Privacy Policy

Last updated: July 23, 2026

This policy explains what data CTA Studio (operated by Oktra, "we") processes when you use our website, web editors and mobile application, and why. Short version: no account, no e-mail, no password, no ads, no sale of data.

1. Data we process

• Anonymous access code. On first launch the app generates a random code (CTA-XXXX-XXXX-XXXX) stored on your device (iOS Keychain) and on our backend with its credit balance. It contains no personal information and is not linked to your identity.
• Purchase records. When you buy a render pack, the payment is processed by the platform store (App Store). We receive the store transaction identifier and product identifier through a purchase-validation service to credit your balance — never your name, address or payment details.
• Your creative assets. Logos, images and text you add to a template are processed to render your video. They stay in your editing session/config; we do not mine or reuse them.
• Basic web analytics. The landing site uses aggregated, cookie-less page metrics (no cross-site tracking, no advertising identifiers).

2. What we do NOT collect

• No name, e-mail address, phone number or account profile.
• No precise location, contacts, or photo library contents — the app only adds your rendered videos to your Photos with write-only permission.
• No advertising trackers, no data brokers, no sale or rental of data to third parties.

3. Third-party processors

• Platform store — in-app purchase payments and refunds (see the store provider's privacy policy).
• Purchase validation service — validates store transactions and attributes them to your anonymous code.
• Database hosting — our backend database (code, balance, purchase ledger).
• Website hosting & analytics — website and editor hosting, plus anonymous aggregated page metrics.

4. Retention & deletion

• Your code and balance are kept as long as needed to provide the service.
• Regenerating your code in the app immediately disables the old one.
• To delete your data entirely, e-mail us your code at contact@oktra.dev and we will erase the account and its ledger. Note that deletion forfeits any remaining balance.

5. Security

The code is stored in the device Keychain, transmitted over HTTPS only, and can be rotated at any time from the app if you believe it leaked. Server-side, balances are only mutated by verified store transactions and renders.

6. Children

The Service is not directed at children under 13 (or the minimum age in your country) and we do not knowingly process their data.

7. Your rights

Depending on your jurisdiction (e.g. GDPR, CCPA), you may have rights of access, rectification, deletion and portability. Since the only identifier we hold is your anonymous code, include it in your request so we can locate the data: contact@oktra.dev.

8. Changes

We may update this policy; the "Last updated" date above reflects the latest version. Material changes will be highlighted on this page.

9. Contact

contact@oktra.dev — or visit our support page.