Privacy Policy
Effective: July 2, 2026
1.Who We Are
Kovelo ("Kovelo," "we," "us," or "our") is a service operated by Kovelo LLC, a limited liability company registered in the State of California, United States. Kovelo provides a platform that lets users access multiple third-party artificial-intelligence models through a single account, in a chat interface and through a developer API. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have. It applies to kovelo.ai and related Kovelo services (collectively, the "Services").
Contact: support@kovelo.ai
2.Information We Collect
2.1 Information you provide
- Account information: email address, phone number, and password (stored only as a secure hash, never in plain text).
- Payment information: processed by our payment processor (Stripe). We do not store your full card number on our servers.
- Communications: messages you send to support, and content you choose to submit.
2.2 Information collected automatically
- Usage data: models used, number of requests, token and image counts, timestamps, and billing-related amounts.
- Approximate location: derived from your IP address at the country level, used for currency selection and regional compliance. We do not store your full precise location.
- Device and log data: IP address, browser type, and similar technical metadata needed to operate and secure the Services.
2.3 Conversation content
Your conversation content is encrypted locally in your browser. Kovelo is designed to store zero conversation content on its own servers. To generate a response, the necessary prompt is transmitted directly through each provider's official API endpoints; that provider processes it under their own terms and privacy policy.
2.4 SMS Communications
We do not share your mobile number with third parties for marketing purposes. Message frequency varies by account activity. Message and data rates may apply.
3.How We Use Your Information
- To provide, maintain, and operate the Services.
- To process payments, subscriptions, and account balances.
- To enforce usage limits, rate limits, and prevent abuse or fraud.
- To comply with legal obligations and applicable regional restrictions.
- To communicate with you about your account, security, and service updates.
We do not sell your personal information, and we do not use your conversation content to train our own models.
4.Third-Party Model Providers
To deliver responses, Kovelo routes requests through the official APIs of third-party AI providers, which may include (among others) Anthropic, OpenAI, Google, xAI, DeepSeek, Alibaba (Qwen), and others. Each provider processes the data you submit under its own terms and privacy policy. We encourage you to review those policies. We connect only through official provider API endpoints.
Certain advanced third-party models may be subject to mandatory data retention requirements imposed by their providers—for example, retaining all traffic processed through the model for a fixed period (such as 30 days) for security, safety, or compliance purposes. These requirements are set by the respective provider, not by Kovelo, and vary by model and provider. When you select and use such a model, you acknowledge and consent to the applicable provider's data retention requirements. Where a specific model carries such a requirement, we aim to make this apparent at the point of selection.
5.How We Share Information
We share information only as needed to run the Services:
- Service providers: payment processing (Stripe), cloud hosting and storage, email delivery, and similar vendors, bound by confidentiality obligations.
- Third-party model providers: as described in Section 4, to fulfill your requests.
- Legal compliance: when required by law, regulation, legal process, or to protect the rights, safety, and property of Kovelo or others.
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.
6.Data Retention
We retain account, billing, and usage records for as long as your account is active and as needed to comply with legal, tax, and accounting obligations. Uploaded images and generated images are stored temporarily and automatically deleted after approximately 72 hours. You may request deletion of your account as described in Section 8.
7.Security
We use administrative, technical, and physical safeguards designed to protect your information, including local encryption of conversation content, hashed password storage, and encrypted transmission. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8.Your Privacy Rights
8.1 California Residents (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, to request access to and deletion of your personal information, to correct inaccurate information, and to not be discriminated against for exercising these rights.
Notice of Collection: In the past 12 months, we have collected the following categories of personal information:
- Identifiers (e.g., email address, IP address)
- Commercial Information (e.g., payment history via Stripe)
- Internet or Network Activity (e.g., usage logs, device metadata)
- Geolocation Data (e.g., approximate country-level location derived from IP)
This information is collected directly from you or automatically via your usage. We collect it for the business purposes of providing the Services, processing payments, and security. We share it with service providers as outlined in Section 5.
Do Not Sell or Share My Personal Information: We do not sell your personal information for monetary value. Furthermore, we do not share your personal information for cross-context behavioral advertising. You may submit a request to exercise your CCPA rights by contacting support@kovelo.ai. You may designate an authorized agent to make a request on your behalf by providing written authorization.
8.2 Other Regions
Depending on where you live, you may have additional rights (for example, under the EU/UK GDPR or China's PIPL). Where applicable, you may have rights to access, correct, delete, restrict, or port your data, and to withdraw consent. Contact us to exercise any applicable rights.
For Users in Mainland China (PIPL Compliance): By using the Services, you explicitly consent to the collection and cross-border transfer of your basic account metadata (such as email and phone number) to our servers located in the United States, solely for the purpose of account registration and service provision. Your conversation content remains locally encrypted.
9.International Data Transfers
Kovelo operates from the United States and uses infrastructure that may process data in multiple regions. By using the Services, you understand and explicitly consent that your information may be transferred to and processed in countries other than your own. For transfers from the European Economic Area (EEA) or the UK, we rely on Standard Contractual Clauses (SCCs) and other legally valid transfer mechanisms to ensure your data is adequately protected.
10.Children
The Services are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
11.Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, where appropriate, provide additional notice.
12.Contact Us
Kovelo LLC, California, USA
Email: support@kovelo.ai