Legal

Privacy Policy

Last updated: June 18, 2026

This Privacy Policy (“Policy”) describes how XY Digital LLC (” Kiv Studio,” “we,” “us,” or “our”) collects, uses, and protects information when you use the Kiv Studio website, web application, and public API (collectively, the “Service”). We are committed to being transparent about our data practices and to giving you meaningful control over your information.

1. Information We Collect

1.1 Account information

When you create an account, we collect the information you provide, such as your name, email address, and password. We use this information to authenticate you and to manage your account.

1.2 Payment information

When you purchase a subscription, payments are processed by our payment processor, Stripe. We do not collect or store your full credit or debit card number. Stripe handles card data directly, and we receive only a token and limited billing details (such as your billing address and the last four digits of your card) necessary to operate and support your subscription.

1.3 Usage and content data

We collect and store information about how you use the Service, including your generation jobs, uploaded and generated assets, prompts, credit balance, billing history, and account settings. This information is necessary to provide the Service to you.

1.4 Technical and device data

When you use the Service, our servers and hosting provider automatically record certain technical information, such as your IP address, browser type, device type, and request logs. We use this information to operate, secure, and maintain the Service and to prevent abuse.

1.5 Analytics

We use Cloudflare Web Analytics to understand aggregate usage of the marketing site. Cloudflare Web Analytics is privacy-friendly and cookie-less — it does not use tracking cookies and does not collect personally identifying information about you. It reports only aggregated, anonymized metrics (such as page views and general country-level location) to help us improve the site.

2. How We Use Information

We use the information we collect to:

  • Provide, operate, and maintain the Service;
  • Create and manage your account and authenticate your sessions;
  • Process payments and manage your subscription, credits, and billing;
  • Communicate with you about your account, updates, and (with your consent) promotional content;
  • Secure, monitor, and troubleshoot the Service and prevent fraud, abuse, and violations of our Terms;
  • Improve and develop our features and content;
  • Comply with our legal obligations.

For individuals in the European Economic Area and the United Kingdom, we process your personal data on the following legal bases:

  • Performance of a contract — to provide the Service you requested;
  • Legitimate interests — to secure, improve, and operate the Service;
  • Legal obligation — to comply with applicable law; and
  • Consent — for any optional communications or processing we ask your permission for. You may withdraw consent at any time.

4. Cookies and Analytics

We use only essential cookies required for authentication and the basic functioning of the Service (for example, keeping you signed in). We do not use advertising or cross-site tracking cookies. Our analytics (Cloudflare Web Analytics) operate without cookies. Most browsers let you control or delete cookies; disabling essential cookies may affect your ability to sign in and use the Service.

5. How We Share Information

We do not sell your personal information. We share information only as follows:

  • Service providers. We use trusted third-party processors that help operate the Service: Stripe (payments), Cloudflare (hosting and analytics), and upstream AI model providers that process your generation requests. These processors access your information only as necessary to perform their functions and are bound by their own privacy and security obligations.
  • Legal requirements. We may disclose information when required by law, court order, or government request, or to protect the rights, property, or safety of Kiv Studio, our users, or others.
  • Business transfers. In connection with a merger, acquisition, or sale of assets, information may be transferred as a business asset, subject to the protections of this Policy.

When you submit a generation request, the prompts and assets you provide may be transmitted to our upstream AI model provider to fulfill your request.

6. Data Retention

We retain your information for as long as your account is active and as needed to provide the Service. We also retain certain information after account closure where necessary to comply with legal obligations, resolve disputes, enforce our agreements, and protect against abuse. You can request deletion of your account and associated content at any time by contacting support@kivstudio.com, subject to any retention required by law.

7. Your Privacy Rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Delete your personal information (subject to legal exceptions);
  • Export your data in a portable format;
  • Object to or restrict certain processing;
  • Withdraw consent at any time where processing relies on consent;
  • Opt out of the “sale” or “sharing” of personal information (we do not sell your data).

To exercise any of these rights, contact us at support@kivstudio.com. We will respond within the timeframe required by applicable law.

8. International Data Transfers

Because we and our processors operate globally, your information may be transferred to and processed in countries other than your own, including the United States. We take reasonable steps to ensure such transfers comply with applicable data-protection law and that appropriate safeguards are in place.

9. Children’s Privacy

The Service is intended for adults only and is not directed at or intended for anyone under 18. We do not knowingly collect personal information from children under 18. If you believe a minor has provided us with personal information, contact support@kivstudio.com and we will take steps to delete it.

10. Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials and API keys confidential.

11. Changes to This Policy

We may update this Policy from time to time. We will post the updated Policy on this page and revise the “Last updated” date above. If we make material changes, we will provide notice through the Service or by email. Your continued use of the Service after changes take effect constitutes your acceptance of the revised Policy.

12. Contact

If you have any questions about this Policy or your personal information, contact us: