How Kuvidea handles information

1. Scope

This Privacy Policy applies to Kuvidea's public website, authentication surfaces, project workspace, billing surfaces, feedback flows, exports, and APIs used to operate those features.

2. Information you provide

• Account details such as email, username, verification state, password-authentication metadata, and session ownership data.
• Google OAuth profile information when you choose to sign in with Google.
• Project inputs such as idea descriptions, titles, target users, problem statements, why-now notes, planning answers, generated drafts, saved versions, feedback, and export requests.
• Support messages, feedback entries, billing selections, checkout identifiers, and subscription-related metadata.

3. Cookies, security, and anti-abuse data

• Kuvidea uses session cookies to keep you signed in and may use temporary OAuth cookies during Google sign-in.
• Cloudflare Turnstile may process device, browser, IP, and interaction information for abuse prevention.
• Rate-limit and operational records may include hashed identities, request scope, timestamps, and request counts.

4. Third-party processors

Kuvidea may use service providers for email delivery, authentication support, hosted checkout, subscription management, infrastructure, analytics, security, and AI processing.

Creem may process checkout and subscription information when you start or manage a paid plan. Resend or another email provider may process transactional email metadata.

5. How we use information

• To create accounts, authenticate sessions, verify email, and recover passwords.
• To operate projects, generate planning outputs, save versions, export Markdown, and enforce entitlements.
• To process checkout, confirm subscriptions, manage billing state, and respond to support requests.
• To prevent fraud, spam, abuse, security incidents, and excessive automated use.
• To debug, maintain, monitor, and improve Kuvidea.

6. When we share information

We share information with vendors and infrastructure providers only as needed to operate Kuvidea, process billing, deliver email, prevent abuse, support AI-assisted features, comply with law, protect rights and safety, or complete a business transfer.

7. Retention and deletion

We keep information as long as reasonably needed to operate Kuvidea, maintain security, support subscriptions, comply with legal obligations, resolve disputes, and prevent abuse.

You may contact support to request access, correction, or deletion where applicable. Some records may be retained when required for security, billing, legal, or operational reasons.

8. Security and choices

We use reasonable safeguards, but no system is completely secure. Do not submit highly sensitive personal, financial, legal, medical, or confidential business information unless a Kuvidea feature clearly requires it.

You can stop using Kuvidea, clear browser cookies, sign out, cancel eligible subscriptions, or contact support about privacy requests.

9. Children and international processing

Kuvidea is not directed to children under 13 and does not knowingly seek personal information from children under 13.

Kuvidea and its providers may process information in countries other than your own, where privacy laws may differ.

10. Changes and contact

We may update this Privacy Policy by posting a revised version on this page and updating the effective date. Questions can be sent to the support address on this site.