HelpTerms of UseLegal DetailsPrivacy PolicyCookie PolicyRecruiting Privacy PolicyLicensingPublishing DesignsCancellation PolicyChallenge RulesContact

    Privacy Policy

    This Policy defines the scope of privacy and degree of confidentiality protecting the information provided by users during registration and normal use of kittl.com (“Site”), Kittl’s services, programs and facilities. You can use the choices described in this Policy to control how we use your information. We still collect and use the information needed to provide and secure the services you use and to comply with the law.

    This Site is owned and operated by Kittl Technologies GmbH, a German company, and its affiliates (doing business as and collectively referred to as “Kittl”). By using the Site, user provides his/her consent that Kittl has the authority to collect, use and disclose the user’s personal information according to the rules of this Policy.

    Kittl proclaims and accepts its responsibility to protect the user’s personal information. This document contains the rules upon which such information is collected and used, and also the reasons for disclosure of such information. These rules apply to any personal information collected by Kittl.

    PERSONAL INFORMATION WE COLLECT

    When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

    We collect Device Information using the following technologies:

    • “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
    • “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
    • “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

    Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information, email address, and phone number. Payment card details are collected and processed by our payment provider, Stripe; Kittl does not store full payment card numbers. We refer to this information as “Order Information.”

    When we talk about “Personal Information” in this Privacy Policy, we mean information that identifies you or can be linked to you, including Device Information, Order Information, account and profile information, content and prompts, app and external AI agent connection data, integration operational data, usage data, marketing preferences and support conversations.

    We use this information to manage your account, provide the editing, storage, sharing and collaboration features you request, operate apps and external AI agent connections, communicate with you, provide support, process payments, and protect Kittl and its users.

    HOW DO WE USE YOUR PERSONAL INFORMATION?

    We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

    • Communicate with you;
    • Screen our orders for potential risk or fraud;
    • and When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

    We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

    THIRD PARTY DISCLOSURE

    We share your Personal Information with third parties to help us use your Personal Information, as described above. We use Google Analytics to help us understand how our customers use the Site--you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

    We also share Personal Information with service providers that support payment processing (Stripe), sign-in, hosting and storage, analytics, email, customer support, fraud prevention, error monitoring, AI and media processing, and with the apps and external AI agents you connect, when needed to carry out your requests. We share only the information needed for these purposes.

    Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

    APPS AND THIRD-PARTY INTEGRATIONS

    Kittl lets you connect third-party services to your Kittl account. We refer to these connections as "apps." Depending on the app, you may use it to bring assets into the Kittl Editor (for example, browsing images, files, or store products you've saved on a third-party service), or to publish designs from Kittl to those services (for example, creating a product on a print-on-demand store or listing a design on a marketplace).

    When you connect an app, the third-party service issues Kittl an authorization token (and, where applicable, a refresh token) that allows Kittl to call the service's API on your behalf. Kittl does not receive your password for that service. The scope of access — for example, your boards, products, files, listings, shops, or storefront data — is defined by the permissions you grant during the connection flow, and by any changes you later make in your account on the third-party service.

    If you import content from an app into a Kittl design (for example, adding an image to your canvas), that content becomes part of your design and is stored, processed, and shared in the same way as any other content in your workspace.

    If you use an app to publish a design from Kittl to a third-party service (for example, creating a product on a print-on-demand store, or listing a design on a marketplace), the design content you choose to send — such as the image, title, and description — is sent to that third-party service via its API. Once published, that content is subject to the third-party service's terms and privacy practices, alongside this Privacy Policy. Kittl may also receive operational data back from the third-party service in connection with the publish flow, such as the resulting product or listing identifier, publication status, error messages, and similar webhook or API responses; we use this data to operate the integration.

    You can disconnect an app at any time in your Kittl Settings, or by revoking access directly in your account on the third-party service. When you disconnect, Kittl disables the connection and deletes the active authorization credentials from our production systems. Limited copies may persist briefly in security logs and backups before being overwritten in the ordinary course. Disconnecting stops Kittl's future access to the service, but does not by itself remove products, listings, or other items you previously created on the third-party service through Kittl — those remain subject to the third-party service and to any actions you take there.

    Kittl does not sell app credentials or app-derived personal data. Data from apps may be processed by our service providers (such as hosting and infrastructure providers) as needed to operate the Kittl Editor.

    You can also use Kittl from external AI agents. When you connect an agent, you sign in to Kittl and approve the connection; the agent receives only tokens that Kittl issues for that connection, never your Kittl password. To keep the connection working and secure, Kittl stores your name, email address, user ID, account roles, the agent's client name and the encrypted connection tokens. The agent sends Kittl what is needed to carry out your requests, such as prompts and other text, images or image links, website links, workspace and content identifiers, generation settings and session information. Kittl processes the content you submit like other content you create in Kittl, and treats identifiers, settings and session information as integration operational data. Kittl may send submitted content to AI, media-processing or website-content providers when the requested feature needs it, and returns the account, workspace and content information and results needed to complete the request. What the agent does with your conversation is governed by its provider's privacy policy. You can remove the connection in the agent's settings, or email [email protected] to ask us to delete the connection data we hold.

