Last Updated: July 18, 2026

Who we are

Ookulli OÜ ("we", "our", "us", or "Ookulli") is committed to protecting and respecting your privacy. We are a company registered in Estonia under company number 17155053. Our registered office is located at Angerja tn 4-8, 10412, Põhja-Tallinna linnaosa, Tallinn, Harju maakond, Estonia.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (www.ookulli.com) and our document review service (together, the "Service").

What information we collect

We collect information you provide directly to us, including:

Account registration information (name, email address, password)
Documents and files you upload for analysis
Messages and questions you send through the interactive chat feature
Payment information (processed securely by our payment provider — we do not store card details)
Communications you send to us (e.g., support emails)

We also collect information automatically when you use the Service:

Log data (IP address, browser type, pages visited, time spent)
Device information (device type, operating system)
Cookies and similar tracking technologies (see our Cookie Policy in the Website Terms)
Anonymous, aggregated usage statistics collected without cookies (PostHog). This runs on the basis of our legitimate interest in understanding how our website performs: no data is stored on your device, IP addresses are truncated (final octet removed) so they no longer identify you, on-page text is masked, no session recordings are made, and "Do Not Track" browser settings are respected. Analytics cookies and session replay are only activated if you accept them via the cookie banner.

How we use your information

We use the information we collect to:

Provide, maintain, and improve the Service
Process your document analysis requests
Manage your Account and process payments
Send you transactional emails (account confirmation, analysis complete, receipts)
Respond to your support requests
Monitor and analyse usage patterns to improve the Service
Comply with legal obligations

Your documents and AI training

We do not use your uploaded documents to train AI models. Your contracts and documents are processed in real time to generate your analysis and are not retained for the purpose of improving our AI models. We treat your documents as confidential.

How we share your information

We do not sell your personal data. We may share your information with:

Service providers: Companies that help us deliver the Service (e.g., cloud hosting, payment processing, analytics). These providers are contractually required to protect your data and may only use it as directed by us.
Legal requirements: We may disclose your information if required by law, court order, or government authority.
Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Data retention

We retain your Account information for as long as your Account is active. Uploaded documents are retained only as long as necessary to provide the analysis and are deleted thereafter. You may request deletion of your data at any time by contacting us at hello@ookulli.com.

Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data ("right to be forgotten")
Object to or restrict our processing of your data
Request portability of your data
Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, contact us at hello@ookulli.com.

International data transfers

Our services are hosted on AWS infrastructure. Data may be processed outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the relevant authorities. Our analytics provider (PostHog Inc.) processes usage data in the United States and is certified under the EU-U.S. Data Privacy Framework and its UK Extension, in addition to relying on standard contractual clauses.

Security

We take the security of your data seriously. We are AWS Well-Architected and have undergone a security review by StormIT. We use encryption in transit (TLS) and at rest. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Children

The Service is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. The date at the top of this policy indicates when it was last updated.

Contact

If you have questions or concerns about this Privacy Policy, please contact us at hello@ookulli.com.