Privacy Policy
Last updated: November 11, 2026
This Privacy Policy explains what information Kivisus ("Kivisus", "we", "us") collects across the websites and applications it operates (each, a "Service", and together the "Services"), how we use it, and the choices you have.
1. Information we collect
Account information. Where a Service offers sign-in, you sign in with Google, and we receive your Google account identifier, your email address, and your name. We use this to create and identify your account.
Content you submit. When you use a Service, you may submit content (such as text) so that the Service can process it and return a result. We process this content to operate the Service (see Section 3). We do not require you to submit personal or confidential information, and you should not include it.
Usage and credit data. We keep records needed to run the Services, such as your credit balance, grant and expiry dates, and whether a purchase was fulfilled.
Payment data. Payments are handled by Stripe as merchant of record. We do not receive or store your full card number. We receive limited confirmation data (such as a payment/session identifier and whether payment succeeded) so we can grant what you bought.
Technical data. As with most web services, our infrastructure provider (Cloudflare) processes technical information such as IP address and request metadata to deliver and secure the Services.
2. Cookies
We use a single, strictly necessary session cookie. It holds a random session identifier only — no personal data — and lets you stay signed in. It is flagged HttpOnly, Secure, and SameSite=Lax, so it cannot be read by scripts and is not used to track you across other sites.
We do not use advertising or third-party tracking cookies. Because the cookie is strictly necessary to provide the Services, no cookie-consent banner is required.
3. How we use your information
- Provide the Services and process the content you submit.
- Create and secure your account and keep you signed in.
- Grant and track credits and fulfill purchases.
- Prevent fraud, abuse, and misuse, and keep the Services reliable.
- Respond to your support requests.
- Comply with legal obligations.
We do not sell your personal information, and we do not use it for advertising.
4. Third parties that process data for us
Depending on which Service you use, we share limited information with providers such as the following, each only as needed:
| Provider | Purpose | Their policy |
|---|---|---|
| Sign-in (authentication) | policies.google.com/privacy | |
| Anthropic | AI processing of content you submit | anthropic.com/legal |
| Pixabay | Image search (for Services that suggest images) | pixabay.com/service/privacy |
| Stripe | Payments (merchant of record) | stripe.com/privacy |
| Cloudflare | Hosting, storage, and security | cloudflare.com/privacypolicy |
About AI processing. Where a Service uses AI, the content you submit is sent to our AI provider (currently Anthropic) to generate output. It is processed under the provider's commercial terms and is not used to train its models. Generated output may be cached temporarily (up to about 24 hours) to improve performance and reduce cost.
5. International transfers
We and our providers operate globally, and your information may be processed in countries outside your own, including the United States and Japan. Where required, we rely on appropriate safeguards for such transfers.
6. How long we keep data
- Account data (identifier, email, name) is kept while your account exists.
- Credit and fulfillment records are kept as long as needed to operate the Services and meet legal and accounting obligations.
- Content you submit is processed to produce your result and is not stored as part of a long-term profile; any temporary cache expires automatically (see Section 4).
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, or restrict the processing of your personal information, to object to processing, and to data portability. To exercise any of these rights, or to delete your account, contact us at contact@kivisus.com. We will respond within the time required by applicable law.
8. Children
The Services are not directed to children and are intended for users 18 and older. We do not knowingly collect personal information from children.
9. Security
We protect your information with measures appropriate to the risk, including encrypted transport (HTTPS), an HttpOnly session cookie, and secrets stored in encrypted form. No method of transmission or storage is completely secure, but we work to protect your data.
10. Changes to this Policy
We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you through the Services.
11. Contact
Questions or privacy requests: contact@kivisus.com