Privacy Policy

Last updated: 2026-09-18.

This billing hub (pay.kucatoo.ai) processes payments for all Kucatoo products. All charges are billed by Kucatoo. This policy explains what personal data we collect across the Kucatoo products, why, who we share it with, and the choices you have.

1. Data we collect

• Account data. When you sign in with an identity provider (such as Google, via our authentication provider), we receive your email address and display name.
• Billing data. Your email address and Stripe customer id (to find your subscriptions), your entitlement state per product (plan, status, renewal date), and raw payment events retained for audit and replay. Card details never touch our servers — they are handled exclusively by Stripe.
• Usage data. The product sites collect the metrics needed to run the service — for example quota usage (data transfer, disk) against your plan — plus technical logs we use for security, abuse prevention and debugging.
• Communications. Transactional email (receipts, payment-failure notices) is sent through an email-delivery provider; if you contact support, we keep the correspondence.

2. How we use it

• To deliver and bill the services you subscribe to (contract).
• To keep the services secure, prevent abuse and comply with law (legitimate interests / legal obligation).
• To notify you about your account, payments and terms changes (contract / legal obligation).
• To communicate with you when you ask us to.

We do not sell your personal data, and we do not use your content to advertise to you.

3. Who we share it with

• Stripe — payment processing (card data stays there).
• Our authentication provider (sign-in) and our cloud-hosting provider (running the service).
• An email-delivery provider — transactional email only.
• Law enforcement or regulators, only where legally required.

Providers process data only on our instructions, under their own security obligations.

4. Security

Data is encrypted in transit, access is restricted to what each component needs, and secrets are managed centrally. No system is perfectly secure; if a breach affects you, we will notify you as required by law.

5. Retention and deletion

• Billing records are kept as long as needed for accounting and tax law.
• When a Stripe customer record is deleted, we anonymize the local record and revoke all entitlements.
• You can request access, correction or deletion of your data at any time: privacy@kucatoo.ai. We will respond within a reasonable period and as required by applicable law.

6. Cookies

The billing hub sets no tracking or advertising cookies. The product consoles use a session cookie (and your identity provider's own cookies) solely to keep you signed in.

7. Children

The services are not directed at children, and we do not knowingly collect personal data from children.

8. Changes to this policy

We may update this policy; the "Last updated" date above always reflects the current version, and material changes will be announced by email or in the product.

9. Contact

Questions or requests: privacy@kucatoo.ai.