VANKIT.IO

Privacy Policy

Last updated: 16 February 2026

1. Introduction

VANKIT.IO is a product of YAKKT (“we”, “us”, “our”). We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services at vankit.io (the “Platform”).

2. Data Controller

The data controller responsible for your personal data is:

3. What Data We Collect

We collect and process the following categories of personal data:

3.1 Account Data

When you create an account via Google OAuth, we receive and store:

  • Your full name
  • Email address
  • Profile picture (Google account image)
  • Google account identifier

3.2 Usage Data

We automatically collect information about how you interact with our Platform:

  • Pages visited and features used
  • Design configurations created
  • Device type, browser, and operating system
  • IP address (anonymised)
  • Date and time of access

3.3 Payment Data

If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your credit card details. We receive from Stripe:

  • Stripe customer ID
  • Subscription status and plan
  • Billing period information

3.4 Waitlist Data

If you join a waitlist for upcoming features, we store your email address and the tool you expressed interest in.

4. How We Use Your Data

We use your personal data for the following purposes:

  • Service delivery: To provide, maintain, and improve our design tools and Platform
  • Account management: To create and manage your user account
  • Communication: To send you service-related notifications, updates about new features, and respond to your enquiries
  • Payment processing: To manage subscriptions and billing through Stripe
  • Analytics: To understand how our Platform is used and improve the user experience
  • Legal compliance: To comply with applicable laws and regulations

5. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

  • Contract (Article 6(1)(b)): Processing necessary for the performance of our contract with you (providing the Services)
  • Legitimate interests (Article 6(1)(f)): Processing necessary for our legitimate interests, such as improving our Platform and preventing fraud
  • Consent (Article 6(1)(a)): Where you have given consent, such as joining a waitlist or receiving marketing communications
  • Legal obligation (Article 6(1)(c)): Where processing is necessary to comply with a legal obligation

6. Data Sharing

We share your personal data with the following categories of third parties:

  • Supabase: Database hosting (data stored within the EU/EEA)
  • Vercel: Website hosting and analytics
  • Stripe: Payment processing
  • Google: Authentication services (OAuth)

We do not sell your personal data to third parties. We do not share your data with advertisers.

7. International Data Transfers

Some of our service providers may process data outside of the UK/EEA. Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO), or the recipient being in a country with an adequacy decision.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy:

  • Account data: Retained for as long as your account is active, and for up to 30 days after account deletion
  • Usage data: Retained for up to 24 months in anonymised/aggregated form
  • Payment data: Retained for up to 7 years as required by UK tax legislation
  • Waitlist data: Retained until the relevant feature launches or you withdraw consent

9. Your Rights

Under UK GDPR, you have the following rights:

  • Right of access: Request a copy of the personal data we hold about you
  • Right to rectification: Request correction of inaccurate personal data
  • Right to erasure: Request deletion of your personal data (“right to be forgotten”)
  • Right to restrict processing: Request that we limit how we use your data
  • Right to data portability: Request your data in a structured, machine-readable format
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at info@yakkt.com. We will respond to your request within 30 days.

10. Cookies

We use the following types of cookies:

  • Essential cookies: Required for authentication and core Platform functionality (e.g., session tokens)
  • Analytics cookies: Used to understand how visitors interact with our Platform (Vercel Analytics)

Essential cookies cannot be disabled as they are necessary for the Platform to function. You can manage your cookie preferences through your browser settings.

11. Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • Encryption of data in transit (TLS/HTTPS)
  • Encryption of data at rest
  • Regular security reviews of our systems
  • Access controls and authentication requirements

While we take reasonable steps to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

12. Children's Privacy

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated “Last updated” date.

14. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

15. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

See also our Terms of Service for the full terms governing your use of the Platform.