Privacy Policy

1. CONTROLLER INFORMATION

For EU data subjects, KANU AI CORP serves as the data controller for personal information processed through our Service.

2. INFORMATION WE COLLECT

2.1 Personal Information You Provide

We collect personal information you voluntarily provide when you:

• Create an account or register for our Service
• Subscribe to or upgrade your membership tier
• Make a purchase or process a payment
• Contact us for support
• Participate in surveys, promotions, or feedback requests
• Upload content or build applications through the Service
• Sign up for SMS or email marketing communications
• Provide your phone number for notifications or cart reminders

Categories of personal information include:

• Identity Information: Name, username, email address, phone number
• Contact Information: Billing address, business details
• Payment Information: Payment details, billing information, transaction history
• Account Information: Subscription tier, account preferences, usage history
• Content Information: Data, text, media, or application content you provide
• Communication Information: Messages, tickets, or feedback sent to us
• Marketing Information: Consent preferences for SMS and email marketing

2.2 Information Automatically Collected

When you use our Service, we automatically collect:

• Technical Data: IP address, browser type, device info, OS
• Usage Data: Pages visited, features used, session duration, click behavior
• Performance Data: Load times, error reports, service metrics
• Location Data: General location via IP
• Cookies/Tracking Data: Data from cookies and similar technologies
• Cart Activity: Items added, abandoned cart behavior, used for reminders

KANU's website uses cookies to help keep track of items you put into your shopping cart, including when you have abandoned your cart. This information is used to determine when to send cart reminder messages via SMS and email.

2.3 Information from Third-Party Sources

We may receive information about you from:

• Analytics: Google Analytics, Vercel Analytics
• Advertising: Meta/Facebook Pixel and partners
• AI Services: OpenAI (ChatGPT), Anthropic (Claude), Google (Gemini)
• Infrastructure: Vercel, AWS
• Payments: Stripe, PayPal
• Marketing: Klaviyo (email/SMS marketing)
• Public Sources: Business directories, public records

3. HOW WE USE YOUR INFORMATION

3.1 Service Provision

• Operating and maintaining the artificial intelligence-powered platform that enables users to build, customize, and deploy applications that are inherently cloud-native
• Processing transactions and managing subscriptions
• Provisioning, hosting, and maintaining applications on secure, enterprise-grade infrastructure
• Providing support and technical assistance
• Authenticating identities and securing accounts

3.2 AI and Machine Learning

• Training and improving AI models and workflows
• Generating application features, recommendations, and content
• Analyzing usage patterns to enhance AI systems
• Developing new AI-powered capabilities

3.3 Business Operations

• Billing and payment management
• Sending transactional updates and notices
• Research, development, and Service improvement
• Security, monitoring, and fraud prevention

3.4 Marketing and Communications

• Sending promotional materials and updates (with your consent)
• Personalizing content and recommendations
• Running campaigns, surveys, and feedback requests
• Sending cart abandonment reminders via email/SMS

3.5 Phone Numbers

We use phone numbers you provide to:

• Send SMS marketing (with consent)
• Provide service or account alerts
• Send transactional updates

3.6 Legal Bases for Processing (GDPR)

For EU residents, processing is based on:

• Contract performance (providing the Service)
• Legitimate interests (improving the Service, preventing fraud)
• Consent (SMS/email marketing, cookies)
• Legal obligations (compliance, recordkeeping)

4. HOW WE SHARE INFORMATION

4.1 Service Providers

We share data with trusted third parties who help us deliver the Service, such as:

• Hosting/Infrastructure (Vercel, AWS)
• Analytics (Google Analytics, Vercel Analytics)
• AI partners (OpenAI, Anthropic, Google)
• Marketing (Klaviyo, Meta Pixel)
• Payments (Stripe, PayPal)

4.2 Business Transfers

If KANU undergoes a merger, acquisition, or sale, data may be transferred.

4.3 Legal Requirements

We may disclose information to comply with law, protect rights, or ensure safety.

4.4 With Consent

We share information with third parties when you consent.

4.5 SMS Data

SMS opt-in data and consent will never be shared or sold outside our designated SMS service providers.

5. INTERNATIONAL TRANSFERS

Your personal data may be processed in the United States or other countries. We implement safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions where required.

6. DATA RETENTION

We retain information as long as necessary to provide the Service:

• Account data: while active + 3 years after closure
• Payment data: 7 years (compliance)
• Usage data: 2 years
• Application data: retained while provisioned and hosted by KANU on secure, enterprise-grade infrastructure; if exported, it is managed independently by you
• Communications: 5 years
• AI training data: may be retained indefinitely
• Marketing data: according to consent/preferences

7. YOUR PRIVACY RIGHTS

7.1 General Rights

You may request access, correction, deletion, restriction, portability, or object to processing of your data.

7.2 Marketing Rights

• Opt out of email via unsubscribe links
• Opt out of SMS by replying STOP
• Manage preferences in your account

7.3 California Residents (CCPA/CPRA)

• Right to know, delete, opt-out of "selling/sharing," and non-discrimination
• Sensitive information limited to disclosed purposes
• Requests: info@getkanu.com or online form

7.4 EU Residents (GDPR)

• Withdraw consent anytime
• File complaints with data protection authorities
• Contact our DPO at info@getkanu.com

8. COOKIES AND TRACKING

We use cookies for authentication, analytics, personalization, and marketing. Categories: essential, functional, performance, targeting, and marketing.

9. SECURITY

We implement encryption, access controls, monitoring, staff training, and incident response. No system is fully secure.

10. CHILDREN'S PRIVACY

The Service is not intended for children under 13 (or 16 in the EU). We do not knowingly collect such data.

11. THIRD-PARTY LINKS

Our Service may link to third-party sites. Their policies apply, not ours.

12. CHANGES TO POLICY

We may update this Policy from time to time. Material changes will be communicated via website, email, or in-app notice.

13. DATA PROCESSING ADDENDUM

Business customers processing end-user data may sign a Data Processing Addendum (DPA) with KANU.

14. CONTACT INFORMATION

Data Protection Officer (EU): info@getkanu.com

15. DISCLOSURES FOR CALIFORNIA RESIDENTS

15.1 Categories Collected (Last 12 Months)

15.2 Sale/Sharing

We do not "sell" data in the conventional sense. Some data sharing may be considered "selling/sharing" under CCPA (e.g., analytics, advertising, AI model improvement). SMS opt-in data is never sold/shared outside providers.

15.3 Sensitive Data

We may collect account credentials, payment data, or communications for business purposes only. We do not sell or share sensitive data for behavioral advertising.