Privacy Policy

Last updated: September 24, 2026


Privacy Policy


Effective Date: September 24, 2026

Last Updated: September 24, 2026


1. Introduction


Kubaicle ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI agent management platform.


2. Information We Collect


2.1 Personal Information

We collect the following personal information:

  • Account Information: Name, email address, password (hashed)
  • Profile Information: Full name, timezone, language preferences, avatar
  • Contact Information: Email address for communications
  • Authentication Data: Login credentials and session information

  • 2.2 Usage Information

    We automatically collect:

  • Service Usage: Features used, time spent, actions taken
  • Device Information: IP address, browser type, operating system
  • Log Data: Server logs, error reports, performance data
  • Cookies and Tracking: Session cookies, analytics cookies

  • 2.3 Content Information

    We store and process:

  • Chat Messages: Conversations between users and AI agents
  • Workflow Data: Automated business processes and configurations
  • Agent Configurations: AI agent settings, capabilities, and preferences
  • Organization Data: Team structures, member information, permissions

  • 2.4 Third-Party Data

    We may receive data from:

  • OAuth Providers: Google, GitHub (profile information; see Section 21 for how we handle Google user data)
  • AI Providers: OpenAI, Anthropic, Google AI, xAI (conversation data)
  • Integration Partners: Webhook data from external systems

  • 3. How We Use Your Information


    3.1 Service Provision

    We use your information to:

  • Provide and maintain the Service
  • Process your requests and transactions
  • Enable AI agent interactions and workflows
  • Manage your account and preferences

  • 3.2 Communication

    We use your information to:

  • Send service-related notifications
  • Provide customer support
  • Send marketing communications (with consent)
  • Notify you of important changes

  • 3.3 Service Improvement

    We use your information to:

  • Analyze usage patterns and trends
  • Improve the reliability and usability of the Service
  • Develop new features and capabilities
  • Ensure service security and reliability

  • 3.4 Legal Compliance

    We use your information to:

  • Comply with applicable laws and regulations
  • Respond to legal requests and court orders
  • Protect our rights and interests
  • Prevent fraud and abuse

  • 4. Information Sharing and Disclosure


    4.1 Third-Party AI Providers

    We share your data with AI providers to enable service functionality:

  • OpenAI: Chat messages, prompts, and responses
  • Anthropic: Conversation data and AI interactions
  • Google AI: Query data and processing requests
  • xAI: AI model interactions and data processing

  • 4.2 Service Providers

    We share information with trusted third parties who:

  • Provide hosting and infrastructure services
  • Process payments and billing
  • Deliver customer support
  • Conduct analytics and monitoring

  • 4.3 Legal Requirements

    We may disclose information when required to:

  • Comply with legal obligations
  • Respond to lawful requests
  • Protect our rights and property
  • Ensure user safety and security

  • 4.4 Business Transfers

    We may share information in connection with:

  • Mergers, acquisitions, or asset sales
  • Corporate restructuring
  • Bankruptcy or insolvency proceedings

  • 5. Data Security


    5.1 Security Measures

    We implement appropriate technical and organizational measures:

  • Encryption: Data encrypted in transit and at rest
  • Access Controls: Role-based access and authentication
  • Monitoring: Continuous security monitoring and logging
  • Regular Audits: Periodic security assessments

  • 5.2 Data Breach Response

    In the event of a data breach, we will:

  • Notify affected users within 72 hours
  • Report to relevant authorities as required
  • Take immediate steps to contain the breach
  • Provide guidance on protective measures

  • 6. Data Retention


    6.1 Retention Periods

    We retain your information for:

  • Account Data: Until account deletion or 3 years of inactivity
  • Chat Messages: 2 years or until manually deleted
  • Usage Analytics: 1 year for service improvement
  • Legal Records: As required by applicable law

  • 6.2 Data Deletion

    You may request deletion of your data:

  • Right to Erasure: Request deletion of personal data
  • Account Deletion: Complete removal of account and data
  • Selective Deletion: Remove specific data types
  • Processing Time: Deletion completed within 30 days

  • 7. Your Rights and Choices


    7.1 Access and Portability

    You have the right to:

  • Access your personal information
  • Receive a copy of your data in a portable format
  • Request correction of inaccurate information
  • Update your account information

  • 7.2 Control and Preferences

    You can:

  • Update your privacy settings
  • Opt out of marketing communications
  • Control cookie preferences
  • Manage data sharing preferences

  • 7.3 Data Subject Rights (GDPR)

    If you are in the EU, you have additional rights:

  • Right to Rectification: Correct inaccurate data
  • Right to Erasure: Delete your personal data
  • Right to Restriction: Limit processing of your data
  • Right to Object: Object to certain processing activities

  • 8. International Data Transfers


    8.1 Cross-Border Transfers

    Your data may be transferred to and processed in:

  • United States (primary processing location)
  • European Union (for EU users)
  • Other countries where our service providers operate

  • 8.2 Transfer Safeguards

    We ensure adequate protection through:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions by relevant authorities
  • Binding Corporate Rules
  • Other appropriate safeguards

  • 9. Cookies and Tracking Technologies


    9.1 Types of Cookies

    We use different types of cookies:

  • Essential Cookies: Required for service functionality
  • Analytics Cookies: Help us understand usage patterns
  • Preference Cookies: Remember your settings
  • Marketing Cookies: Enable targeted communications

  • 9.2 Cookie Management

    You can control cookies through:

  • Browser settings and preferences
  • Our cookie consent banner
  • Third-party opt-out tools
  • Account privacy settings

  • 10. Children's Privacy


    10.1 Age Restrictions

    Our Service is not intended for anyone under 18:

  • We do not knowingly collect data from anyone under 18
  • If we discover such data, we will delete it immediately
  • Parents may contact us to request data deletion

  • 10.2 Parental Rights

    Parents have the right to:

  • Review their child's personal information
  • Request deletion of their child's data
  • Refuse further collection of their child's data

  • 11. California Privacy Rights (CCPA)


    11.1 California Residents

    If you are a California resident, you have the right to:

  • Know what personal information we collect
  • Know whether we sell or disclose personal information
  • Say no to the sale of personal information
  • Access your personal information
  • Request deletion of personal information

  • 11.2 Non-Discrimination

    We will not discriminate against you for exercising your privacy rights.


