KunkaAI Privacy Policy

Data Collection and Storage

KunkaAI gathers and maintains user information to deliver and improve the service. We use secure cloud infrastructure to store and process this data. We store and process data primarily in the EU (Frankfurt, Germany) and use trusted vendors only as needed to run KunkaAI.

Legal Bases (EU)

We rely on: (a) contract — to create accounts and deliver requested features; (b) legal obligations — billing and tax records; (c) legitimate interests — security, fraud prevention, and service reliability (minimizing data and honoring opt-outs); (d) consent — only for non-essential analytics/marketing cookies or SDKs.

Data Usage

We use your information to:

• deliver and support core features (accounts, sessions, boards, and visual moodboard nodes);
• operate user-initiated integrations and in-product embeds/previews (Google Drive/Docs, YouTube, TikTok Display, Instagram/Meta) strictly within granted scopes;
• provide required service messages (security, billing, product notices);
• improve reliability and product experience, including internal operational insights derived from aggregated or pseudonymized product telemetry;
• perform audience segmentation for in-product guidance and product emails based on your product usage (you can opt out of marketing emails at any time).

Third-Party Integrations and Scopes (Read-Only by Design)

• Google Drive/Docs: used to display file previews and provider-supplied metadata inside your visual moodboard nodes. No domain-wide delegation is used; access is limited to items you select. You can revoke access in Google Account → Security and in KunkaAI settings.
• YouTube: we display public video embeds and provider-supplied metadata for URLs you choose.
• TikTok Display API: we display public embeds and allowed metadata; no posting or actions on your behalf unless you enable them.
• Instagram/Meta: if enabled, we display embeds and allowed metadata for links you provide.

Revocation and controls: You can disconnect integrations in KunkaAI settings. Where OAuth is used, you can also revoke access in the respective provider’s security settings (e.g., Google Account → Security; TikTok/Meta account settings). We limit integration data strictly to what is necessary to render embeds/previews and to operate the user-initiated feature you chose.

Communications

When you provide contact details to KunkaAI, we may use them for the following communication channels:

1. Email outreach

   • Functional messages tied to your account and transactions
   • Promotional updates covering new features, releases, and offers
   • Every promotional email includes an unsubscribe link

2. SMS outreach

   • SMS messaging is used only if you provide a phone number and opt in where required.
   • Alerts regarding feature updates, exclusive deals, or related offerings
   • Standard messaging and data fees may apply based on your carrier
   • Message frequency depends on your engagement and preferences
   • Opt out anytime by replying “STOP” to any message
   • For help, reply “HELP” or contact support@kunka.ai

3. Outreach preferences

   • Update your communication settings by contacting our support team
   • Opting out of marketing does not block essential service alerts
   • We store your preference choices so they remain in effect

4. External providers

   • We may engage trusted vendors to help manage or deliver communications
   • These providers follow confidentiality agreements and cannot reuse your data

Consent to promotional outreach is not required to access KunkaAI products or services, though certain service notifications are necessary for product delivery. Promotional messages are optional. Opt-out links are included; opting out does not affect essential service communications.

Data Sharing

We do not sell personal information. We share data only with: (a) vendors who operate our infrastructure and support (under confidentiality and data protection terms); (b) authorities when legally required; (c) another entity in the event of a merger or acquisition; (d) with your direction or consent.

Data Ownership

You retain all rights to your content. You grant KunkaAI a limited license to host, display, and process your content solely to operate, maintain, and secure the service and the features you initiate.

Access to Data

Authorized KunkaAI personnel may access limited information on a need-to-know basis to resolve issues, provide support, improve reliability, or conduct aggregated operational analysis; customer content is not used for model training.

Your Privacy Choices and Rights

You can access, correct, or delete your account and content (subject to legal requirements). You can object to non-essential processing and withdraw consent for analytics/marketing at any time.

You may lodge a complaint with your local data protection authority if you believe your rights have been infringed.

User Choices

You can opt out of promotional outreach using the unsubscribe links in our emails or by contacting our support team directly. Essential service communications will continue so we can operate the product safely. Non-essential cookies/SDKs load only after consent via our banner; you can change your choice any time. For details on trackers, see our cookies page at /legal/cookies (loaded only after consent).

Data Security

We use encryption in transit and at rest, role-based access, MFA for internal consoles, logging, and regular backups. No method is 100% secure.

Vendors and International Transfers

We work with infrastructure/support vendors to run KunkaAI. Primary processing is in the EU (Frankfurt). If data is transferred outside the EEA, we rely on approved safeguards such as Standard Contractual Clauses (SCCs) and additional technical/organizational measures where appropriate. We maintain a current vendor list at /legal/subprocessors.

Data Retention

Account data: for the life of your account; backups expire on rolling 30–90-day schedules.

Customer content (boards, nodes, files you connect): until you delete it or disconnect the integration; short-term caches are minimized and purged on schedules aligned with operations.

Security logs: typically up to 180 days.

Billing records: as required by law.

Marketing preferences and email events: until you withdraw consent or opt out.

Support tickets and attachments: typically up to 24 months, unless a longer period is required for compliance or dispute resolution.

Children

The service is not intended for individuals under 16. If a minor’s data was provided, contact privacy@kunka.ai for removal. You can also contact support@kunka.ai for assistance with a minors’ data removal request.

Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of KunkaAI after any revisions constitutes acceptance of the updated terms.

Questions: privacy@kunka.ai