Privacy Policy

1. Introduction and Commitment

Apptime Serviços de Internet Ltda is dedicated to protecting the privacy, security, and personal data of our Users and Customers. This Privacy Policy clearly explains how we collect, use, store, share, and protect your information when you use our services and artificial intelligence tools.

Our privacy practices comply with applicable data protection regulations, including the Brazilian General Data Protection Law (LGPD - Law No. 13,709/2018), the Brazilian Civil Rights Framework for the Internet (Law No. 12,965/2014), and, where applicable, the European Union General Data Protection Regulation (GDPR).

2. Information We Collect

To operate the platform and deliver high-quality outputs quickly, we collect:

2.1. Account and Registration Data

Full name or social identifier
Email address and profile picture
Authentication credentials (secure email login tokens or identity provider credentials)
Business details (business name, niche, and direct contact channels)

2.2. Creation Inputs and Interaction Content

Prompts, descriptions, project ideas, and instructions sent to AI assistants
Media files uploaded voluntarily (brand logos, product photography, reference documents)
Style preferences, color palettes, and formatting instructions

2.3. Device and Technical Information

IP address and approximate geolocation
Browser type and version, operating system, and display settings
Access logs, duration, pages visited, and platform interactions
Essential cookies and session tokens to maintain authentication

2.4. Financial and Billing Information

Transaction history, active plans, credit balance, and invoices
Note: Sensitive payment details (such as full credit card numbers and CVV) are handled directly by our certified payment processors (Mercado Pago, Asaas and AbacatePay) and are never stored on our servers.

3. How We Use Your Information

We process personal data for the following legitimate purposes:

Service Delivery and Artifact Generation: Processing your prompts to create, edit, host, and publish websites, PDF documents, visual media, video scripts, and copy.
Platform Operations and Security: Maintaining system stability, network security, fraud prevention, and performance monitoring.
Customer Support: Responding to inquiries, resolving issues, and providing onboarding assistance.
Operational Communications: Sending critical account notices, project updates, security alerts, and billing confirmations.
Continuous Product Improvement: Conducting aggregated, anonymized analysis to optimize platform speed and user experience.

4. Artificial Intelligence Data Processing

Kipflow integrates cutting-edge generative AI models to fulfill requests in real time. Regarding AI data handling:

Purpose-Specific: Inputs and prompt instructions are processed strictly to generate your requested outputs.
No Sale of User Data: Kipflow does not sell, rent, or monetize your personal data, prompts, or uploaded assets to third parties or advertisers.
Enterprise Infrastructure: AI integrations operate via enterprise-grade, secure APIs (such as Google Cloud / Firebase) under strict confidentiality and data protection standards.

5. Personal Data Collected Through Users' Published Artifacts

When you use Kipflow to publish websites, landing pages, lead capture forms, WhatsApp buttons, or checkouts, those artifacts may collect personal data from third parties who visit or interact with them (for example, name, email, phone number, or submitted messages).

With respect to that data, the User who created and published the artifact acts as the Data Controller under applicable law (including the LGPD), and is responsible for determining the purpose and legal basis for processing, providing adequate notice to their own visitors, and responding to those individuals' data subject requests.

Kipflow acts in these cases solely as a Data Processor, handling and storing such data strictly as needed to host and operate the artifact published by the User, without determining the purpose of the processing. Data subject requests received directly by Kipflow regarding visitor data will be forwarded to the responsible User whenever possible, who is responsible for fulfilling them.

For more detail on your obligations as a Data Controller in these cases, see section 5.2 of our Terms of Service.

We share data only when necessary to provide our core services:

Cloud & Hosting Infrastructure: Server hosting, databases, asset storage, and content delivery networks (CDNs).
Payment Processors: Secure financial gateways for recurring billing and credit transactions.
Communication & Support Tools: Email delivery and messaging systems for support and transaction receipts.
Legal Compliance: When required by law or competent judicial authority, strictly within statutory limits.

7. Security and Data Protection

We employ rigorous technical and organizational security controls:

Encryption in transit (HTTPS / TLS) and at rest across databases
Least-privilege access control
Continuous vulnerability scanning and threat detection

We advise users never to submit sensitive confidential data (such as passwords or private medical records) in open prompts or public web pages.

8. Data Retention and Account Deletion

Personal data is retained as long as your account remains active or as needed to fulfill the purposes described herein.

When you request account deletion, your personal data and private artifacts will be permanently removed, except where retention is legally mandated (such as internet access logs under statutory laws).

9. Your Rights

Under applicable privacy legislation (such as LGPD/GDPR), you have the right to:

Confirm the processing of your personal data
Access your data held by us
Request correction of inaccurate, incomplete, or outdated data
Request anonymization, blocking, or deletion of unnecessary data
Revoke previously given consents
Request permanent deletion of your account

To exercise your rights, please submit a request via our Help Center.

10. Policy Updates

We may update this Privacy Policy periodically. Significant changes will be announced on the platform or by email.

11. Contact Us

For questions, requests, or concerns regarding your privacy:

Data Protection Officer (DPO): Kipflow Privacy Team
Support Channel: Kipflow Help Center