Privacy Policy

1. CONTROLLER INFORMATION

For EU data subjects, KANU AI CORP serves as the data controller for personal information processed through our Service.

2. INFORMATION WE COLLECT

2.1 Personal Information You Provide

We collect personal information you voluntarily provide when you:

• Create an account or register for our Service
• Make a purchase or subscribe to our services
• Contact us for customer support
• Participate in surveys, promotions, or feedback requests
• Upload content or use our website building tools

Categories of personal information include:

• Identity Information: Name, username, email address, phone number
• Contact Information: Billing address, shipping address, business information
• Payment Information: Credit card details, billing information, transaction history
• Account Information: Account preferences, subscription details, usage history
• Content Information: Website content, images, text, designs you create or upload
• Communication Information: Messages, support tickets, feedback you send us

2.2 Information Automatically Collected

When you use our Service, we automatically collect:

• Technical Information: IP address, browser type, device information, operating system
• Usage Information: Pages visited, features used, time spent, click patterns
• Performance Information: Load times, errors, system performance metrics
• Location Information: General geographic location based on IP address
• Cookie Information: Data from cookies and similar tracking technologies

2.3 Information from Third-Party Sources

We may receive information about you from:

• Analytics Providers: Google Analytics, PostHog analytics platform
• Advertising Platforms: Facebook Pixel data, advertising partners
• AI Service Providers: OpenAI (ChatGPT), Anthropic (Claude), Google (Gemini)
• Infrastructure Providers: Vercel, Amazon Web Services (AWS)
• DNS Providers: Entri DNS services
• Payment Processors: Stripe, PayPal, and other payment service providers
• Social Media Platforms: If you connect social media accounts
• Public Sources: Publicly available information that helps us verify or supplement our records

3. HOW WE USE YOUR INFORMATION

3.1 Primary Purposes

We use your personal information for the following purposes:

Service Provision:

• Providing, operating, and maintaining our AI website builder platform
• Processing your transactions and managing your account
• Creating, hosting, and managing websites you build through our Service
• Providing customer support and technical assistance
• Authenticating your identity and managing account security

AI and Machine Learning:

• Training and improving our artificial intelligence models and algorithms
• Generating website content, designs, and recommendations
• Analyzing usage patterns to enhance our AI capabilities
• Developing new AI-powered features and functionality

Business Operations:

• Processing payments and managing billing
• Sending transactional communications and service updates
• Analyzing Service usage and performance
• Conducting research and development
• Maintaining security and preventing fraud

Marketing and Communication:

• Sending promotional materials and product updates (with your consent)
• Personalizing your experience and providing targeted content
• Conducting surveys and gathering feedback
• Managing promotional campaigns and contests

3.2 Legal Bases for Processing (GDPR)

For EU data subjects, our legal bases for processing include:

• Contract Performance: Processing necessary to perform our agreement with you
• Legitimate Interests: Our legitimate business interests in operating and improving the Service
• Consent: Where you have provided explicit consent
• Legal Obligation: Where required by applicable law

4. HOW WE SHARE YOUR INFORMATION

4.1 Third-Party Service Providers

We share your information with trusted third-party service providers who assist us in operating our Service:

Technology Infrastructure:

• Vercel: Web hosting and deployment platform
• Amazon Web Services (AWS): Cloud computing and storage services
• NextJS: Web application framework and hosting

Analytics and Tracking:

• Google Analytics: Website analytics and user behavior analysis
• PostHog: Product analytics and user experience tracking
• Facebook Pixel: Advertising analytics and conversion tracking

AI and Machine Learning:

• OpenAI (ChatGPT): Natural language processing and content generation
• Anthropic (Claude): AI assistance and content creation
• Google (Gemini): AI services and machine learning capabilities

Domain and DNS:

• Entri DNS: Domain name system services and management

Payment Processing:

• Payment processors and financial institutions for transaction processing

4.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity.

4.3 Legal Requirements

We may disclose your information when required by law, to protect our rights, or to ensure the safety of our users and the public.

4.4 With Your Consent

We may share your information with third parties when we have your explicit consent to do so.

5. INTERNATIONAL DATA TRANSFERS

Your personal information may be transferred to and processed in countries other than your country of residence, including the United States. We implement appropriate safeguards to protect your information during such transfers, including:

• Standard Contractual Clauses (SCCs) for transfers outside the EU
• Adequacy decisions by relevant data protection authorities
• Other legally recognized transfer mechanisms

6. DATA RETENTION

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Specific retention periods include:

• Account Information: Retained while your account is active and for 3 years after closure
• Payment Information: Retained for 7 years for tax and accounting purposes
• Usage Data: Retained for 2 years for analytics and improvement purposes
• Website Content: Retained indefinitely as part of our Service offering
• Communication Records: Retained for 5 years for customer service purposes
• AI Training Data: May be retained indefinitely to improve our AI models

7. YOUR PRIVACY RIGHTS

7.1 General Rights

Depending on your location, you may have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing activities
• Restriction: Request restriction of processing in certain circumstances

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

Right to Know: You can request information about:

• Categories of personal information we collect
• Categories of sources from which we collect information
• Our business or commercial purpose for collecting information
• Categories of third parties with whom we share information
• Specific pieces of personal information we've collected about you

Right to Delete: Request deletion of your personal information, subject to certain exceptions

Right to Opt-Out: Opt out of the sale or sharing of your personal information

Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

Sensitive Personal Information: You can limit our use of sensitive personal information

To exercise these rights, contact us at founders@getkanu.com or use our online form.

7.3 EU Residents (GDPR)

EU residents have additional rights under the General Data Protection Regulation:

• Withdraw Consent: Withdraw consent for processing based on consent
• Lodge Complaints: File complaints with your local data protection authority
• Data Protection Officer: Contact our DPO at founders@getkanu.com

8. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to:

• Remember your preferences and settings
• Authenticate your account and maintain security
• Analyze usage patterns and improve our Service
• Provide personalized content and advertisements
• Measure the effectiveness of our marketing campaigns

Types of cookies we use:

• Essential Cookies: Required for basic functionality
• Performance Cookies: Help us understand how you use our Service
• Functional Cookies: Remember your preferences and settings
• Targeting Cookies: Used for advertising and personalization

You can control cookies through your browser settings, but disabling certain cookies may affect functionality.

9. SECURITY MEASURES

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and monitoring
• Employee training on data protection
• Incident response procedures

However, no security system is impenetrable, and we cannot guarantee absolute security.

10. CHILDREN'S PRIVACY

Our Service is not intended for children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If we discover we have collected information from a child, we will delete it promptly.

11. THIRD-PARTY LINKS

Our Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Providing in-app notifications

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

13. DATA PROCESSING ADDENDUM

For business customers who process personal data of their end users through our Service, we provide a separate Data Processing Addendum that governs our role as a data processor.

14. CONTACT INFORMATION

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. DISCLOSURES FOR CALIFORNIA RESIDENTS

15.1 Categories of Personal Information Collected (Last 12 Months)

15.2 Sale and Sharing of Personal Information

We do not sell personal information in the traditional sense. However, under the broad CCPA definition, some of our data sharing practices may constitute "selling" or "sharing":

• Sharing analytics data with Google Analytics and PostHog
• Sharing advertising data with Facebook Pixel
• Using personal information to train AI models with third-party AI providers

Opt-Out: To opt out of these practices, email founders@getkanu.com or use our preference center.

15.3 Sensitive Personal Information

We may collect the following categories of sensitive personal information:

• Account login credentials
• Payment card information
• Contents of communications with us

We use sensitive personal information only for disclosed business purposes and do not sell or share it for cross-context behavioral advertising.