Privacy Policy

Adastra Labs LLC operates KINOAI Canvas under the KINOAI brand, a creative production platform for generating, editing, organizing, and delivering images, video, audio, designs, and AI-assisted workflows. This Privacy Policy applies when you visit our websites, create or use an account, join a workspace, purchase a plan or credit pack, contact support, or otherwise use KINOAI Canvas.

If an organization provides your account, that organization may control your workspace, content, and membership. Its own privacy notices may also apply to its use of your information.

Information you provide

• Account and profile data: name, email address, password hash, avatar, language, and account preferences.
• Workspace data: organization name, memberships, roles, invitations, brand kits, shared libraries, comments, and collaboration activity.
• Creative content: prompts, uploads, reference media, designs, generated outputs, actors or avatars, project messages, captions, audio, templates, and workflow settings.
• Billing and support data: plan, credit balance, purchases, invoices, transaction identifiers, billing contact details, support tickets, and correspondence. Stripe processes payment card details; KINOAI does not store full card numbers.

Information collected automatically

• IP address, browser and device information, request timestamps, referring pages, feature usage, model usage, credit activity, diagnostics, error reports, and security or audit events.
• Authentication tokens, active workspace, language, theme, interface preferences, and cookie-consent choice stored in cookies or local storage.
• Consent-based analytics and page-view information through Google Analytics, Google Tag Manager, and Meta Pixel when configured and permitted by your cookie choice.

Information from other sources

We may receive identity information from Google or GitHub when you choose OAuth sign-in, membership information from a workspace administrator, and payment or subscription status from Stripe.

We use personal information to:

• create and secure accounts, authenticate requests, and manage workspaces;
• process prompts and content, run AI models, render outputs, save projects, and provide editing and collaboration features;
• calculate credit usage, process payments, maintain invoices, and administer subscriptions or optional auto-recharge;
• provide support, send service and security messages, and respond to requests;
• detect abuse, investigate incidents, debug errors, protect users, and maintain service reliability;
• understand product usage and improve KINOAI, including through consent-based analytics; and
• comply with legal obligations, enforce our Terms, and establish or defend legal claims.

Where GDPR or similar law applies, our legal bases are performance of our contract with you, our legitimate interests in operating and protecting the service, your consent for optional analytics or marketing, and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time.

Features you choose may send prompts, uploaded media, project instructions, and related technical information to third-party AI providers so they can generate or analyze the requested output. Depending on the feature and current configuration, these providers may include Google Gemini, Atlas Cloud, Replicate, fal.ai, and other model providers presented in the KINOAI model picker.

Do not upload content you are not entitled to use or highly sensitive personal information unless the feature and your organization’s policies permit it. AI providers process submitted content under their own service terms and KINOAI’s applicable provider arrangements. Model availability and provider selection may change as the product evolves.

We disclose information only as reasonably necessary to operate KINOAI or meet legal obligations, including to:

• Infrastructure and storage providers that host the application, databases, queues, and uploaded or generated media;
• AI model providers that process prompts and content for features you request;
• Stripe for checkout, subscriptions, invoices, payment methods, fraud prevention, refunds, and optional auto-recharge;
• Sentry for error monitoring and performance diagnostics when configured, with default personal-data collection disabled;
• Google Analytics and Google Tag Manager for consent-based product analytics when configured;
• Meta for consent-based page-view and conversion measurement when Meta Pixel or Conversions API is configured;
• email and support providers used to deliver transactional messages and handle requests;
• workspace members and administrators according to your workspace role and sharing choices; and
• authorities, advisers, or transaction parties when required by law, necessary to protect rights or safety, or involved in a merger, financing, acquisition, or sale of assets.

We do not sell personal information for money. With your permission, public marketing pages and billing checkout pages may share browsing and conversion information with Google and Meta for measurement and advertising; this may qualify as sharing under applicable privacy laws. Optional marketing tracking is disabled in creative applications and on other dashboard pages.

KINOAI and its service providers may process information in countries other than the country where you live. Where transfer safeguards are legally required, the applicable provider arrangement must support a lawful transfer mechanism. Contact contact@kinoai.studio for information about the safeguards applicable to your data. Some third-party providers may process data in the United States or other locations described in their documentation.

We keep account, workspace, and creative content while your account or the relevant workspace remains active and for as long as needed to provide the service. Retention also depends on the type of information, workspace instructions, security needs, dispute resolution, and legal or accounting requirements.

When an account or personal workspace is deleted, associated records are deleted or de-identified except where we must retain limited billing, fraud-prevention, security, backup, or legal records. Content in a shared organization may remain under that organization’s control. Residual copies may remain temporarily in backups and provider systems before being overwritten according to their normal cycles.

We use technical and organizational safeguards designed to protect information, including HTTPS and TLS in transit, authenticated requests, access controls, isolated managed services, payment processing through Stripe, monitoring, and backups. No online service can guarantee absolute security. You are responsible for protecting your credentials, using a secure device, and promptly reporting suspected unauthorized access to contact@kinoai.studio.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing, or receive a portable copy of your personal information, and to withdraw consent. You may also have the right to complain to your local data-protection authority.

• Update profile information and preferences in Settings.
• Download a JSON copy of your profile, memberships, designs, uploaded media records, credit usage, audit trail, chat messages, and linked login providers through Settings → Download my data.
• Delete your account in Settings. A sole owner must transfer ownership or delete the shared workspace first.
• Accept or reject optional analytics in the cookie banner. You can reset the choice by clearing site storage.
• Contact by email contact@kinoai.studio for other privacy requests.

We may need to verify your identity before completing a request. We generally respond within the period required by applicable law. Authorized agents may submit requests where local law allows.

California residents may have rights to know the categories and specific pieces of personal information collected, request deletion or correction, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service when exercising these rights.

During the preceding 12 months, KINOAI may have collected the categories described in Section 2 and disclosed them for business purposes to the recipients described in Section 5. We do not sell personal information for money. Consented marketing-page tracking may constitute sharing for cross-context behavioral advertising. Reject optional cookies to opt out; Global Privacy Control is treated as an opt-out. Submit a request through account Settings or contact@kinoai.studio.

KINOAI uses necessary cookies and browser storage for authentication, active workspace, language, theme, and interface preferences. These are required to provide the requested experience.

When configured, Google Analytics, Google Tag Manager, and Meta Pixel load after you accept optional analytics and advertising cookies. Measurement is limited to public marketing pages and billing checkout pages; creative applications and other dashboard pages are excluded. Server-side conversion events use the same consent choice, and billing webhooks do not send advertising conversions. Hashed identifiers remain personal information. You can withdraw consent by clearing site storage and revisiting the site.

KINOAI is a professional creative service and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and delete it where required.

We may update this policy when KINOAI’s features, providers, or legal obligations change. We will post the revised version here and update the effective date. If a change materially affects how we use personal information, we will provide additional notice where required.

For privacy questions or requests, contact contact@kinoai.studio or use the KINOAI contact page. For security reports, contact contact@kinoai.studio.

You may also contact the data-protection authority in the country or region where you live, work, or believe an infringement occurred.