HomePrivacy Policy

Privacy Policy

Last Updated: January 2026

At KiVi AI, we are deeply committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website, use our application, or interact with our AI video generation services (collectively, the "Service").

This Policy should be read together with our Terms of Service and Cookie Policy.

1. Information We Collect

We collect several types of information to provide and improve the Service:

1.1 Personal Data. While using our Service, we may ask you to provide certain personally identifiable information, including:

  • Email address
  • First name and last name
  • Billing address, state, province, ZIP/Postal code, city
  • Payment information (processed securely via Stripe/PayPal; we do not store full credit card numbers)

1.2 Usage Data. We automatically collect data on how the Service is accessed and used, including your IP address, browser type and version, pages visited, time and date of visit, time spent on pages, unique device identifiers, and other diagnostic data.

1.3 Content Data (Input & Output). To function as an AI video generator, we process the text prompts, scripts, reference images, and audio you upload ("Input"), as well as the resulting animations and audio generated by the AI ("Output").

1.4 Voice Data. If you use the Voice Cloning feature, we process the short voice sample you upload ("Voice Data") to generate voiceovers for your videos. See Section 6 for how we handle Voice Data.

2. How We Use Your Information

KiVi AI uses the collected data to:

  • Provide, maintain, and monitor the Service.
  • Manage your account and process subscription payments.
  • Notify you about critical changes to the Service or policies.
  • Provide customer support and handle your inquiries.
  • Send newsletters and promotional materials only with your consent — you may opt out at any time via the unsubscribe link or your account settings.
  • Detect, prevent, and address technical issues or fraudulent activity.
  • Enforce our Terms and ensure content safety (e.g., pre-generation content filtering).

3. Legal Bases for Processing (GDPR / UK GDPR)

For users in the EEA and UK, we process your personal data on the following bases:

  • Contract: to provide the Service you signed up for (account, generation, payments).
  • Legitimate interests: to secure the Service, prevent fraud, and improve performance.
  • Consent: for marketing communications and (where enabled by you) AI training on anonymized prompt data. You may withdraw consent at any time.
  • Legal obligations: to comply with tax, accounting, and law-enforcement requirements.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal identification information. We do not share personal information for cross-context behavioral advertising. We may disclose your data in the following situations:

  • Service Providers: We engage third-party companies to facilitate the Service, including cloud hosting (AWS), payment processing (Stripe/PayPal), and foundational AI models (e.g., OpenAI/Anthropic). These providers may access your Personal Data only to perform tasks on our behalf, under contractual confidentiality obligations, and are prohibited from using it for any other purpose.
  • Legal Requirements: We may disclose your Personal Data if required by law or in response to valid requests by public authorities (e.g., a court or government agency).
  • Business Transfers: If KiVi AI is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

5. Voice Data & Biometric Information

When you use the Voice Cloning feature:

  • Purpose limitation: Your Voice Data is processed solely to create a voice model for generating voiceovers in your own videos. We do not use Voice Data to identify you or anyone else, and we do not combine it with other biometric technologies.
  • No third-party sharing: We do not sell, lease, or share Voice Data with any third party for their own purposes. Foundational model providers process voice data only on our instructions to deliver the Service.
  • Retention & deletion: Your voice sample and derived voice model are deleted within [30] days of your request, your cancellation of the feature, or your account deletion, whichever comes first — except where longer retention is required by law.
  • Consent: By uploading a voice sample, you confirm you have the right to provide it. If the sample contains a child's voice, you confirm you are the child's parent or legal guardian (see Section 7).

6. Data Security and Retention

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. We use commercially acceptable means, including AES-256 encryption for data at rest and TLS 1.3 for data in transit, to protect your Personal Data.

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements.

7. Children's Privacy

Our Service is intended for adult creators, educators, and parents — not for children under 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If we discover such data on our servers, it will be promptly deleted.

If you upload a child's voice sample or other content containing a child's likeness or personal data, you represent that you are the child's parent or legal guardian, or that you have obtained verifiable parental consent, and you consent to our processing of such content solely to provide the Service.

Our privacy practices are designed to be consistent with the Children's Online Privacy Protection Act (COPPA) and other applicable children's privacy laws. Parents who believe their child has provided us with personal information may contact us at privacy@kivix.ai for deletion.

8. Your Data Protection Rights

Depending on your location, you may have the following rights:

For EEA/UK users (GDPR): access, rectification, erasure, restriction of processing, data portability, and objection — including the right to lodge a complaint with your local supervisory authority.

For California residents (CCPA/CPRA): You have the right to:

  • Know what personal information we collect, use, and disclose (described in Section 1);
  • Delete your personal information;
  • Correct inaccurate personal information;
  • Opt out of the sharing of personal information — we do not sell or share personal information for cross-context behavioral advertising;
  • Limit the use of sensitive personal information (including Voice Data — see Section 5);
  • Non-discrimination for exercising any of these rights.

We collected the following categories of personal information in the preceding 12 months: identifiers (name, email, IP address), commercial information (purchase records), internet activity (usage data), content you submit (Input, Voice Data), and inferences. We retain each category per the table in Section 6.

Exercising your rights: Contact privacy@kivix.ai or use the request form in your account settings. We respond to GDPR requests within one month and CCPA requests within 45 days. We will not discriminate against you for exercising your rights.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. For material changes that affect your rights, we will provide at least 30 days' advance notice by email to your registered address and/or by prominent notice within the Service before the changes take effect, and we will update the "Last Updated" date at the top of this page.

10. Cross-Border Data Transfers

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, or country where the data protection laws may differ (e.g., servers located in the US via AWS). KiVi AI will take all steps reasonably necessary to ensure your data is treated securely, implementing safeguards such as Standard Contractual Clauses (SCCs) in compliance with GDPR and CCPA.

11. Data Controller and DPO

Controller : CLEVERGUARD TECHNOLOGY CO., LIMITED

HK office : UNIT 720, 7/F STAR HOUSE, 3 SALISBURY ROAD, TSIM SHA TSUI, Hong Kong

Europe office : Rf001, 1st Floor Front, 36 Gerrard Street, London, United Kingdom, W1D 5QA

Data Protection Officer(DPO) : You may contact our DPO at support@kivix.ai for questions regarding GDPR or data protection..