    For apps that Kittl develops and maintains inside Kittl, we publish a per-app disclosure listing the API used, the data accessed, and what happens when you disconnect, at kittl.com/privacy/apps. These disclosures supplement, and apply in conjunction with, this Privacy Policy.

    Apps developed by third-party providers are governed by those providers' own privacy policies, linked from the app's listing in Kittl.

    BEHAVIOURAL ADVERTISING

    As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

    You can opt out of targeted advertising by:

    • FACEBOOK - https://www.facebook.com/settings/?tab=ads
    • GOOGLE - https://www.google.com/settings/ads/anonymous
    • BING - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

    Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

    DO NOT TRACK

    Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

    YOUR RIGHTS

    You have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

    We note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.

    DATA RETENTION

    We keep Personal Information only for as long as we need it for the purposes described in this Policy, or as long as the law requires. When we no longer need it, we delete it or anonymise it so it can no longer be linked to you. The periods below set out what this means for each type of data. Where a period depends on an event, such as you deleting a design, it starts with that event.

    Your account

    • Account information (such as your name, email address, profile and account settings): kept while your account exists. When you delete your account, it is deactivated immediately, and 14 days later we delete or anonymise your account information.

    Content you create, upload or import

    • Designs, uploads, generated images and videos, Brand Kits and AI workflow runs: kept in your Kittl workspace while your account exists, until you remove them. When you delete your account, Kittl removes or anonymises the workspace records, but stored file copies may remain as long as needed under our storage, backup, security and legal retention processes. This includes content you import into Kittl from apps, from other integrations and from external AI agents.
    • Deleted designs: permanently deleted 90 days after you delete them.
    • Temporary files: images and other files that Kittl stores only to process a request, for example an image you send for background removal, are deleted automatically within one day unless you save them.
    • Earlier file versions: when a stored file is replaced or deleted, its earlier version can remain in our versioned storage for up to 180 days before it is permanently deleted.
    • Shared content: content shared with, or copied into, another user's or team's workspace may stay there.

    Orders and payments

    • Order Information (such as billing details, invoices, subscription and transaction records): kept for as long as German commercial and tax law requires, which is currently up to ten years.
    • Payment cards: payments are processed by Stripe. Kittl does not store full payment card numbers; Stripe keeps payment data under its own retention policy.

    Device Information and logs

    • Server logs (which can include your IP address, browser type and the requests you make): used for security, troubleshooting and fraud prevention. Logs in our central logging system are deleted automatically after six months.
    • Usage events (which can include a device identifier, your browser and operating system, and an approximate location derived from your IP address, but not the IP address itself): some events from the website and editor are kept in raw form for six weeks and in our event archive for up to 400 days, then deleted. Other usage events are kept as long as needed to operate, secure and improve Kittl. Statistics that can no longer be linked to you may be kept longer. Analytics providers we use process usage data under their own retention settings.
    • Cookies: expire as described in our cookie settings.
    • Security records (such as records of errors, sign-in activity and changes to your account): kept as long as needed to protect Kittl and our users and to investigate incidents.

    Apps, integrations and external AI agents

    • App connections: the authorization credentials for an app are encrypted and kept while the app is connected. They are deleted when you disconnect or uninstall the app, and expire automatically if the connection is not used for a period of time.
    • External AI agent connections: your account identifiers and roles, the agent's client information and the connection tokens are encrypted and kept as long as needed to maintain and secure the connection. Temporary data created while you connect is deleted after ten minutes.
    • Integration operational data: records of how apps and external AI agent connections are used (for example which feature was called, when, whether it succeeded and how long it took, linked to your account and workspace) are kept as long as needed to operate and secure the integrations. Statistics that can no longer be linked to you may be kept longer.
    • Requests from external AI agents: content an agent submits is kept like other content you create, upload or import, or like temporary files, depending on the feature. Our server logs can also contain copies of these requests, including prompts, and are kept as long as needed to operate, troubleshoot and secure the service.

    Marketing and support

    • Marketing preferences: kept until you unsubscribe or withdraw your consent. After that, we keep a record of your opt-out so that we can respect it. When you delete your account, we request deletion of your profile from our email marketing system.
    • Support conversations: kept as long as needed to resolve your request and any follow-up.

    Backups and longer retention

    • Backups: deleted data may remain in backups and versioned storage after it is removed from our active systems. These copies are kept as long as needed for backup, recovery, security and legal purposes.
    • Longer retention: we may keep specific information for longer than stated above when we need to comply with a legal obligation, resolve a dispute, prevent fraud or abuse, or establish, exercise or defend legal claims. When that happens, we keep only the information required, and only for as long as that purpose lasts.

    You can ask us to delete your information at any time by emailing [email protected]. We will process your request and delete or anonymise the information we are not required or permitted to keep. Some records may remain under the retention rules and exceptions above.

    CHANGES

    We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

    CONTACT US

    For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at [email protected] or by mail using the details provided below:

    Saarbrücker Straße 37, 10405 Berlin, Germany