Privacy Policy

Last Updated: September 9, 2026

Kaze AI ("Kaze," "we"), DreamFlow Inc., respects your privacy. This Privacy Policy ("Policy") explains how we collect, use, disclose, and safeguard your personal information when you access or use our website, API services, and related online offerings (collectively, the "Services").

This Policy, together with our Terms of Service, constitutes a legally binding agreement governing your use of our Services. By using our Services, you acknowledge that you have read and understood this Policy in its entirety.

1. Information We Collect

We collect information in the following three categories:

1.1 Information You Voluntarily Provide to Us

Account Registration Information: When you create a Kaze AI account, we may collect your email address, username, and a hashed password.
Payment Information: When you purchase paid services, we collect billing address and payment card information through our third-party payment processors (Stripe or PayPal). We do not store full credit card numbers, only the last four digits and expiration date.
User Content: Text, images, audio, or other content that you upload, generate, or share through our Services.
Communications: Correspondence with our customer support or technical teams.

1.2 Information Automatically Collected

When you access or use our Services, we may automatically collect:

Device and Browser Information: IP address, operating system version, browser type, and language settings.
Usage Logs: Dates and times of access, links clicked, pages visited, types of content generated, features used, and session duration.
Location Information: Approximate geographic location (city/country level) derived from your IP address.
Cookies and Similar Technologies: We use cookies and web beacons to remember your preferences, login status, and session information. See Section 7 below for details.

1.3 Information from Third Parties

Single Sign-On (SSO): If you register via third-party platforms such as Google or GitHub, we may receive your public profile information (such as avatar and email address), subject to your privacy settings on those platforms and the permissions you grant.

2. How We Use Your Information

We use the information we collect for the following purposes:

Providing Services: To process your requests, generate AI content, manage your account, and complete transactions and refunds.
Improving Services: To analyze usage trends, optimize AI model performance, and enhance user experience.
Security and Fraud Prevention: To detect, prevent, and investigate fraud, abuse, or illegal activities, and to protect the rights and safety of Kaze AI and other users.
Customer Support: To respond to your inquiries, complaints, and technical issues.
Legal Compliance: To fulfill record-keeping, reporting, and law enforcement cooperation obligations as required by applicable laws.
Marketing Communications (only with your consent): To send you product updates, event invitations, and promotional offers, where you have explicitly opted in. You may withdraw your consent at any time via the "unsubscribe" link.

3. How We Share Your Information

We share your information only in the following circumstances, always adhering to the principle of minimum necessity:

Sharing Scenario	Description	Recipient Types
Service Providers	We engage third parties to process payments, cloud storage, data analytics, customer support, and other business operations.	Cloud providers (AWS/Azure), payment gateways, customer service platforms
Legal Requirements	Disclosure in response to legal processes, court orders, government investigations, or mandatory legal obligations.	Regulatory authorities, judicial bodies
Business Transfers	In connection with a merger, acquisition, asset sale, bankruptcy, or reorganization, your information may be transferred as a business asset.	Successor entities or their advisors
With Your Explicit Consent	Where you separately authorize us to share information, such as publishing your generated artwork to social platforms.	Third parties you designate

We do not sell, rent, or otherwise make your personal information available to third parties for their own direct marketing purposes, unless we have obtained your express authorization.

4. Your Rights (GDPR / CCPA / Other Jurisdictions)

Depending on your jurisdiction of residence, such as the EU/EEA under the GDPR or California under the CCPA/CPRA, you may have the following rights with respect to your personal information:

Right to Know: To be informed about what personal information we collect, use, and share.
Right to Access: To request a copy of the personal information we hold about you.
Right to Rectification: To request correction of inaccurate or incomplete personal information.
Right to Erasure ("Right to be Forgotten"): To request deletion of your personal information under certain circumstances.
Right to Restrict Processing: To request that we limit the processing of your information in specific situations.
Right to Data Portability: To receive your data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
Right to Object: To object to processing based on our legitimate interests, or to object to receiving direct marketing communications.
Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Right to Opt Out of Sale/Sharing (CCPA): California residents have the right to opt out of the "sale" or "sharing" of their personal information with third parties for cross-context behavioral advertising.

How to Exercise Your Rights: Please contact us via email at privacy@kaze.ai. We will respond at the earliest opportunity. To verify your identity, we may request reasonable verification information.

5. Data Storage and International Transfers

KAZE AI is based in the United States, and the information we collect is governed by United States law. By accessing or using the Services or providing us with any information, you consent to the transfer, processing, and storage of your information in and to the United States and other countries, jurisdictions in which privacy laws may not be as comprehensive as those in the country where you reside or are a citizen.

6. Data Security

We implement physical, technical, and administrative safeguards to protect your information, including but not limited to:

Transport Layer Security (TLS 1.2+) encryption for data in transit;
encryption for data at rest;
strict access controls on a need-to-know basis;
regular security audits and vulnerability scanning.

Important Notice: While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, we cannot guarantee absolute security.

7. Cookies and Similar Technologies

We use cookies and similar tracking technologies, such as web beacons and pixel tags, to:

maintain your login status and session;
remember your preferences, such as language and theme;
analyze service usage and traffic statistics;
deliver personalized advertising, only where you have granted consent.

You may manage or delete cookies through your browser settings. Please note that disabling certain necessary cookies may affect the functionality of our Services.

We currently do not respond to "Do Not Track (DNT)" signals, as there is no universally accepted industry standard.

8. Children's Privacy

Kaze AI's Services are not directed to individuals under the age of 13, or the applicable age of consent in your jurisdiction.

We do not knowingly collect personal information from children under 13.
If we discover that we have inadvertently collected such information, we will immediately delete it.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@kaze.ai.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Policy, or for the minimum period required by applicable law. Specific criteria include:

account information is retained while you maintain an active account;
User Content and log data are retained until you delete it or terminate your account;
transaction records are retained to comply with tax and accounting requirements, typically 7 years.

10. Third-Party Links

Our Services may contain links to third-party websites or services, such as social media plugins and external resources. This Privacy Policy does not apply to any third party. We encourage you to review the privacy policies of any third-party services before using them. Kaze AI assumes no responsibility for the data practices of any third party.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

posting a prominent notice within our Services; or
sending an email to your registered address prior to the effective date of the changes.

Please review this page periodically for the latest version. Your continued use of the Services after any changes become effective constitutes your acceptance of the updated Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact our Data Protection Team at privacy@kaze.ai.

Kaze AI Legal Department