Privacy Policy

01Information we collect

02How we use your information

We use the information we collect to:

• Deliver the AI advisory services you have ordered
• Communicate with you about your project (kickoff, previews, revisions, delivery)
• Process payments and issue receipts
• Provide customer support and respond to questions
• Send transactional notifications (order confirmation, brief reminder, preview ready, delivery)
• Improve our services and internal workflows
• Detect, prevent, and respond to fraud, abuse, or security incidents
• Comply with our legal and tax obligations

We do not use your project files, briefs, or prompts to train AI models, and we do not use your information for automated decision-making that produces legal effects. Where we use third-party model providers to perform your engagement, we use enterprise or API plans on which training on submitted data is contractually disabled.

03Information sharing

We do not sell, rent, or trade your personal information.

We share information only in these limited cases:

04Data security

We apply commercially reasonable technical and organizational measures to protect personal information, including:

• TLS encryption in transit
• Access controls limiting who at the studio can read project files
• Deliverables stored privately and served only through access-controlled, expiring links — never from a public URL
• Periodic review of sub-processors and access logs

No method of transmission over the Internet or electronic storage is fully secure. We cannot and do not guarantee absolute security.

05Data retention

We retain personal information only as long as necessary for the purposes described in this Policy:

• Active project communications and files: for the duration of the engagement
• Completed project files: 12 months after final delivery, then deleted unless you request earlier deletion or longer retention
• Billing records and invoices: 7 years, to satisfy tax and accounting obligations
• Marketing contacts (if you opted in): until you unsubscribe

You may request earlier deletion at any time by contacting privacy@aikit.studio.

06Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your personal information (“right to be forgotten”)
• Object to or restrict certain processing
• Receive your data in a portable format
• Withdraw consent for processing that depends on consent
• Lodge a complaint with a supervisory authority

To exercise any of these rights, email privacy@aikit.studio. We will respond within the timeframe required by applicable law (generally 30 days).

07Third-party links

The site may link to third-party websites, including payment providers. We are not responsible for the privacy practices of those sites. We encourage you to review their policies.

08Children's privacy

aikit.studio is intended for businesses and adults (18+). We do not knowingly collect personal information from children under 18. If you believe a child has submitted personal information, contact us at privacy@aikit.studio and we will delete it promptly.

09International transfers

CYFIROW LLC is based in the United States. If you access our services from outside the U.S., your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your jurisdiction. Where required, we rely on appropriate transfer mechanisms (such as Standard Contractual Clauses) for transfers from the EEA, UK, or Switzerland.

10GDPR compliance (EEA / UK / Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland:

• Data Controller: CYFIROW LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States
• Lawful bases: contract performance to deliver services you have ordered; legitimate interests in operating and securing the site and preventing fraud; consent for non-essential cookies and marketing; legal obligation to retain billing records
• International transfers: personal data is transferred to the United States. Where required, transfers rely on Standard Contractual Clauses or equivalent safeguards
• Right to complain: you may lodge a complaint with your local data-protection authority

11CCPA / CPRA compliance (California residents)

If you are a California resident, you have the following rights:

• Right to Know: request the categories and specific pieces of personal information we collect, use, and disclose
• Right to Delete: request deletion of personal information we hold, subject to legal exceptions
• Right to Correct: request correction of inaccurate personal information
• Right to Opt Out: we do not sell or “share” personal information for cross-context behavioral advertising
• Right to Non-Discrimination: we will not deny you services or charge a different price for exercising your rights

To make a request, email privacy@aikit.studio with the subject line “California Privacy Request.” We will verify your identity before responding.

12Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised “Last updated” date and a new version identifier, and where appropriate communicated by email to active clients. See also our Terms of Service and Refund Policy.