Privacy Policy

1. Scope and who is responsible

This Privacy Policy applies to kairoxbuild.com and related KairoxBuild features (the “Services”). KairoxBuild determines how information collected directly through the Services is used. Some providers, including Lemon Squeezy, also process information under their own policies and may act independently for their parts of a transaction.

2. Information we collect

2.1 Public utilities

Some utilities run in the browser, including the HTML/Markdown conversion and text comparison interfaces. Other utilities submit the entered snippet to KairoxBuild's server for the current request, such as the slug, HTML-cleaning, robots.txt, and sitemap tools. These utilities do not intentionally save the entered content as account content, but normal server, security, and error logs may record request metadata. Do not submit secrets or personal information you do not need to process.

2.2 Information from providers

Firebase provides authenticated identity information. Lemon Squeezy provides order and entitlement data after supported checkouts. We do not intentionally receive or store complete payment-card numbers. Analytics and browser-library providers may receive standard web-request information when their resources load.

3. How we use information

We use information to:

• provide, personalize, maintain, and secure the Services;
• authenticate users and keep account sessions working;
• save progress and deliver requested reports or practice features;
• process entitlements, rewards, referrals, support requests, and payment issues;
• measure page and tool use, diagnose problems, and improve product decisions;
• prevent fraud, abuse, duplicate rewards, and unauthorized access;
• comply with law and enforce the Terms of Service; and
• communicate about an account, purchase, support request, security issue, or material service change.

We do not currently describe ordinary account creation as consent to promotional email. If KairoxBuild introduces marketing email, it should use an appropriate signup and opt-out mechanism.

4. Cookies, sessions, and analytics

KairoxBuild uses essential session and authentication technologies to keep you signed in, protect account actions, and apply cache or security state. Disabling these technologies may prevent account and purchase features from working.

Google Tag Manager is used to load and manage analytics tags, including Google Analytics 4. Depending on configuration and consent state, Google Analytics may process information such as page URLs, referrers, browser/device information, interactions, and approximate location derived from technical data. KairoxBuild uses analytics to understand acquisition, navigation, tool use, sign-up, and checkout funnels.

You can use browser controls or applicable consent controls to limit non-essential cookies. Browser privacy settings may not affect essential session storage in the same way.

5. AI-assisted features

When an AI-assisted report or feature is enabled, the inputs needed for that request may be sent to the OpenAI API. Depending on the feature, those inputs can include quiz answers, role or career context, and structured instructions. Generated output and job status may be stored in KairoxBuild so the result can be delivered, recovered, or reviewed for errors.

Do not include unnecessary sensitive information in free-text inputs. OpenAI handles API data under its current API data controls and applicable agreement.

6. How information is disclosed

KairoxBuild does not sell personal information for money. We disclose information in these circumstances:

• Firebase/Google: authentication and related infrastructure;
• Google Tag Manager and Google Analytics: tag delivery, measurement, and analytics;
• Lemon Squeezy: checkout, tax, receipt, refund, chargeback, and merchant-of-record functions;
• OpenAI: AI processing for features that invoke the API;
• Content-delivery providers: delivery of browser libraries or assets, which exposes normal request metadata;
• Professional advisers and infrastructure providers: only as reasonably needed to operate, secure, or advise the business;
• Legal and safety disclosures: when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or respond to a lawful request; and
• Business changes: as part of a merger, financing, acquisition, reorganization, or asset transfer, subject to appropriate confidentiality and notice where required.

Each provider handles information under its own terms, privacy policy, and contractual role.

7. Retention and deletion

KairoxBuild currently retains account, saved feature content, generated reports, and entitlement records until they are deleted in response to a verified request or removed through operational maintenance. The site does not currently promise automatic deletion after 180 days of inactivity.

Even after an account-deletion request, we may retain limited transaction, fraud-prevention, security, backup, dispute, or legal records for as long as reasonably required. Deletion from active systems and rotation from backups may occur on different schedules. Anonymous or aggregated information that can no longer reasonably identify you may be kept for analysis.

We aim to collect and retain only information reasonably needed for the purposes described here. As the product matures, retention schedules and automated deletion controls should become more specific.

8. Your privacy choices and rights

Depending on where you live, you may have rights to ask for access, correction, deletion, portability, restriction, objection, or information about how personal data is used. You may also have a right to complain to a privacy or data-protection authority.

To make a request, email [email protected] from the account email when possible. Describe the requested account or record. We may verify identity before acting and may deny or limit a request where permitted or required by law—for example, to protect another person, preserve transaction records, prevent fraud, or comply with a legal obligation.

KairoxBuild does not currently provide a complete self-service privacy dashboard. Account screens may display some information, but use the contact method above for a formal privacy request.

9. Legal bases where required

Where law requires a legal basis, processing may rely on performance of a contract (providing an account or purchased feature), legitimate interests (operating, securing, measuring, and improving the Services), compliance with legal obligations, or consent for processing that specifically requires it. You may withdraw consent for future consent-based processing, but withdrawal does not make earlier lawful processing invalid.

10. Security

KairoxBuild uses measures such as HTTPS in supported production access, Firebase authentication, server-side authorization checks, session controls, rate limiting, and restricted administrative access. No online service can guarantee absolute security. Keep your authentication method secure and contact us if you suspect unauthorized access.

11. International processing

KairoxBuild and its providers may process information in countries where they or their subprocessors operate. Those countries may have different privacy laws. Where required, an appropriate contractual or legal transfer mechanism should apply.

12. Children

The Services are not directed to children under 13, and we do not knowingly collect their personal information. A user under the age of majority must have permission from a parent or guardian. If you believe a child under 13 submitted personal information, contact us so we can investigate and take appropriate action.

13. Third-party links

The Services may link to websites KairoxBuild does not control. Their privacy practices apply after you visit them. A link is not an endorsement of a third party's privacy or security practices.

14. Changes to this Policy

We may update this Policy as the product, providers, or law changes. We will post the revised Policy and update the date above. For a material change, we may also display a prominent notice or request consent when legally required. The revised Policy applies prospectively from its effective date.

15. Contact