Privacy Policy

1. Introduction

Kansova AI Inc. ("Kansova," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the Kansova AI platform ("Service"). By using the Service, you consent to the practices described in this Policy.

2. Information We Collect

We collect the following categories of information:

• Account Information: Name, email address, profile picture, and billing information provided during registration via Google OAuth or directly.
• Inputs (Prompts): Text prompts, uploaded reference images, and other content you submit to generate AI Outputs.
• Outputs: Images, videos, and other content generated by the Service in response to your Inputs.
• Usage Data: Log data, IP address, browser type, device information, generation history, credit consumption, and interaction patterns with the Service.
• Payment Information: We do not store full credit card numbers. Payment processing is handled by our third-party payment processors (see Section 6).

3. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience, analyze traffic, and understand how users interact with the Service.

• Essential Cookies: Required for the Service to function (e.g., session authentication, security).
• Analytics Cookies: We use Google Analytics and Vercel Analytics to collect aggregated, anonymized usage data. This helps us understand feature usage and improve the Service.
• Preference Cookies: Remember your settings and preferences across sessions.

You can control cookie preferences through your browser settings. Note that disabling certain cookies may affect Service functionality.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Process transactions and manage subscriptions;
• Improve and optimize our AI models and generation quality;
• Communicate with you about updates, security alerts, and support;
• Detect and prevent fraud, abuse, or security incidents;
• Comply with legal obligations.

5. Data Storage and Retention

Inputs and Outputs. Your prompts and generated content are processed in real-time. We retain Outputs for 30 days from the date of generation so you can access and download them. After 30 days, Outputs are permanently deleted from our active systems. Inputs are not retained beyond the generation process.

Account Data. Account-related information (email, billing details, name) is retained for as long as your account is active. If you delete your account, we retain minimal records for 90 days for fraud prevention and legal compliance, after which they are permanently deleted.

Usage Logs. Server logs containing IP addresses and interaction data are retained for 90 days for security and debugging purposes, then automatically purged.

Payment Records. Transaction records are retained for 7 years as required by tax and accounting regulations.

Security Measures. All data transmission is encrypted in transit using TLS 1.3. We implement industry-standard security practices, including encryption at rest, access controls, and regular security audits, to protect your information from unauthorized access.

6. Third-Party Services

We use the following third-party service providers to operate the Service:

• Google OAuth: For authentication. Google receives your name, email, and profile picture. Subject to Google's Privacy Policy.
• Stripe: For payment processing. Stripe receives your payment method details and billing address. Subject to Stripe's Privacy Policy.
• Vercel: For web hosting and analytics. Subject to Vercel's Privacy Policy.
• Google Analytics: For traffic analysis. Subject to Google's Privacy Policy.

7. How We Share Your Information

We do not sell your personal information. We may share information only in the following limited circumstances:

• Service Providers: With trusted third-party vendors who assist us in operating the Service, subject to strict confidentiality obligations.
• Legal Compliance: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, in which case your information would be subject to the same privacy commitments.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request transfer of your data to another service provider.
• Objection: Object to certain types of processing, including profiling and direct marketing.
• Restriction: Request that we limit processing of your data in certain circumstances.

GDPR (EU/UK Users): If you are located in the European Union or United Kingdom, you have additional rights under the GDPR, including the right to lodge a complaint with your local data protection authority.

CCPA (California Users): California residents have the right to know what personal information we collect, the right to delete personal information, the right to opt-out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising privacy rights.

To exercise any of these rights, please contact us at privacy@kansova.com. We will respond to your request within 30 days.

9. International Data Transfers

Kansova AI operates globally. Your information may be transferred to and processed in countries other than your country of residence, including the United States. We ensure that such transfers are conducted in accordance with applicable data protection laws and that adequate safeguards are in place, including Standard Contractual Clauses where required.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this Policy periodically. Continued use of the Service after changes constitutes acceptance of the revised Policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@kansova.com or at: