Privacy Policy

Kyrigo LLC (“Kyrigo,” “we,” “us,” or “our”) operates the website www.kyrigo.com and associated services (collectively, the “Service”). Kyrigo is an AI-powered image and video generation platform that allows users to create original visual content using third-party AI models. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our Service.

By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not access or use the Service.

Information We Collect

Account Information

When you create an account, we collect your name and email address. You may sign up via Google OAuth or directly with an email and password. Passwords are hashed and never stored in plaintext.

Payment Information

When you purchase credits or a subscription, payment details are collected and processed directly by Stripe. Kyrigo does not store your credit card numbers or full payment instrument details on our servers.

Usage and Generation Data

• Prompts: The text prompts you submit to generate images or videos.
• Generation history: A record of all generations associated with your account, including outputs and settings.
• Credit transactions: A log of credits purchased, used, and remaining.

Uploaded Images

When you use image-to-image editing features, you may upload reference images. These are stored privately in cloud storage and are only accessible to you via authenticated signed URLs.

Device and Technical Information

• Device and browser info: Browser type, operating system, device type, screen resolution, and language preferences.
• IP addresses: Logged with each request for security and fraud prevention.
• Cookies: We use Supabase authentication cookies to maintain your session. See the Cookies section below.

How We Use Your Information

• Service delivery: To generate images and videos based on your prompts using third-party AI model providers.
• Payment processing: To handle credit purchases, subscriptions, and billing through Stripe.
• Account management: To create and authenticate your account and maintain your credit balance and generation history.
• Service improvement: To analyze usage patterns and improve platform performance, reliability, and features.
• Fraud and abuse prevention: To detect and prevent unauthorized access, misuse, and fraudulent activity.
• Communication: To send transactional and service-related emails (account alerts, billing receipts, policy updates). We do not send unsolicited marketing emails without your consent.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.

AI-Generated Content

Your prompts and generated outputs are stored in your account and are private to you. The following practices govern how we handle your creative content:

• Private storage: Generated images and videos are stored in private cloud storage. Access is controlled via authenticated signed URLs — only you can access your content.
• No AI training: We do not use your prompts, uploaded images, or generated outputs to train AI models, fine-tune models, or improve any machine learning system.
• No data sales: We do not sell your prompts, generated content, or any associated data to third parties.
• Prompts sent to AI providers: To generate your requested content, your prompts are transmitted to third-party AI model providers (such as WaveSpeed, Replicate, or fal.ai). See the Third-Party Services section for details.

Third-Party Services

We rely on the following third-party providers to operate the Service. Each provider has its own privacy policy governing how they handle data.

Important note on AI providers: When you submit a prompt, that prompt is transmitted to a third-party AI model provider to generate the requested image or video. These providers process your prompt under their own terms and privacy policies. We select providers who do not use customer inputs to train their models, but we encourage you to review their policies directly.

Data Retention

• Account data: Retained while your account is active.
• Generated content: Stored until you delete it or close your account.
• Payment records: Retained as required by applicable tax and financial regulations (typically 7 years).
• Inactive accounts: We may delete accounts that have been inactive for 12 or more consecutive months. We will notify you by email before doing so.

Data Security

We take the security of your data seriously and employ the following safeguards:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS/SSL.
• Encryption at rest: Data stored in Supabase is encrypted at rest using AES-256 encryption.
• Private signed URLs: Generated images and videos are stored in private buckets and accessed only via time-limited authenticated signed URLs. They are not publicly accessible.
• Row-level security: Our database enforces row-level security policies so that users can only access their own data.
• Payment security: All payment processing is handled by Stripe (PCI DSS Level 1 certified). Kyrigo never handles or stores raw card data.

No system is perfectly secure. While we work hard to protect your information, we cannot guarantee absolute security.

Cookies

We use a minimal set of cookies required to operate the Service:

• Supabase auth cookies: Essential session cookies used to keep you logged in. These are required for the Service to function and cannot be disabled without logging out.

We do not use advertising cookies, tracking cookies, or third-party analytics cookies. You can control cookies through your browser settings, though disabling essential cookies will prevent you from using authenticated features.

Your Rights

You have the following rights with respect to your personal information:

• Access: Request a copy of the personal information we hold about you.
• Deletion: Request that we delete your account and associated personal data, subject to legal retention requirements.
• Correction: Request that we correct inaccurate or incomplete personal information.
• Export: Request a machine-readable export of your data, including your generation history.
• Restriction: Request that we restrict processing of your data in certain circumstances.

To exercise any of these rights, contact us at support@kyrigo.com. We will respond within 30 days.

Children's Privacy

The Service is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under the age of 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@kyrigo.com and we will delete it promptly.

California Privacy Rights — CCPA/CPRA

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources, the business or commercial purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: Kyrigo does not sell or share your personal information. No opt-out action is required.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

To submit a CCPA/CPRA request, email us at support@kyrigo.com. We will respond within 45 days.

International Users

Our Service is operated in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. Data protection laws in the United States may differ from those in your country or region. By using the Service, you consent to this transfer. We take steps to ensure your information receives an adequate level of protection wherever it is processed.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and notify registered users via email at least 30 days before changes take effect. Continued use of the Service after the effective date constitutes acceptance of the revised policy.

Contact Us

This Privacy Policy was last updated on April 16, 2026.
Kyrigo LLC — AI Creative Studio