    12. Changes to This Privacy Policy


    12.1 Updates

    We may update this Privacy Policy from time to time:

  • Material changes will be communicated with 30 days' notice
  • Minor changes will be posted with updated effective date
  • Continued use constitutes acceptance of updated policy

  • 12.2 Notification Methods

    We will notify you of changes through:

  • Email notifications
  • Service announcements
  • Website notifications
  • Account dashboard alerts

  • 13. Contact Information


    13.1 Privacy Inquiries

    For privacy-related questions or requests:

  • Email: privacy@kubaicle.com

  • 13.2 Data Protection Officer

    For EU users, contact our Data Protection Officer:

  • Email: dpo@kubaicle.com

  • 14. Complaints and Disputes


    14.1 Internal Process

    We will investigate and respond to privacy complaints within 30 days.


    14.2 Regulatory Complaints

    You may also contact relevant data protection authorities:

  • EU: Your local data protection authority
  • US: Federal Trade Commission (FTC)
  • Other Jurisdictions: Relevant privacy regulators

  • 15. Third-Party Services


    15.1 External Links

    Our Service may contain links to third-party websites:

  • We are not responsible for their privacy practices
  • Review their privacy policies before providing information
  • We do not endorse or control third-party content

  • 15.2 AI Provider Policies

    Please review the privacy policies of our AI providers:

  • OpenAI Privacy Policy
  • Anthropic Privacy Policy
  • Google AI Privacy Policy
  • xAI Privacy Policy

  • 16. Data Processing Legal Basis


    16.1 Lawful Basis

    We process your data based on:

  • Consent: When you explicitly agree to processing
  • Contract: To provide services you've requested
  • Legitimate Interest: For service improvement and security
  • Legal Obligation: To comply with applicable laws

  • 16.2 Withdrawal of Consent

    You may withdraw consent at any time:

  • Contact us to withdraw consent
  • Some processing may continue based on other legal bases
  • Withdrawal may affect service functionality

  • 17. Automated Decision Making


    17.1 AI Processing

    Our Service uses AI for:

  • Generating responses to your queries
  • Analyzing usage patterns
  • Detecting security threats
  • Optimizing service performance

  • 17.2 Human Review

    You have the right to:

  • Request human review of automated decisions
  • Contest automated decisions
  • Receive explanations of automated processing

  • 18. Special Categories of Data


    18.1 Sensitive Data

    We do not intentionally process special categories of personal data:

  • Racial or ethnic origin
  • Political opinions
  • Religious or philosophical beliefs
  • Trade union membership
  • Health or biometric data
  • Sexual orientation

  • 18.2 Accidental Processing

    If we accidentally process sensitive data:

  • We will delete it immediately upon discovery
  • We will notify you if required by law
  • We will implement additional safeguards

  • 19. Data Minimization


    19.1 Collection Principles

    We follow data minimization principles:

  • Collect only data necessary for service provision
  • Limit data collection to stated purposes
  • Regularly review and purge unnecessary data
  • Implement data retention schedules

  • 20. Privacy by Design


    20.1 Built-in Privacy

    We implement privacy by design:

  • Privacy considerations in all development
  • Default privacy settings
  • Regular privacy impact assessments
  • Staff privacy training and awareness

  • 21. Google User Data


    This section describes how Kubaicle accesses, uses, stores, and shares data we receive when you choose Sign in with Google.


    21.1 Data We Access

    When you sign in with Google we request only the openid, email, and profile scopes. From your Google Account we receive:

  • Your name
  • Your email address and whether Google has verified it
  • Your profile picture URL
  • A Google account identifier

  • We do not request access to Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google service.


    21.2 How We Use It

    We use Google user data only to:

  • Create your Kubaicle account and sign you in
  • Display your name and profile picture within the Service
  • Contact you about your account and the Service

  • 21.3 How We Store and Protect It

    Google user data is stored with your account in our authentication provider (Supabase), encrypted in transit and at rest, and protected by the access controls described in Section 5. It is kept for as long as your account exists and is deleted as described in Section 6.2.


    21.4 Sharing

    We do not sell Google user data. We do not share it with AI providers, advertisers, or data brokers. It is shared only with the infrastructure providers that host the Service on our behalf, or where required by law.


    21.5 Limited Use

    Kubaicle's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve, or train generalized AI or machine learning models, and we do not use it for advertising.


    21.6 Revoking Access and Deleting Your Data

    You can revoke Kubaicle's access to your Google Account at any time from your Google Account permissions page. To delete the Google user data we hold, delete your Kubaicle account or email privacy@kubaicle.com and we will delete it within 30 days.


    ---


    This Privacy Policy is effective as of September 24, 2026.


    Questions about this document? Contact Kubaicle, LLC at info@kubaicle.com.