Privacy Policy
Effective Date: September 24, 2026
Last Updated: September 24, 2026
1. Introduction
Kubaicle ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI agent management platform.
2. Information We Collect
2.1 Personal Information
We collect the following personal information:
Account Information: Name, email address, password (hashed)Profile Information: Full name, timezone, language preferences, avatarContact Information: Email address for communicationsAuthentication Data: Login credentials and session information2.2 Usage Information
We automatically collect:
Service Usage: Features used, time spent, actions takenDevice Information: IP address, browser type, operating systemLog Data: Server logs, error reports, performance dataCookies and Tracking: Session cookies, analytics cookies2.3 Content Information
We store and process:
Chat Messages: Conversations between users and AI agentsWorkflow Data: Automated business processes and configurationsAgent Configurations: AI agent settings, capabilities, and preferencesOrganization Data: Team structures, member information, permissions2.4 Third-Party Data
We may receive data from:
OAuth Providers: Google, GitHub (profile information; see Section 21 for how we handle Google user data)AI Providers: OpenAI, Anthropic, Google AI, xAI (conversation data)Integration Partners: Webhook data from external systems3. How We Use Your Information
3.1 Service Provision
We use your information to:
Provide and maintain the ServiceProcess your requests and transactionsEnable AI agent interactions and workflowsManage your account and preferences3.2 Communication
We use your information to:
Send service-related notificationsProvide customer supportSend marketing communications (with consent)Notify you of important changes3.3 Service Improvement
We use your information to:
Analyze usage patterns and trendsImprove the reliability and usability of the ServiceDevelop new features and capabilitiesEnsure service security and reliability3.4 Legal Compliance
We use your information to:
Comply with applicable laws and regulationsRespond to legal requests and court ordersProtect our rights and interestsPrevent fraud and abuse4. Information Sharing and Disclosure
4.1 Third-Party AI Providers
We share your data with AI providers to enable service functionality:
OpenAI: Chat messages, prompts, and responsesAnthropic: Conversation data and AI interactionsGoogle AI: Query data and processing requestsxAI: AI model interactions and data processing4.2 Service Providers
We share information with trusted third parties who:
Provide hosting and infrastructure servicesProcess payments and billingDeliver customer supportConduct analytics and monitoring4.3 Legal Requirements
We may disclose information when required to:
Comply with legal obligationsRespond to lawful requestsProtect our rights and propertyEnsure user safety and security4.4 Business Transfers
We may share information in connection with:
Mergers, acquisitions, or asset salesCorporate restructuringBankruptcy or insolvency proceedings5. Data Security
5.1 Security Measures
We implement appropriate technical and organizational measures:
Encryption: Data encrypted in transit and at restAccess Controls: Role-based access and authenticationMonitoring: Continuous security monitoring and loggingRegular Audits: Periodic security assessments5.2 Data Breach Response
In the event of a data breach, we will:
Notify affected users within 72 hoursReport to relevant authorities as requiredTake immediate steps to contain the breachProvide guidance on protective measures6. Data Retention
6.1 Retention Periods
We retain your information for:
Account Data: Until account deletion or 3 years of inactivityChat Messages: 2 years or until manually deletedUsage Analytics: 1 year for service improvementLegal Records: As required by applicable law6.2 Data Deletion
You may request deletion of your data:
Right to Erasure: Request deletion of personal dataAccount Deletion: Complete removal of account and dataSelective Deletion: Remove specific data typesProcessing Time: Deletion completed within 30 days7. Your Rights and Choices
7.1 Access and Portability
You have the right to:
Access your personal informationReceive a copy of your data in a portable formatRequest correction of inaccurate informationUpdate your account information7.2 Control and Preferences
You can:
Update your privacy settingsOpt out of marketing communicationsControl cookie preferencesManage data sharing preferences7.3 Data Subject Rights (GDPR)
If you are in the EU, you have additional rights:
Right to Rectification: Correct inaccurate dataRight to Erasure: Delete your personal dataRight to Restriction: Limit processing of your dataRight to Object: Object to certain processing activities8. International Data Transfers
8.1 Cross-Border Transfers
Your data may be transferred to and processed in:
United States (primary processing location)European Union (for EU users)Other countries where our service providers operate8.2 Transfer Safeguards
We ensure adequate protection through:
Standard Contractual Clauses (SCCs)Adequacy decisions by relevant authoritiesBinding Corporate RulesOther appropriate safeguards9. Cookies and Tracking Technologies
9.1 Types of Cookies
We use different types of cookies:
Essential Cookies: Required for service functionalityAnalytics Cookies: Help us understand usage patternsPreference Cookies: Remember your settingsMarketing Cookies: Enable targeted communications9.2 Cookie Management
You can control cookies through:
Browser settings and preferencesOur cookie consent bannerThird-party opt-out toolsAccount privacy settings10. Children's Privacy
10.1 Age Restrictions
Our Service is not intended for anyone under 18:
We do not knowingly collect data from anyone under 18If we discover such data, we will delete it immediatelyParents may contact us to request data deletion10.2 Parental Rights
Parents have the right to:
Review their child's personal informationRequest deletion of their child's dataRefuse further collection of their child's data11. California Privacy Rights (CCPA)
11.1 California Residents
If you are a California resident, you have the right to:
Know what personal information we collectKnow whether we sell or disclose personal informationSay no to the sale of personal informationAccess your personal informationRequest deletion of personal information11.2 Non-Discrimination
We will not discriminate against you for exercising your privacy rights.
