Privacy Policy

1. Minimal Data Collection

We collect only the minimum data required to operate the service:

• Account identifiers (email for magic link login, or Telegram user ID)
• API key metadata (prefix, name, creation/revocation timestamps)
• Usage metadata (timestamps, product, units consumed, request IDs)
• IP address for abuse prevention and rate limiting
• Payment references and billing status

2. No Third-Party Tracking

We do not use third-party advertising trackers or analytics. We may use essential cookies or local storage for authentication, session management, and security only.

3. Payment Processing

Payments are processed by Paddle.com as our Merchant of Record. Your payment details are handled by Paddle, not by us. We only store transaction references for billing purposes.

4. API Data Processing

If you use our APIs, we may temporarily process request metadata for reliability and abuse prevention. We do not store request payloads by default.

We do not use your data to train AI models. Data submitted to our APIs is processed in real-time and is not retained unless explicitly required for the service.

5. Server Logs

Our web server logs standard technical information (IP address, browser type, access time, requested URL) for operational stability and security monitoring. Logs are retained for a limited period and are not shared with third parties.

6. Data Security

We apply standard security practices including rate limiting, request throttling, abuse detection, and encrypted communications. While we strive for secure operation, no system can guarantee absolute security.

7. Your Rights

You have the right to:

• Access your personal data
• Request correction or deletion of your data
• Export your data
• Close your account

8. Policy Updates

We may update this Privacy Policy periodically. Continued use of the website signifies acceptance of any updated version.

9. Contact

• Privacy/legal questions: support@kikuai.dev
• Support/billing: support@kikuai.dev