Privacy Policy

We collect the following categories of information:

• Account information: name, email address, hashed password, avatar URL, plan tier, billing identifiers from Stripe, and any information you add to your profile.
• API credentials: we generate API keys on your behalf and store a SHA-256 hash — we never retain the plaintext key after it is shown to you once.
• Render payloads: templates, HTML, CSS, JSON data, header/footer fragments, assets, and other content you submit to the render API in order for us to generate a PDF for you.
• Render outputs: generated PDFs are stored in private object storage. Signed access URLs expire after one hour.
• Uploaded assets: images and fonts you upload for use in templates, held in private storage for the lifetime of your account.
• Usage data: render history (template slug, bytes, duration, page count, status, timestamps), API request metadata (method, path, status code, latency, request id), webhook delivery history, and quota counters.
• Diagnostics: server logs, error traces, and performance metrics via Sentry and PostHog.
• Device and connection: IP address, user agent, approximate region (derived from IP), and cookie identifiers tied to your session.
• Support communications: messages you send to [email protected] or through our support form, plus our replies.

We do not collect special-category data (health, biometric, sexuality, political views, trade union, religion). Do not submit such data through render payloads unless a DPA that specifically covers it is in place.

• Operate the Service: authenticate you, enforce quotas, render your PDFs, deliver signed URLs, store assets, and route webhook deliveries.
• Billing: process payments via Stripe, issue invoices, reconcile overage charges.
• Product improvement: aggregate, anonymize, or pseudonymize usage data to understand feature adoption, latency, and error rates.
• Security and abuse prevention: detect and block credential stuffing, render payloads that trip safety classifiers, and unusual activity.
• Transactional communications: account security alerts, quota warnings, invoice receipts, and material service-impacting notifications.
• Support: respond to your questions and requests.
• Legal compliance: comply with legal obligations, enforce the Terms of Service, and defend against legal claims.

We do not sell your personal data and we do not use your render content to train machine learning models.

• Performance of a contract (Art. 6(1)(b)): account creation, rendering, billing, and support.
• Legitimate interests (Art. 6(1)(f)): security, fraud prevention, aggregated product analytics, and network and information security.
• Consent (Art. 6(1)(a)): marketing communications, non-essential cookies. You can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): tax and accounting records, lawful requests from authorities.

We share data with a limited set of vetted sub-processors, each bound by a data processing agreement:

We may also disclose data when legally required (e.g. in response to a valid court order) or as necessary to protect the rights, property, or safety of Kamy, our users, or the public. Where permitted, we will notify you before responding to such requests.

• Account records: retained for the lifetime of your account.
• Render payloads and outputs: source payloads are kept for 90 days; generated PDFs follow PDF_RETENTION_DAYS (30 days on Free, 365 on Pro/Team). Renders that carry an e-signature are exempt: the signed PDF and its signing audit trail are retained for the lifetime of the account so signature verification stays authoritative.
• Logs and diagnostics: 30–90 days depending on severity.
• Invoices and billing records: retained for at least 7 years for tax compliance.
• Support tickets: retained for 24 months.
• Deleted accounts: content is purged within 30 days of account deletion; residual backups roll off within 90 days.

• Request access to, rectification of, or erasure of your personal data.
• Object to or restrict our processing.
• Withdraw consent where processing is based on consent.
• Port your data — you can export your render history and templates from the dashboard's Settings → Data & danger zone.
• Lodge a complaint with a supervisory authority in your Member State. The current list is at edpb.europa.eu.

To exercise these rights, email [email protected] from the address associated with your account or file a ticket via /support. We will respond within 30 days (extendable once by 60 days for complex requests).

We use a small number of cookies, none for advertising. Specifically:

• Session cookies (strictly necessary) — authentication and CSRF protection.
• Preferences (strictly necessary) — UI state like theme and sidebar collapse.
• Analytics (first-party via PostHog, proxied through our domain) — anonymised page-view and feature-usage telemetry. Disabled for users who have DNT: 1 set in their browser.

We honour Global Privacy Control ("GPC") signals as an opt-out of any optional tracking.

Questions, rights requests, or complaints? Reach us at:

• Email: [email protected]
• Support form: kamy.dev/support