Legal

Privacy Policy

Last updated: June 9, 2026

⚠ Draft template — confirm every practice below matches your real data flows (auth, AI providers, storage, payments) and replace bracketed placeholders before launch.

This Privacy Policy explains how [LEGAL ENTITY NAME] (“we”, “us”) collects, uses, and protects your information when you use k10k (the “Service”).

1. Information We Collect

Account data — your name, email, and profile image when you sign in (currently via Google OAuth).
Content you provide — products, briefs, audiences, uploads, and other inputs you submit to generate creative.
Generated output — the ads and assets the Service produces for you, stored so you can access them.
Billing data — when you purchase a plan, our payment processor collects payment details; we do not store full card numbers.
Usage & device data — logs, IP address, browser type, and product analytics used to operate and improve the Service.

2. How We Use Information

To provide, maintain, and improve the Service.
To generate the creative you request and store your work.
To process payments and manage your plan usage.
To communicate with you (transactional email such as receipts, account, and security notices).
To detect abuse, enforce our Terms, and comply with law.

We do not sell your personal data, and we do not use your content to train third-party AI models.

3. Service Providers (Subprocessors)

We share data with vendors who process it on our behalf to run the Service, under contractual confidentiality and security obligations. These include providers for authentication, database and file storage, AI generation, payments, email, and analytics. [TODO: publish and link a current subprocessor list before launch.]

4. Data Retention

We retain your account and content while your account is active and as needed to provide the Service. You may delete content at any time, and you may request deletion of your account and associated data (subject to records we must keep for legal or accounting reasons).

5. Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing (for example, under the GDPR or CCPA). To exercise these rights, contact us at support@k10k.com.

6. Security

We use reasonable technical and organizational measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. International Transfers

Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

8. Children

The Service is not directed to children under 18, and we do not knowingly collect their personal data.

9. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated through the Service or by email. The “Last updated” date above reflects the latest revision.

10. Contact

For privacy questions or requests, email support@k10k.com. We are based in [JURISDICTION / COUNTRY].