Apr 23, 2025

Privacy statement

TokuGo AI Ltd. (“TokuGoᴬᴵ”, “we”, “us”, or “our”) is committed to protecting your privacy and ensuring that your personal data is handled lawfully, fairly, and transparently. This Privacy Statement explains how we collect, use, share, and protect personal information in compliance with UK GDPR, EU GDPR, and the UK Data Protection Act 2018.

1. Who We Are

TokuGo AI Ltd.
Company Number: 16526298
71–75 Shelton Street, Covent Garden, London, UK, WC2H 9JQ

Email: privacy@tokugo.ai

We operate TokuGo ᴬᴵ, the world’s first playable spatial commerce platform, combining AI, AR, and Web3 technologies to deliver immersive shopping experiences powered by TokuCoins.

2. Data We Collect

We may collect the following categories of personal data:

  • Identity Data: name, username, date of birth, and age (to verify eligibility).

  • Contact Data: email address, phone number, and postal address.

  • Account Data: login credentials, profile preferences, subscription details.

  • Transaction Data: TokuCoins balance, wallet address, purchase history, NFT ownership.

  • Technical Data: IP address, device identifiers, browser type, operating system.

  • Location Data: GPS or AR location data (with your explicit consent) for navigation and deal discovery.

  • Usage Data: in-app interactions, AR experiences, and engagement with offers.

  • Marketing Preferences: opt-ins for email, SMS, push notifications, or partner offers.

We do not knowingly collect or process personal data of children under 16 years of age.

3. How We Use Your Data

We process your personal data only when we have a lawful basis to do so. This includes:

  • Contractual necessity – to provide you with access to the TokuGoᴬᴵ platform, manage your account, and fulfill transactions.

  • Consent – for location-based AR services, personalized deals, marketing communications, and analytics.

  • Legitimate interests – to improve user experience, develop new features, protect against fraud, and ensure platform security.

  • Legal obligations – to comply with financial regulations, tax requirements, anti-money laundering (AML), and know-your-customer (KYC) obligations where applicable.

Examples of processing include:

  • Delivering personalized shopping recommendations powered by AI.

  • Managing TokuCoins transactions and Web3 wallet integrations.

  • Providing AR navigation and deal discovery services.

  • Running marketing campaigns, loyalty programs, and gamified experiences.

  • Ensuring compliance with regulatory and financial reporting requirements.

4. Sharing Your Data

We may share your data with:

  • Service Providers – cloud hosting, analytics, payment processors, AR/AI providers.

  • Web3 Infrastructure Partners – for wallet authentication, TokuCoins management, and NFT ownership verification.

  • Business Partners – retailers, brands, and advertisers participating on TokuGoᴬᴵ (only with your consent).

  • Regulators and Authorities – where required to comply with applicable laws.

We never sell personal data to third parties.

5. International Transfers

Where data is transferred outside the UK or EU (for example, to technology providers in the US), we ensure adequate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) approved by the EU Commission.

  • UK International Data Transfer Agreements (IDTAs).

  • Providers with adequacy decisions from the UK/EU.

6. Data Retention

We retain personal data only for as long as necessary:

  • Account and transaction data – for the duration of your account plus up to 7 years (legal/financial requirements).

  • Marketing data – until you withdraw consent or opt-out.

  • Location/AR session data – retained only during active sessions.

7. Your Rights

Under UK GDPR and EU GDPR, you have the following rights:

  • Access your personal data.

  • Correct inaccuracies.

  • Request erasure (“right to be forgotten”).

  • Restrict or object to processing.

  • Data portability (transfer of your data).

  • Withdraw consent at any time.

  • File a complaint with the ICO (UK Information Commissioner’s Office) or your local EU supervisory authority.

Requests can be made at privacy@tokugo.ai.

8. Security Measures

We apply robust technical and organisational measures, including:

  • End-to-end encryption (AES-256 at rest, TLS 1.3 in transit).

  • Zero Trust architecture for system access.

  • Role-based access controls with multi-factor authentication.

  • Independent security audits and smart contract reviews for TokuCoins.

  • Continuous monitoring of infrastructure for threats and breaches.

9. Updates to This Privacy Statement

We may update this Privacy Statement periodically to reflect changes in law, technology, or our services. Any updates will be published here with the revised “Last Updated” date.

10. Contact Us

For questions or to exercise your privacy rights, please contact:

TokuGo AI Ltd.
Company Number: 16526298
Address:
71–75 Shelton Street, Covent Garden, London, UK, WC2H 9JQ

Email: privacy@tokugo.ai