Privacy Policy for KOOX AI

Last Updated: August 3, 2026

Introduction

Welcome to KOOX AI, an AI-powered service for generating and editing images and videos. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you use the service.

KOOX AI is the online service available through koox.ai. In this Privacy Policy, "we," "us," and "our" refer to the operator of KOOX AI (the "Operator").

Information Collection and Use

We collect the following types of data to provide you with a better experience while using KOOX AI:

  1. Account Information
    • What We Collect: This includes your name, email address, and any other information you provide when creating an account.
    • Purpose: To manage your account and provide customer support.
  2. Usage Details
    • What We Collect: Information about how you use KOOX AI, including your interactions, features accessed, and usage frequency.
    • Purpose: To analyze user engagement and improve our services.
  3. Device Information
    • What We Collect: Data regarding the devices you use to access KOOX AI, such as device type, operating system, and browser type.
    • Purpose: To optimize our services for different devices and ensure compatibility.
  4. Cookies
    • What We Collect: Small data files placed on your device that help us track user preferences and improve user experience.
    • Purpose: To enhance the functionality of our services and personalize your experience.
  5. Payment and Billing Information
    • What We Collect: When you make a purchase, your payment method details are collected and processed directly by the third-party payment provider presented at checkout, such as Stripe, Creem, or PayPal. We do not directly collect or store complete payment card numbers or card security codes (CVV/CVC) on our systems. We may receive and retain limited customer, billing, and transaction information from the payment provider, such as your name, email address, billing address when provided, selected product, amount and currency, provider-issued customer, checkout, order, subscription, and transaction identifiers, and payment, renewal, refund, or dispute status and timestamps.
    • Purpose: To process purchases, manage subscriptions and credits, provide billing support, prevent fraud and duplicate processing, handle refunds and disputes, and meet accounting, tax, and legal obligations.
    • Payment Provider Notice: Payment providers process payment method information under their own terms and privacy notices.
  6. User Content
    • What We Collect: Content you generate, upload, or submit while using KOOX AI.
    • Purpose: To provide the service, apply the Public or Private setting you affirmatively select, display Public works in the service's public gallery, enable sharing features, moderate content, investigate verified legal requests, and use eligible Public free Output as described in our Terms of Service.

Data Storage and Security

Personal information described in this policy may be stored or processed in systems operated by us or by service providers acting on our behalf, including hosting, database, storage, analytics, content-generation, customer-support, security, and payment service providers. Payment credentials are processed by payment providers, and we do not store complete payment card numbers or card security codes. We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls and encryption where appropriate. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Information Sharing and Disclosure

We do not sell your personal information. We may disclose personal information in the following circumstances:

  • To comply with legal obligations or respond to lawful requests from public authorities.
  • To protect our rights, property, or safety, or that of our users or others.
  • To provide services through trusted third-party partners who assist us in operating our website or conducting our business, subject to contractual or other safeguards where required by applicable law.
  • With payment providers, including Stripe, Creem, or PayPal, as necessary to process payments, manage subscriptions, prevent fraud, provide billing support, and handle refunds or disputes. Their handling of payment data is governed by their own privacy notices.

You must affirmatively select an available Public or Private setting before submitting a generation request. A work is made Public only when you select Public. By selecting Public and submitting the request, you instruct us, as part of the public-sharing service you requested, to make that User Content available through the service's public gallery. Public User Content can be viewed by anyone and may be shared, downloaded, copied, cached, or indexed by third parties. Access to the Private setting may require an eligible paid plan. Private User Content is not intentionally displayed to the public, but it may be processed by KOOX AI and trusted service providers as necessary to generate content, operate the service, prevent abuse, provide support, and comply with law. Public or Private visibility does not determine ownership: ownership and usage rights, including any assignment following an eligible paid purchase, are described in our Terms of Service.

We will not intentionally select User Content that appears to depict a reasonably identifiable real person for featured showcases, advertising, social-media promotion, or other marketing outside the service without additional permission. This does not prevent User Content that you affirmatively designate as Public from appearing in the service's public gallery.

Your Data Rights (GDPR/CCPA)

Depending on your location, you may have the following rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
  • Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data, subject to certain exceptions.
  • Right to Restrict Processing: You can request that we limit how we use your personal data.
  • Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
  • Right to Object: You can object to the processing of your personal data for certain purposes.
  • Right to Withdraw Consent: Where we specifically rely on your separate consent for a processing purpose, you can withdraw that consent at any time. Selecting Public is an instruction to provide the public-sharing service you requested and is governed by the visibility and product rules described above.
  • Right to Non-Discrimination (CCPA): We will not discriminate against you for exercising any of your privacy rights.

To exercise a right available under applicable law, contact us at support@koox.ai and describe the account data and right involved. We may request information reasonably necessary to verify your identity, authority, and the scope of the request. We will respond within the period required by applicable law after receiving a complete, verifiable request. A request concerning the removal or restriction of Public User Content must also follow the content-request process below. Ordinary product requests to change a work from Public to Private or to delete an individual work are governed by the Terms of Service and are not, by themselves, privacy-rights requests.

Verified Privacy, Safety, and Infringement Requests

Ordinary requests to change a Public work to Private, or to delete an individual work outside the paid deletion feature, are product-feature requests and are not processed manually. This does not limit any non-waivable rights under applicable law. Reports involving a reasonably identifiable real person, privacy or publicity rights, minors, copyright or other intellectual-property infringement, unlawful content, or another legally valid ground may be submitted to support@koox.ai with the subject line "Legal Content Request."

