Privacy Policy

1. Who We Are (Controller Contact)

If you are using the Service on behalf of an organization, your organization may be the controller for certain information processed through the Service, and KANU may act as a processor (for example, under a Data Processing Addendum).

2. Scope and Enterprise Agreements

If your organization has a separate written agreement with KANU (such as an MSA, Order Form, and/or DPA), that agreement may govern privacy, security, data retention, and data deletion terms for the Service and will control in the event of a conflict.

3. Information We Collect

3.1 Information you provide

• Account and contact information: name, work email address, phone number, and authentication-related data when you create an account or log in.
• Enterprise and billing information (if applicable): company name, business contact details, invoicing details, and other information needed to manage an enterprise relationship.
• Service content: prompts, chat messages, task descriptions, design documents, uploaded files, generated source code/artifacts, and deployment metadata you provide or create while using the Service.
• Integration data: repository URLs, branches, and access tokens/credentials you choose to connect for code repository integrations. Where supported, we store access tokens encrypted at rest.
• Communications: information you send us when you request support, provide feedback, or contact sales.
• Email signups: if you submit your email to request a demo or updates, we store your email address.

3.2 Information collected automatically

When you visit our website or use the Service, we (and our service providers) automatically collect certain information, such as:

• Device and network information: IP address, browser type, device identifiers, operating system, and approximate location (derived from IP).
• Usage and performance information: pages viewed, features used, timestamps, referrers, and performance metrics (e.g., load times, errors).
• Log data: server logs and diagnostic events generated in connection with providing and securing the Service.

3.3 Cookies and similar technologies

We use cookies and similar technologies for authentication, security, analytics, and marketing. For example, we may use:

• Essential cookies (including secure, HTTP-only cookies) to help maintain sessions and security.
• Analytics and performance tools (including site analytics and performance monitoring) to understand usage and improve performance.
• Advertising/measurement tools such as the Meta/Facebook Pixel to measure marketing effectiveness.

4. How We Use Information

• Provide, operate, and secure the Service (including authentication and access control).
• Process prompts and requests to generate and deploy software artifacts and infrastructure.
• Provide customer support, respond to requests, and communicate about the Service.
• Monitor, maintain, and improve performance, reliability, and security.
• Conduct analytics and product improvement (including aggregated, de-identified usage insights).
• Market the Service and measure campaign effectiveness (where permitted by law).

5. How We Share Information

We share information with the following categories of recipients:

• Infrastructure and hosting providers: such as cloud hosting and deployment providers (including Amazon Web Services (AWS)), to host and operate the Service.
• AI providers: to process prompts and generate outputs (for example, AWS Bedrock (Anthropic Claude) and OpenAI for certain features).
• Analytics and advertising partners: such as analytics, performance monitoring, and advertising measurement tools, including Google Analytics and the Meta Pixel.
• Integration partners: such as code repository providers (e.g., GitLab/GitHub) when you connect an integration.

We may also disclose information to comply with law, protect our rights, prevent fraud or security incidents, or in connection with a corporate transaction (such as a merger or acquisition).

6. AI Features and Your Content

The Service includes AI-assisted features. When you submit prompts or other content, that content may be processed by our AI providers and used to produce outputs (such as plans, explanations, code, and infrastructure configurations).

• Do not submit sensitive information (such as passwords, private keys, or regulated personal data) unless you have a written agreement with KANU that specifically permits it and you have configured the Service accordingly.
• Outputs may be inaccurate and should be reviewed before use in production.

7. Data Retention

We retain information for as long as necessary to provide the Service and for legitimate business purposes such as security, compliance, and dispute resolution. Retention may vary depending on the data type and your enterprise agreement (if any).

• Account data: retained while your account is active and for a reasonable period thereafter.
• Service content (e.g., tasks/chat/code artifacts): retained to operate the Service, subject to deletion requests and contractual terms.
• Logs and security data: retained for security, reliability, and auditing.

8. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to object to or restrict certain processing.

• Cookie controls: you can control cookies through your browser settings and, where available, opt-out mechanisms provided by analytics/advertising partners.
• Marketing: you can opt out of marketing emails using unsubscribe links or by contacting us.

To exercise privacy rights, contact info@getkanu.com.

9. International Transfers

We may process and store information in the United States and other countries where we or our service providers operate. Where required by law, we use appropriate safeguards for international transfers.

10. Security

We use technical and organizational measures designed to protect information. However, no security measures are perfect and we cannot guarantee absolute security.

11. Children's Privacy

The Service is not intended for children under 13 (or under 16 in certain jurisdictions), and we do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date above indicates when it was most recently revised.

13. Contact

If you have questions about this Privacy Policy or our data practices, please contact: