1. Introduction
Welcome to KD GPT. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our AI chatbot service.
2. Information We Collect
We collect the following types of information:
- Conversation Data: Your chat messages, AI responses, and conversation history
- Usage Data: Timestamps, message counts, and feature usage patterns
- Technical Data: IP address, browser type, device information, and cookies
- Authentication Tokens: JWT tokens for session management
3. How We Use Your Information
Your information is used for:
- Providing and maintaining the chatbot service
- Processing your messages and generating AI responses
- User authentication and account management
- Enforcing usage limits based on your account tier
- Improving our service and user experience
- Complying with legal obligations
4. Third-Party Services
We use the following third-party services that may collect and process your data:
- OpenAI API: Your chat messages are sent to OpenAI to generate AI responses. Please review OpenAI's Privacy Policy
- MongoDB Atlas: We use MongoDB for data storage with encryption at rest
- Redis: We use Redis for session management and job queuing
5. Cookies and Tracking Technologies
We use cookies and similar technologies for:
- User authentication and session management
- Remembering your preferences (e.g., theme selection)
You can control cookies through your browser settings, but some features may not work properly if cookies are disabled.
6. Data Retention
We retain your data as follows:
- Account Data: Retained until you delete your account
- Conversation History: Stored indefinitely unless you manually delete conversations
- Usage Tracking Data: Reset hourly/daily based on rate limits
- Session Data: Cleared after session expiration or logout
7. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Delete: Delete your conversations or account at any time
- Correct: Update your account information
- Opt-Out: Disable personalized ads through Google Ad Settings
- Data Portability: Export your conversation data
8. Data Security
We implement security measures including:
- Password encryption using bcrypt
- Secure JWT-based authentication
- HTTPS encryption for data transmission
- MongoDB encryption at rest
- Regular security updates and monitoring
However, no method of transmission over the Internet is 100% secure.
9. Children's Privacy
Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.
10. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. By using our service, you consent to such transfers.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date.
12. Contact Us
If you have questions about this privacy policy or wish to exercise your rights, please contact us at:
Email: kingudavid.co@gmail.com