Privacy Policy

1. Introduction

At Kodo ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered design platform ("the Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name: Your display name (optional)
• Email Address: Required for account creation and communication
• Password: Encrypted and stored securely (if using email/password authentication)
• Profile Image: If you authenticate via third-party providers (e.g., Google OAuth)

2.2 Design Content and Projects

We store the designs, projects, and content you create using the Service, including:

• Design files, layers, and project data
• Collaboration settings and room configurations
• Template usage and customizations
• Export history and preferences

2.3 Usage and Analytics Data

We collect information about how you use the Service, including:

• AI usage statistics (tokens used, tool calls, chat interactions)
• Subscription and billing information
• Credit usage and remaining balances
• Feature usage patterns and preferences
• Session data and login history

2.4 Technical Information

Automatically collected technical information includes:

• IP address and browser type
• Device information and operating system
• Cookies and session tokens
• Log files and error reports

2.5 Payment Information

Payment processing is handled by Stripe, our third-party payment processor. We do not store your full credit card information. We only store:

• Stripe customer ID
• Subscription status and billing history
• Payment amounts and dates

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve the Service
• Account Management: To manage your account, process subscriptions, and handle billing
• Collaboration: To enable real-time collaboration features and sharing functionality
• AI Features: To process AI requests and generate design content
• Communication: To send you service-related notifications, updates, and support responses
• Analytics: To analyze usage patterns and improve our Service
• Security: To detect and prevent fraud, abuse, and security threats
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service

4. Data Storage and Security

Your data is stored securely using industry-standard practices:

• Database: Data is stored in a PostgreSQL database with encryption at rest
• Authentication: Passwords are hashed using secure algorithms (never stored in plain text)
• Transmission: All data transmission is encrypted using HTTPS/TLS
• Access Controls: Access to your data is restricted to authorized personnel only
• Backups: Regular backups are performed to ensure data availability

While we implement security measures to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information to the best of our ability.

5. Third-Party Services

We use the following third-party services that may have access to certain information:

5.1 Stripe

We use Stripe for payment processing. Stripe collects and processes payment information according to their Privacy Policy. We do not have access to your full credit card details.

5.2 Google OAuth

If you choose to sign in with Google, Google will share your email address, name, and profile image with us. This is governed by Google's Privacy Policy.

5.3 Liveblocks

We use Liveblocks to enable real-time collaboration features. Liveblocks may process collaboration data according to their Privacy Policy.

5.4 AI Service Providers

When you use AI features, your prompts and design requests may be processed by third-party AI service providers. We take measures to ensure these providers handle your data securely and in accordance with our agreements.

6. Cookies and Session Management

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences and settings
• Analyze Service usage and performance
• Provide personalized experiences

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of the Service.

7. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize sharing (e.g., sharing a project with collaborators)
• Service Providers: With trusted third-party service providers who assist in operating the Service (e.g., hosting, payment processing, analytics)
• Legal Requirements: When required by law, court order, or government regulation
• Protection of Rights: To protect our rights, property, or safety, or that of our users
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to your personal data
• Correction: Update or correct inaccurate information through your account settings
• Deletion: Request deletion of your account and associated data
• Export: Export your design projects and data
• Opt-Out: Unsubscribe from marketing communications (service-related emails may still be sent)
• Account Closure: Close your account at any time through account settings

To exercise these rights, please contact us at info@usekodo.ai.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After you close your account, we may retain certain information for a reasonable period to comply with legal obligations, resolve disputes, and enforce our agreements. Design projects and content may be retained longer if shared with other users or required for Service functionality.

10. Children's Privacy

The Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the Service, you consent to the transfer of your information to these countries.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: info@usekodo.ai