Privacy Policy
Your privacy is fundamental to how we build our products.
Introduction
Kitefish Technology Pvt Ltd ("we," "us," or "our") operates the KiteFishAI platform and related services. This Privacy Policy explains what personal data we collect, how we use it, and your rights in relation to it. We are committed to compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable international data protection standards.
Data We Collect
Information you provide
- Account registration details (name, email, organisation, designation)
- Payment and billing information (processed through secure third-party providers)
- API inputs and prompts submitted to our models
- Support and communication correspondence
Information collected automatically
- API usage logs (endpoint, timestamp, token counts, response metadata)
- Device and browser information for web console access
- IP addresses and geographic region (country/state level)
- Error logs and diagnostic information
How We Use Your Data
We use collected data for the following purposes:
- To provide, maintain, and improve the Services
- To process transactions and send billing-related communications
- To detect abuse, enforce our Terms of Service, and ensure system security
- To respond to customer support inquiries
- To comply with legal obligations under applicable Indian and international law
- To send service announcements and product updates (you may opt out at any time)
Data Retention for Abuse Prevention
Interaction data — including API request and response logs — is retained for 30 days from the date of interaction. The sole purpose of this retention is to identify, investigate, and prevent misuse, abuse, or policy violations on our platform.
After the 30-day period, this data is permanently deleted unless we are legally required to retain it or an active investigation requires its preservation.
We implement appropriate technical and organisational measures to protect this data during the retention period.
Model Training — Opt-In Only
We will never use your data to train, fine-tune, or evaluate our AI models without your explicit, informed consent.
If you wish to contribute your interaction data to help improve our models, you may opt in by enabling the "Contribute to Model Training" toggle in your account settings, or by executing a written data contribution agreement with us.
Opting in is entirely voluntary and does not affect service pricing or features. You may withdraw consent at any time through your account settings or by contacting legal@kitefishai.com. Withdrawal applies prospectively.
Data Sharing and Disclosure
We do not sell, rent, or trade your personal data. We may share data only in the following circumstances:
- With trusted service providers (e.g., cloud infrastructure, payment processors) under binding data processing agreements
- With law enforcement or regulatory authorities when required by valid legal process
- In connection with a merger, acquisition, or sale of assets (with prior notice to you)
- With your explicit consent
For enterprise on-premises deployments: your data never leaves your infrastructure. We do not receive or process your inference data in such arrangements.
International Data Transfers
Our primary infrastructure is located in India. If data is transferred outside India, we ensure adequate safeguards are in place consistent with the DPDP Act, 2023. For EEA/UK users, please refer to our GDPR Addendum.
Data Security
We implement industry-standard technical and organisational security measures, including encryption in transit (TLS), access controls, audit logging, and periodic security assessments. No system is completely secure — we encourage you to use strong, unique credentials and notify us immediately of any suspected breach.
Your Rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your personal data (subject to legal retention obligations)
- Withdraw consent for model training at any time
- Receive a copy of your data in a structured, portable format
- Lodge a complaint with the Data Protection Board of India
To exercise these rights, contact legal@kitefishai.com. We will respond within 30 days.
Children's Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us immediately.
Cookies and Tracking
Our web console uses strictly necessary cookies for session management and authentication. We do not use third-party advertising cookies or behavioural tracking tools. You can control cookie settings through your browser preferences.
Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or a notice on our website at least 14 days before taking effect.
Contact Us
For privacy-related inquiries, requests, or complaints, contact us at legal@kitefishai.com or visit kitefishai.com.