Privacy Policy

1. Introduction

Kobella Kade Ventures Pte. Limited ("Kobella," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

This Privacy Policy complies with the Singapore Personal Data Protection Act 2012 (PDPA), the European Union General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

By using the Service, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide to us, including:

• Account Information: Name, email address, and password when you register for an account
• Payment Information: Payment card details and billing address (processed securely through Stripe)
• Profile Information: Optional information you choose to add to your profile
• Communications: Information you provide when you contact our customer support or communicate with us

2.2 Content and Usage Data

• User Content: AI prompts, phrases, images, and other content you create, upload, or store using the Service
• Usage Information: Information about how you use the Service, including features accessed, actions taken, and time spent
• Device Information: Device type, operating system, browser type, and version
• Log Data: IP address, access times, pages viewed, and referring website addresses

2.3 Automatically Collected Information

• Cookies: We use cookies and similar tracking technologies to track activity and store certain information (see Section 8)
• Analytics Data: We collect analytics data about Service usage through tools like Vercel Analytics
• Performance Data: Technical data about Service performance and errors

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Provision

• To provide, operate, and maintain the Service
• To process your transactions and manage your subscriptions
• To authenticate your identity and prevent fraud
• To provide customer support and respond to your inquiries

3.2 Service Improvement

• To understand how users interact with the Service
• To develop new features and functionality
• To diagnose and fix technical issues
• To analyze usage patterns and optimize performance

3.3 Communication

• To send you service-related announcements and updates
• To notify you about changes to the Service or this Privacy Policy
• To send you marketing communications (with your consent)
• To respond to your comments and questions

3.4 Legal and Security

• To comply with legal obligations and enforce our Terms of Service
• To protect our rights, privacy, safety, or property
• To detect, prevent, and address fraud and security issues

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on:

• Contract Performance: Processing is necessary to perform our contract with you (providing the Service)
• Legitimate Interests: Processing is necessary for our legitimate interests, such as improving our Service, unless overridden by your rights
• Legal Compliance: Processing is necessary to comply with legal obligations
• Consent: You have given explicit consent for specific processing activities (e.g., marketing emails)

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Stripe: Payment processing (PCI-DSS compliant)
• Supabase: Database and authentication services (GDPR compliant)
• Vercel: Hosting and analytics services
• Email Service Providers: Transactional and marketing emails

These service providers are bound by contractual obligations to keep your information confidential and use it only for the purposes we specify.

5.2 Business Transfers

If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal requests from government authorities
• Court orders or subpoenas
• Legal processes requiring disclosure
• Situations involving potential threats to safety or security

5.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS
• Encryption of sensitive data at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained while your account is active and for a reasonable period after account deletion
• Transaction Records: Retained for at least 7 years for tax and accounting purposes
• Usage Data: Typically retained for 12-24 months for analytics purposes
• Marketing Data: Retained until you withdraw consent or object to processing

After the retention period expires, we will securely delete or anonymize your information.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your use of the Service. You can control cookies through your browser settings.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Service to function (authentication, security)
• Analytics Cookies: Help us understand how users interact with the Service
• Functional Cookies: Remember your preferences and settings
• Performance Cookies: Monitor Service performance and optimize user experience

8.2 Managing Cookies

You can set your browser to refuse all or some cookies, or to alert you when cookies are being set. However, if you disable cookies, some features of the Service may not function properly.

9. Your Privacy Rights

9.1 All Users

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a structured format
• Opt-Out: Unsubscribe from marketing communications

9.2 GDPR Rights (EEA Residents)

If you are located in the EEA, you also have the right to:

• Object: Object to processing based on legitimate interests
• Restrict: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
• Lodge a Complaint: File a complaint with your local data protection authority

9.3 CCPA Rights (California Residents)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt-out of the sale of your personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

9.4 Exercising Your Rights

To exercise any of these rights, please:

• Use the data export and deletion tools in your account settings
• Contact us at privacy@kobella.ai
• We will respond to your request within 30 days

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your country.

When we transfer personal data from the EEA to other countries, we use approved data transfer mechanisms such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally approved transfer mechanisms

11. Children's Privacy

The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@kobella.ai, and we will delete such information from our systems.

12. Third-Party Links

The Service may contain links to third-party websites or services that are not owned or controlled by Kobella. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for material changes)

You are advised to review this Privacy Policy periodically for any changes. Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Data Protection Officer
Kobella Kade Ventures Pte. Limited
Email: privacy@kobella.ai
Phone: +1 209 732 5446
Website: kobella.ai

For EU/EEA Residents:
If you are unsatisfied with our response, you have the right to lodge a complaint with your local supervisory authority.