Privacy Policy for Klox

Introduction

Klox is an AI content creation platform for generating text, images, and videos and for arranging creative workflows on a visual canvas. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website, accounts, generation tools, workflow canvas, payment features, and related services.

Information We Collect

We collect information needed to operate the service and improve the product.

• Account information, such as your name, email address, authentication provider identifiers, email verification status, and account settings.
• Authentication and security data, such as sessions, verification tokens, password reset records, rate limit data, Turnstile signals when enabled, and related security metadata.
• User content, such as uploaded files, text prompts, generation settings, workflow nodes and edges, canvas viewport data, published workflow snapshots, generated outputs, and related task results.
• Usage and credit data, such as generation task status, model selections, credit consumption, idempotency keys, API key records, subscription state, and product usage events.
• Payment data, such as Stripe checkout, subscription, invoice, and payment status information. We do not store full payment card numbers on our servers.
• Technical and analytics data, such as device and browser information, approximate location inferred from network data, pages viewed, feature interactions, referral data, and diagnostics collected through tools such as PostHog, Google tag, and Microsoft Clarity when configured.

How We Use Information

• To create and manage your account, authenticate sessions, verify email addresses, and provide customer support.
• To process AI generation requests, save workflow drafts, publish workflow versions, deliver generated files, and maintain generation history.
• To calculate credits, enforce usage limits, manage subscriptions, process payments, and prevent fraud or abuse.
• To operate, secure, debug, and improve the service, including monitoring reliability and preventing unauthorized access.
• To communicate service updates, security notices, account messages, and support responses.
• To comply with legal obligations and enforce our Terms of Service.

AI Processing and Service Providers

Klox may send prompts, uploaded media, generation parameters, and related task data to third-party AI model providers and infrastructure providers only as needed to perform requested generations or workflow operations. These providers may include text, image, and video generation vendors, Cloudflare services, storage providers, email services, analytics tools, authentication services, and Stripe for payments.

Provider processing is governed by the provider terms and privacy commitments applicable to their services. Avoid submitting content that you do not have the right to use or information that you do not want processed by external AI services.

Storage and Security

We use technical and organizational safeguards designed to protect personal information and user content. Klox stores application data in systems such as Cloudflare D1, KV, and R2, and uses access controls, authentication, and operational monitoring. No internet service can be guaranteed to be completely secure.

Sharing and Disclosure

• With service providers who help us operate AI generation, hosting, storage, analytics, email, authentication, payment, and support services.
• With legal authorities or other parties when required by law, legal process, or to protect rights, safety, and service integrity.
• As part of a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections.
• With your direction or consent, including when you publish or share workflow content.

Your Choices and Rights

You may update certain account information in the product, delete content where supported, or contact us to request access, correction, deletion, or export of personal information. Some information may be retained where required for security, legal compliance, payment records, dispute resolution, or legitimate business operations.

Data Retention

We retain information for as long as needed to provide the service, maintain account and payment records, operate workflow history and generated content features, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary by data type and product setting.

International Use

Your information may be processed in countries other than where you live. By using Klox, you understand that information may be transferred to and processed by us and our providers in locations where we operate.

Children

Klox is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can take appropriate action.

Changes to This Policy

We may update this Privacy Policy as the service changes. When changes are material, we will provide notice through the website, product, email, or another appropriate channel. The updated policy is effective when posted unless stated otherwise.

Contact Us

For privacy questions or requests, contact us at support@klox.ai.