Privacy Policy
Last updated and effective
1. Who is responsible for your information
This policy explains what personal information Kalvia AI collects when you use kalvia.ai, the Kalvia apps, the API and the MCP server, and what we do with it. The service is operated by the company below, which is the controller of that information.
- Service
- Kalvia AI, at kalvia.ai
- Customer support
- support@kalvia.ai
- General enquiries
- hello@kalvia.ai
Privacy questions and requests go to support@kalvia.ai.
2. Information we collect
Information you give us
- Account: your name, email address and password. Passwords are stored only as a salted hash. If you sign in with Google or Apple, we receive your name, email address, an identifier for your account with them and, from Google, your profile picture.
- Profile: a username, display name, bio, avatar and links, if you add them.
- Content: the prompts you write, the images, video, audio and other files you upload, your settings, your conversations with Kalvia Agent and the notes it keeps about your preferences, your projects, and the outputs you generate.
- Community: posts, replies, messages, comments and reports you make.
- Support: what you send when you write to us.
Information from your use of the service
- Purchases and credits: the packs you buy, the amount, currency, date and status of each payment, a payment reference from Stripe, and a ledger of credits added, held, spent and returned. We do not receive or store your full card number.
- Usage: the generations you run, with their model, settings, cost and result.
- Technical and security: your IP address, browser type and the time of requests, used to keep you signed in, limit abuse and investigate problems. Our security records keep a one-way hash of the IP address, not the address itself.
- Safety: the result of automated checks on prompts, uploads and published content, and any enforcement on the account.
We do not ask for sensitive information such as health data or government identity numbers, and ask you not to put it in prompts or uploads. If you ask us to remove content that uses your likeness, we may ask for proof of identity and use it only for that request.
3. How we use it, and on what basis
| Purpose | Legal basis |
|---|---|
| Creating your account, running your generations, saving your work, taking payment and delivering credits | To perform our contract with you |
| Answering support requests and sending service messages about your account, purchases and security | To perform our contract with you |
| Checking content for safety, preventing fraud and abuse, enforcing our policies, securing the service and fixing faults | Our legitimate interest in a safe and working service, and legal obligations |
| Understanding how features are used so that we can improve them | Our legitimate interest in improving the service |
| Keeping tax and accounting records, and responding to lawful requests | Legal obligations |
| Product updates and offers by email | Your consent, which you can withdraw at any time |
We do not sell your personal information, and we do not use it for advertising. Kalvia does not use your prompts, uploads or outputs to train generative AI models of its own. Kalvia Agent can keep notes about your preferences so that it works better for you; they stay in your account.
4. AI models and other providers
To generate something, Kalvia sends your request to the provider of the model you choose. We also use providers for hosting, payments, sign-in, safety checks and email. They receive only what their task needs.
| Provider | What it does | What it receives |
|---|---|---|
| Amazon Web Services | Hosting, storage, backups and email delivery | Your account, content and service records |
| BytePlus (ModelArk, MediaKit) | Seedance video, Seedream image and audio models, upscaling, and a language model | Prompts, settings and the reference media you attach |
| MiniMax | Video, image and speech models | Prompts, reference media and the text you ask to have spoken |
| Topaz Labs | Image and video upscaling | The media you upscale |
| Anthropic, OpenAI, Google | Language models behind Kalvia Agent and the prompt tools | Your messages to the agent, prompts and attachments |
| OpenAI | Automated content-safety checks | Prompts, reference images, frames from reference videos, and content you publish |
| Stripe | Payments | Your email address, your Kalvia account ID and the purchase. Your card details go to Stripe directly |
| Google, Apple | Sign-in, if you choose it | They confirm your identity to us and send your name, email address and, from Google, your profile picture |
| Cloudflare | Protection against automated sign-ups, and domain services | Your IP address and browser signals |
| Resend | Email delivery | Your email address and the content of the email |
Which of these handles a request depends on the model and feature you use. Model providers process your content under their own terms and privacy policies, which decide how long they keep it and whether they may use it to improve their services. Reference media may be held in the provider’s systems under Kalvia’s account so that the model can use it. Do not submit confidential material unless you are comfortable with that.
We also disclose information where the law requires it, to protect people’s safety or our rights, including reports of unlawful content to the authorities, and to a successor if the service is transferred to another company, which would remain bound by this policy.
7. How long we keep it
- Account and content: for as long as your account is open. You can delete a generation or an upload at any time, which removes its files from our storage.
- After you close your account: we delete or anonymise your account and content within 30 days of a verified request, apart from the records below.
- Payment and credit records: for as long as tax and accounting law requires.
- Security records: 30 days.
- Safety records: blocked requests, reports and enforcement decisions are kept for as long as they are needed to enforce our policies and meet legal obligations. A marker that an account claimed its free credits may be kept, without your email address, so the allowance cannot be claimed twice.
- Backups: up to 14 days, after which deleted information is gone from them too.
8. Security
Connections to Kalvia are encrypted. Passwords and API keys are stored only as hashes, sign-in cookies cannot be read by scripts in the page, private files are served only to their owner or through signed, expiring links, and access to production systems is limited to the people who need it. No system is perfectly secure: use a strong, unique password, keep API keys secret, and tell us at once if you think your account has been used by someone else.
9. Where it is processed
Kalvia is hosted with Amazon Web Services, and the providers above operate in several countries, including the United States and countries in Asia. Your information may therefore be processed outside the country you live in. We choose providers that commit to protecting the information they handle for us, and where the law requires a specific safeguard for an international transfer we rely on one that the law recognises.
10. Your choices and rights
In the app you can edit your profile, delete generations and uploads, make shared items private, revoke API keys and connected assistants, and download a record of your usage.
You can also ask us to:
- Give you a copy of the personal information we hold about you.
- Correct information that is wrong.
- Delete your account and the information in it.
- Restrict or stop a particular use of your information, or withdraw a consent you gave.
- Send your information to you in a portable format.
Write to support@kalvia.ai from the email address on your account. We may ask you to confirm your identity, and we answer within 30 days. These rights apply as far as the law of your country provides them; we do not charge for a request and do not treat you differently for making one.
If you live in the European Economic Area or the United Kingdom, you can also complain to your data protection authority. If you live in California, note that we do not sell or share personal information as those terms are defined there.
11. Children
Kalvia is for adults. You must be at least 18 to have an account, and we do not knowingly collect information from anyone younger. If you believe a child has created an account, tell us at support@kalvia.ai and we will close it and delete the information.
12. Changes and contact
We may update this policy when the service, our providers or the law change. The date at the top shows when it last changed, and we give notice of a material change as the Terms of Service describe. Questions go to support@kalvia.ai. Related policies: