Privacy Policy

1. Information We Collect

When you create a Kermiza AI account, we collect your name, email address, and password (hashed). If you sign in with Google, we receive your name, email, and profile picture from Google.

We also collect usage data such as designs created, AI features used, and export activity to improve the product and monitor service health.

2. How We Use Your Information

• To provide and operate the Kermiza AI service
• To send transactional emails (account verification, password reset)
• To process payments via PayPal
• To improve our AI models and product features
• To respond to support requests

3. Data Storage

Your designs, uploaded images, and AI-generated assets are stored securely in Cloudflare R2 object storage. Account data is stored in a managed PostgreSQL database. All data is encrypted at rest and in transit.

4. Third-Party Services

We use the following third-party services to operate Kermiza AI:

• PayPal — payment processing. We do not store your card details.
• OpenAI — AI copywriting feature
• Replicate / Stability AI — AI image creation and background removal
• Google OAuth — optional sign-in method
• Cloudflare R2 — file storage

5. Cookies

We use a JWT token stored in your browser's local storage to keep you signed in. We do not use tracking cookies or advertising cookies.

6. Your Rights

You have the right to access, correct, or delete your personal data at any time. To delete your account and all associated data, go to Dashboard → Settings → Delete Account, or contact us directly.

7. Data Retention

We retain your account data for as long as your account is active. When you delete your account, all personal data and uploaded assets are permanently deleted within 30 days.

8. Contact

If you have any questions about this Privacy Policy, please contact us at support@kermiza.com