The requester does not need to be the user who uploaded the Input or generated the reported work. Depending on the asserted right, a requester may be the person depicted, the parent or lawful guardian of a minor, an authorized representative, a copyright or other intellectual-property rights holder, or another person with a legally valid basis to act. A user's selection of Public and representation that the user has the necessary permissions do not waive or determine the independent rights of a depicted person, photographer, or other third-party rights holder.

A complete request must be submitted in a single email and include all of the following:

  • The exact public URL, task identifier, or other information sufficient to locate each reported work.
  • The requester's full legal name, contact email, request category, relationship to the reported content, and, when applicable, the account email associated with the work.
  • A current, legible government-issued photo identification document showing the requester's full legal name, photograph, issuing authority, and expiration date. Those fields must not be altered or obscured.
  • A live photograph created specifically for the request that clearly shows the requester holding a handwritten paper displaying "KOOX LEGAL REQUEST," the current date, the exact task identifier of the reported work, and the requester's signature.
  • A clear description of the request, its legal basis, the right asserted, and the specific action requested.
  • For a privacy, publicity, or likeness request, the identity of the person depicted and original photographs, source files, contemporaneous photographs, publication records, or other reliable evidence linking that person to the reported content.
  • For a request concerning a minor, a current government-issued photo identification document for the parent or lawful guardian and evidence of parental responsibility, guardianship, or other lawful authority.
  • For a request submitted by a representative, signed written authorization from the represented person and materials sufficient to verify both the representative's identity and the represented person's identity.
  • For a copyright or other intellectual-property request, identification of the protected work or right, identification of the allegedly infringing material, and registration records, original files, publication records, creation records, assignment records, or other reliable evidence of ownership and authority.
  • The requester's physical or electronic signature, a statement that the request is submitted in good faith, and a statement that the information is accurate and that the requester is authorized to submit the request. Where applicable, we may require the statement to be made under penalty of perjury.

Except where applicable law requires otherwise, we are not required to request missing materials, send a reminder, or provide an opportunity to supplement an incomplete submission. A request that does not include all applicable materials in the first email may be denied or closed without further response. Identity verification alone does not establish that a request is legally valid.

Incomplete, unverifiable, inconsistent, duplicate, abusive, fraudulent, unsupported, impersonating, or bad-faith requests may be denied. We may verify submitted materials and may ask the user who submitted the content to provide evidence of permission, ownership, or another lawful basis, but we will not share the requester's identification document or live verification photograph with that user unless required by law. We may restrict, preserve, disclose, or remove content when required by law or when we reasonably determine that action is appropriate. A summary of the claim and other request information may be shared with the user who submitted the content, service providers, professional advisers, rights holders, or authorities when reasonably necessary to investigate, respond, protect legal rights, or comply with law. Identification documents and live verification photographs will be used for verification, security, dispute resolution, and legal compliance and retained only for as long as reasonably necessary for those purposes. Submitting a request does not guarantee removal, a visibility change, compensation, or any other requested outcome.

Account Deletion and Data Handling

You may request to delete your account at any time. Only users with an active paid subscription may use the individual-work deletion feature. Free users and users without an active paid subscription cannot delete individual works or obtain a manual Public-to-Private change as a substitute for the paid Private setting. This product rule is separate from account deletion, automatic storage cleanup, and verified requests that we are required to address under applicable law.

  • When an eligible paid user deletes an individual work through the deletion feature, the work will be removed from active display and access through the service, and media files under our control will be scheduled for deletion.
  • When your account is deleted, it will be disabled and your personal account information will be deleted, de-identified, or retained only where reasonably necessary for security, fraud prevention, accounting, dispute resolution, or legal compliance.
  • Your Private User Content will be removed from active access and scheduled for deletion, subject to reasonable processing time, backup cycles, and legal retention obligations.
  • Your Public User Content may be de-identified and remain accessible as community content after account deletion, subject to applicable law and any valid request reviewed under this policy.
  • Copies of Public User Content previously downloaded, shared, cached, or indexed by third parties may remain outside our control after we remove the content from our service.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Specifically:

  • Account Data: Retained while your account is active. After account deletion, it is deleted, de-identified, or retained in a restricted form where necessary for security, fraud prevention, dispute resolution, accounting, or legal compliance.
  • User Content and Media Files: Media files associated with an account that does not have an active paid subscription may be automatically removed after they are 30 days old. This automatic storage cleanup is separate from the individual-work deletion feature available to users with an active paid subscription. Limited metadata or records may be retained for the purposes described in this policy.
  • Transaction Records: Retained for up to 7 years for tax, legal, and accounting purposes.
  • Usage Analytics: Retained in anonymized form indefinitely to improve our services.
  • Support Communications: Retained for up to 3 years after resolution.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. Where required by applicable law, we use appropriate contractual, organizational, or technical safeguards for international transfers.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of changes by posting the updated policy on this page and revising the "Last Updated" date above. You are advised to review this privacy policy periodically. Changes are effective when posted unless applicable law requires a different form of notice or effective date.

Contact Us

If you have any questions or concerns about this privacy policy or our data practices, please contact us at:

Service: KOOX AI
Website: koox.ai
Email: support@koox.ai

Please review this Privacy Policy periodically for information about how we handle personal information.