12. Changes to This Privacy Policy
12.1 Updates
We may update this Privacy Policy from time to time:
Material changes will be communicated with 30 days' noticeMinor changes will be posted with updated effective dateContinued use constitutes acceptance of updated policy12.2 Notification Methods
We will notify you of changes through:
Email notificationsService announcementsWebsite notificationsAccount dashboard alerts13. Contact Information
13.1 Privacy Inquiries
For privacy-related questions or requests:
Email: privacy@kubaicle.com13.2 Data Protection Officer
For EU users, contact our Data Protection Officer:
Email: dpo@kubaicle.com14. Complaints and Disputes
14.1 Internal Process
We will investigate and respond to privacy complaints within 30 days.
14.2 Regulatory Complaints
You may also contact relevant data protection authorities:
EU: Your local data protection authorityUS: Federal Trade Commission (FTC)Other Jurisdictions: Relevant privacy regulators15. Third-Party Services
15.1 External Links
Our Service may contain links to third-party websites:
We are not responsible for their privacy practicesReview their privacy policies before providing informationWe do not endorse or control third-party content15.2 AI Provider Policies
Please review the privacy policies of our AI providers:
OpenAI Privacy PolicyAnthropic Privacy PolicyGoogle AI Privacy PolicyxAI Privacy Policy16. Data Processing Legal Basis
16.1 Lawful Basis
We process your data based on:
Consent: When you explicitly agree to processingContract: To provide services you've requestedLegitimate Interest: For service improvement and securityLegal Obligation: To comply with applicable laws16.2 Withdrawal of Consent
You may withdraw consent at any time:
Contact us to withdraw consentSome processing may continue based on other legal basesWithdrawal may affect service functionality17. Automated Decision Making
17.1 AI Processing
Our Service uses AI for:
Generating responses to your queriesAnalyzing usage patternsDetecting security threatsOptimizing service performance17.2 Human Review
You have the right to:
Request human review of automated decisionsContest automated decisionsReceive explanations of automated processing18. Special Categories of Data
18.1 Sensitive Data
We do not intentionally process special categories of personal data:
Racial or ethnic originPolitical opinionsReligious or philosophical beliefsTrade union membershipHealth or biometric dataSexual orientation18.2 Accidental Processing
If we accidentally process sensitive data:
We will delete it immediately upon discoveryWe will notify you if required by lawWe will implement additional safeguards19. Data Minimization
19.1 Collection Principles
We follow data minimization principles:
Collect only data necessary for service provisionLimit data collection to stated purposesRegularly review and purge unnecessary dataImplement data retention schedules20. Privacy by Design
20.1 Built-in Privacy
We implement privacy by design:
Privacy considerations in all developmentDefault privacy settingsRegular privacy impact assessmentsStaff privacy training and awareness21. Google User Data
This section describes how Kubaicle accesses, uses, stores, and shares data we receive when you choose Sign in with Google.
21.1 Data We Access
When you sign in with Google we request only the openid, email, and profile scopes. From your Google Account we receive:
Your nameYour email address and whether Google has verified itYour profile picture URLA Google account identifierWe do not request access to Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google service.
21.2 How We Use It
We use Google user data only to:
Create your Kubaicle account and sign you inDisplay your name and profile picture within the ServiceContact you about your account and the Service21.3 How We Store and Protect It
Google user data is stored with your account in our authentication provider (Supabase), encrypted in transit and at rest, and protected by the access controls described in Section 5. It is kept for as long as your account exists and is deleted as described in Section 6.2.
21.4 Sharing
We do not sell Google user data. We do not share it with AI providers, advertisers, or data brokers. It is shared only with the infrastructure providers that host the Service on our behalf, or where required by law.
21.5 Limited Use
Kubaicle's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve, or train generalized AI or machine learning models, and we do not use it for advertising.
21.6 Revoking Access and Deleting Your Data
You can revoke Kubaicle's access to your Google Account at any time from your Google Account permissions page. To delete the Google user data we hold, delete your Kubaicle account or email privacy@kubaicle.com and we will delete it within 30 days.
---
This Privacy Policy is effective as of September 24, 2026.