KANPREDICT LLC — Privacy Policy

Effective Date: March 8, 2025

KANPREDICT LLC ("Kanpredict," "we," "our," "us"), located at 16192 COASTAL HWY, LEWES, DE 19958, EIN 88-3173291, respects your privacy. This notice explains what data we collect, why, how we use it, and the choices and rights you have.

1. Data We Collect

CategoryExamplesSource
Account DataName, business email, company, job title, billing addressYou provide on sign-up / checkout
OAuth / Repository DataGitHub username, repository names, branches, commit historyGitHub OAuth (scoped token you approve)
Payment DataLast4 digits of card, transaction ID, amountStripe (Kanpredict never sees full card details)
Feature ContentFeature description, acceptance criteria, code diff we generateYou provide + Kanpredict outputs
Usage & Device DataIP address, browser, pages visited, cookies, logsCollected automatically via analytics & server logs
Support DataEmails, chat threads, call notesYou provide during support interactions

2. How We Use Your Data

PurposeLegal Basis*
Provide and operate the service (create PRs, run CI, deliver code)Contract
Process payments and issue invoices / refundsContract; Legal obligation
Communicate (transactional emails, SLA alerts, support)Contract; Legitimate interest
Improve & secure the platform (debug, analytics, fraud-prevention)Legitimate interest
Marketing early-access updates (opt-in only)Consent

*EU/UK GDPR bases shown in bold.

3. Data Sharing

We never sell your data. We share it only with:

RecipientReasonLocation
Stripe, Inc.Payment processingUSA
GitHub, Inc.Code hosting / OAuthUSA
OpenAI & AnthropicAI model inference on code & specsUSA
Email provider (Postmark/Resend)Transactional emailsUSA/EU
Analytics (Cloudflare / Plausible)Site metrics (IP & UA pseudonymised)USA/EU
Legal authoritiesOnly if required by law or court orderYour jurisdiction

All vendors are bound by contracts and, for EU/UK data, Standard Contractual Clauses (SCCs).

4. Cookies & Tracking

  • Necessary cookies for session, CSRF, OAuth flow.
  • Analytics cookies (non-identifying, no cross-site tracking).

You can disable non-essential cookies via the cookie banner.

5. Data Retention

DataRetention
OAuth token & repo metadataDeleted automatically 30 days after job delivery (or on request sooner)
Generated code & PR diffStored 90 days for warranty fixes, then deleted
Billing records7 years (tax law)
Logs & analytics12 months, aggregated thereafter

6. Security Measures

  • End-to-end TLS 1.3
  • Scoped GitHub tokens stored encrypted (AES-256)
  • Segregated build containers (no repo cross-access)
  • Periodic penetration tests & least-privilege IAM
  • Strict access controls (founder-only)

Despite best efforts, no system is 100% secure; you use the service at your own risk.

7. Your Rights

If you are in the EU/EEA, UK, or similar jurisdictions, you may:

  • Access, correct, or delete personal data
  • Object to or restrict processing
  • Port your data
  • Withdraw consent at any time (does not affect past processing)

Email contact@kanpredict.com to exercise rights. We respond within 30 days.

8. Children

Kanpredict is a B2B service; it is not intended for anyone under 16. We do not knowingly collect children's data. Contact us if you believe a minor has provided data.

9. International Transfers

We operate from the United States. For EU/UK users, transfers rely on SCCs and vendor certifications (e.g., ISO 27001). By using the service you consent to cross-border transfers.

10. Changes to This Policy

We may update this notice. Material changes are announced via email or dashboard banner at least 7 days before they take effect. Continued use = acceptance of the updated policy.

11. Contact

Questions, concerns, or data-rights requests → contact@kanpredict.com

Postal: KANPREDICT LLC, 16192 COASTAL HWY, LEWES, DE 19958, USA

Last updated: March 8, 2025.