Privacy Policy

When you use Kubflow, we may collect:

• Account information: your email address, name, and profile information provided during sign up.
• Usage data: workflows, workflow activity, credit usage, feature usage, and general interaction data.
• Generated content: prompts, uploaded files, generated images, videos, audio, and other workflow outputs.
• Technical data: browser type, device information, IP address, approximate location derived from it, logs, cookies, and timestamps.
• Advertising and analytics data: which ad or link brought you to Kubflow, ad click identifiers, and the pages and actions you take on our site, as described in section 5.
• Payment data: billing status, plan information, invoices, and payment events handled by Stripe. We do not store full card details.

We use your information to:

• Create and manage your account
• Run AI workflows and provide generated outputs
• Track credits, subscriptions, and billing
• Improve product performance and reliability
• Measure and improve our advertising
• Provide support and respond to requests
• Detect abuse, fraud, or security issues
• Send important account or service updates, and product emails where section 9 allows

We do not use your prompts, uploads, or generated content to train AI models. Kubflow is a pass through to third party AI providers (Google, OpenAI, ByteDance, Anthropic, Black Forest Labs, ElevenLabs, and others). Each provider has its own data policies, which apply when you use their models through Kubflow.

Kubflow uses trusted third party services to operate the product, including:

• Supabase: authentication, database, and file storage
• Vercel: hosting, and page analytics that do not use cookies
• Cloudinary: media storage and delivery
• Stripe: payments and billing
• Kie.ai and other AI providers: model execution
• Resend: account and product emails
• Sentry: error monitoring
• PostHog: product analytics
• Meta Platforms: advertising measurement (Meta Pixel and Conversions API)
• Google: website analytics and advertising measurement (Google Analytics and Google Ads)

These services process data only as needed to provide Kubflow functionality, or as described in section 5.

We advertise Kubflow on platforms such as Facebook and Instagram. To learn which ads bring people to Kubflow and to show our ads to people likely to find them useful, we use these tools when you allow them:

• Meta Pixel and Meta Conversions API: tell Meta about page views, sign ups, checkout starts, and purchases. This includes cookie and click identifiers (such as _fbp, _fbc, and fbclid), your IP address and browser details, and, when you are signed in, your email address, name, phone number, and account ID, which are hashed before they are sent. Checkout starts and purchases may also be sent from our servers.
• Google Analytics and Google Ads tags: record visits, sign ups, and purchases with cookie identifiers (such as _ga and _gcl_au) and ad click identifiers (gclid).
• PostHog: records page views and product events and, where enabled, replays of how pages were used, so we can improve Kubflow.

Meta and Google also process this information under their own privacy policies (Meta, Google). You can also limit ad personalization in your Meta and Google account settings.

If you are in the EU/EEA, the UK, or Switzerland, these tools only run after you accept them in our cookie banner. Anyone can turn them off at any time with Cookie settings in section 8.

Some of our providers are based outside the UK and EEA. When personal data is transferred internationally, we rely on standard contractual clauses or other safeguards required by UK and EU data protection law.

Your prompts, uploads, workflows, and generated outputs are used to provide the service. We do not sell your generated content.

You are responsible for the content you upload, generate, or share through Kubflow.

Kubflow uses cookies and local storage for:

• Essential: keeping you signed in (sb- cookies), security, and remembering your cookie choice (kubflow_tracking_consent and kubflow_consent_region). These are always on because the service needs them.
• Analytics and advertising: Meta (_fbp, _fbc), Google (_ga, _ga_*, _gcl_au), and PostHog (ph_*), as described in section 5.

In the EU/EEA, the UK, and Switzerland, analytics and advertising cookies are only set after you accept them. Elsewhere they are set when you visit. Wherever you are, you can change your choice here:

We send emails you need to use Kubflow, such as account confirmation, password resets, and important service and billing updates.

Outside the EU/EEA and the UK, creating an account includes agreeing to receive Kubflow emails with tips, product updates, and offers, as stated on the sign up page. In the EU/EEA and the UK, we only send these if you opt in. Every one of these emails has an unsubscribe link.

• Contract: to provide your account, run your workflows, and handle billing.
• Legitimate interests: to keep Kubflow secure, prevent abuse, fix errors, and improve the product.
• Consent: for analytics and advertising cookies, and for product and offer emails.
• Legal obligation: to keep billing and tax records and to respond to lawful requests.

We keep account data while your account is active. Generated content and workflow history are kept for up to 90 days after account deletion, then permanently removed. Billing records are kept for up to 7 years to meet legal and tax obligations.

Prompts, generated outputs, and account metadata flagged for suspected violation of our Terms of Service may be retained for up to 24 months to support investigations, comply with legal obligations, or share with model providers and law enforcement as required.

You may request earlier deletion of your account or data by contacting us, except where we are legally required to retain specific records.

We use reasonable technical and organizational measures to protect your data. However, no online service can guarantee complete security.

If you are in the UK or EU, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data
• Export your data in a portable format
• Restrict or object to processing
• Withdraw consent at any time, including with Cookie settings in section 8
• Lodge a complaint with the Information Commissioner's Office (ICO) or your local data protection authority

To make a request, contact us at hello@kubflow.com.

Kubflow is not intended for users under 16, or the minimum digital consent age in their country. We do not knowingly collect personal information from children under that age.

We may update this Privacy Policy from time to time. If changes are material, we may notify users through the product or by email.

To enforce our Terms of Service and comply with the policies of upstream AI providers, we log and may review prompts, uploads, and generated outputs. We use automated systems, including AI based classifiers, to detect content that may violate our Terms. Flagged content may be blocked from generation, queued for human review, or trigger account suspension.

Where content involves suspected child sexual abuse material or other illegal content, we will preserve the content and report to the National Center for Missing and Exploited Children (NCMEC), the UK Internet Watch Foundation (IWF), or other appropriate authorities.

For privacy questions, contact hello@kubflow.com.