
  • Third Parties:With your consent or at your direction, or as otherwise permitted by law.
  • Legal Requirements:When required by law or to protect our rights.
  • Business Transfers:In the event of a merger or acquisition.

4Data Security

We implement appropriate measures to protect your information:

SSL/TLS encryption for data transmission
Secure database storage with access controls
Regular security assessments
Employee training on data protection

5Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law (e.g., tax, accounting, legal obligations). Criteria used to determine retention periods include: the length of time we have an ongoing relationship with you, whether there is a legal obligation to which we are subject, and whether retention is advisable in light of our legal position (such as regarding statutes of limitations).

6Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your data
Correction: Request data corrections
Deletion: Request data deletion

7Children's Privacy

7.1 Age Restrictions

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent.

7.2 Verifiable Parental Consent

Before collecting, using, or disclosing personal information from a child under 13, we will obtain verifiable consent from the child's parent or guardian. Our methods may include:

  • Requiring a parent to complete and return a signed consent form via mail, email, or secure online portal.
  • Having a parent use a credit card, debit card, or other online payment system in connection with a nominal transaction for verification.
  • Taking calls from parents on a toll-free number staffed by trained personnel.
  • Any other method reasonably designed to ensure the person providing consent is the child's parent.

7.3 Parental Rights

Parents have the right to:

  • Review their child's personal information we have collected.
  • Request deletion of their child's personal information.
  • Refuse further collection or use of their child's information.
  • Revoke their consent at any time.

To exercise these rights, parents should contact us using the information in Section 12 (“Contact Us”). We will take steps to verify the requester's identity as the parent before responding.

8International Data Transfers

If you are accessing our website from outside the country where our servers are located, your information may be transferred to and processed in a different country. We ensure appropriate safeguards are in place.

9Third-Party Links

Our website may contain links to third-party websites and social media platforms (Instagram, TikTok, X, Facebook, YouTube). We are not responsible for the privacy practices of these third parties.

10Regional Privacy Rights

California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights:

  • Right to Know: Request, up to twice in a 12-month period, the categories and specific pieces of personal information we have collected, used, disclosed, and “sold” or “shared” about you.
  • Right to Delete: Request deletion of your personal information we have collected, subject to certain exceptions.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Opt-Out: Opt-out of the “sale” or “sharing” of your personal information, and to limit the use of your “sensitive personal information” for certain purposes.
  • Right to Non-Discrimination: Not to receive discriminatory treatment for exercising your privacy rights.

“Do Not Sell or Share My Personal Information”

We do not sell personal information for monetary consideration. However, under the broad CCPA definitions, sharing information with certain third-party advertising partners for targeted advertising may be considered a “sale” or “sharing.” California residents can opt-out of such activities by clicking “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” link on our website and following instructions.

Exercising Your Rights

To exercise your rights, please submit a verifiable request by emailing us at info@luka.world. We will respond within 45 days and may need to verify your identity. You may use an authorized agent to submit a request, provided they have your signed permission and you verify your identity with us directly.

Other State Laws

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights. Please contact us to inquire about exercising rights under your state's law.

European (GDPR)

Users in the EEA and UK have rights including access, rectification, erasure, restriction, portability, and the right to object.

11Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the “Last Updated” date.

12Contact Us

If you have any questions about this Privacy Policy, please contact us:

Luka Technology Co., Ltd.

Email: info@luka.world

We will respond to your inquiry within 30 business days.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.