Privacy Policy
Last updated 21 July 2026
This policy explains what KFX Studio collects, why, and who else sees it. Aayush Gelal is the data controller.
What we collect
Account information
- Your email address, name and profile picture, from your Google account
- Signing in is Google-only — we never see or store a password for you
What you put into the product
- Your business description, product name, domain and one-line summary
- Any logo or image you upload
- The slideshows generated for you, and which slides you rate
Collected automatically
- Your IP address and browser user-agent, in server logs
- Timestamps and rate-limit counters, used to keep the service available
- A session cookie so you stay signed in
We do not use advertising trackers or third-party analytics, and we do not sell your data to anyone.
Why we use it
| Purpose | Data used | Basis |
|---|---|---|
| Run your account and sign you in | Google profile, email, session cookie | Contract |
| Generate slideshows | Business description, logo, product details | Contract |
| Take payment and prevent fraud | Email, subscription status | Contract |
| Improve slide quality | Your 👍/👎 slide ratings | Legitimate interest |
| Keep the service up and abuse down | IP address, request logs | Legitimate interest |
| Reply to support requests | Email and what you tell us | Contract |
Who else processes your data
We use these providers to run KFX Studio. Each sees only what its job requires.
| Provider | What it does | What it sees |
|---|---|---|
| Supabase | Accounts and database | Email, account and workspace records |
| Oracle Cloud | Server hosting | Everything the app processes, plus generated slides on disk |
| Vercel | Website hosting | IP and request metadata for page loads |
| Cloudflare | AI text and image generation | Your business description and slide prompts |
| Sign in with Google (optional) | Your email, name and profile picture | |
| Freemius | Payments, as merchant of record | Billing details, which it collects directly from you |
Your business description is sent to Cloudflare's AI service to write your slide copy. Do not put confidential information, personal data about other people, or trade secrets into it.
Card details never reach our servers. Freemius collects and holds them directly.
Where your data is held
Our server runs in Oracle Cloud, and our database is hosted by Supabase. Data may be transferred to and processed in countries other than yours, including the United States and the European Union. Where a transfer leaves a region with data-transfer restrictions, our providers rely on standard contractual clauses.
How long we keep it
- Account and workspaces — until you delete them or close your account
- Generated slides — until you delete the workspace they belong to
- Server logs — roughly 30 days, then rotated out
- Billing records — as long as tax and accounting law requires, typically seven years, held largely by Freemius
Your rights
Depending on where you live, you can ask us to:
- Give you a copy of your data, or export it
- Correct anything inaccurate
- Delete your account and its data
- Restrict or object to certain processing
- Withdraw consent, where processing relies on it
You can delete a workspace or your whole account from the dashboard at any time. For anything else, email us at the address below — we respond within 30 days. If you are in the UK, EU or another region with a data protection authority, you may also complain to it.
Cookies
We set one essential cookie, which keeps you signed in. It is scoped to our domain, marked
HttpOnly and Secure, and is not readable by JavaScript. We use no
advertising or analytics cookies, so there is no consent banner to click through.
Security
Traffic is encrypted with HTTPS. Sign-in is handled entirely by Google, so we hold no password for you at all. Access to production is restricted to key-based SSH. No system is perfectly secure, but if a breach affects your data we will notify you and any required regulator without undue delay.
Children
KFX Studio is not for anyone under 18. We do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
Changes
If we change this policy materially we will update the date above and tell you by email or in the app before the change takes effect.
Contact
Aayush Gelal
Kathmandu, Nepal
aayushgelal4@gmail.com