This Privacy Policy explains how Originwise Inc. (“Originwise,” “we,” “us,” or “our”) collects, uses, shares, transfers, retains, and protects personal information when you use the KPainter website, web application, and related services, and how you may exercise your rights.

Different countries and regions impose different mandatory requirements for personal information, consumer protection, automated decision-making, cross-border transfers, cookies/tracking technologies, and children’s data. Where such laws apply to you, we will comply with them to the extent required.

1. Scope and Controller

This Policy applies to our processing of personal information when you access, register for, log into, purchase, upload to, generate with, edit, export from, share through, or otherwise use our Services.

Unless stated otherwise, Originwise Inc. is the controller for the Services. You can contact us at support@originwise.ai.

2. Information We Collect

Depending on how you interact with the Services, we may collect the following categories of information:

• Account and identity information: email address, username, profile image, login credentials, third-party login identifiers, and profile information you choose to provide;
• Contact and support information: help requests, feedback, complaints, questionnaires, email correspondence, and related attachments;
• Payment and transaction information: order IDs, plans, payment status, subscription status, billing records, and invoice or reconciliation data;
• Device and log information: IP address, browser type, device identifiers, operating system, access times, interaction events, error logs, and security logs;
• User Content: text, prompts, images, files, metadata, exports, generated content, and other content you upload, input, synchronize, generate, or edit;
• Marketing and preference information: language preferences, campaign participation records, notification preferences, and information generated through cookies or analytics tools;
• Legal and risk information: information related to fraud prevention, billing disputes, compliance reviews, account protection, and enforcement of our rules.

Please do not provide information that is unlawful for you to share, unnecessary for your purpose, or belonging to another person unless you have all necessary authorization and legal basis.

3. How We Collect Information

We may collect information:

• directly from you, such as when you register, log in, upload content, purchase a plan, contact support, or submit feedback;
• automatically when you use the Services, such as through logs, device signals, usage records, and security-event monitoring;
• from third parties, such as identity providers, payment processors, anti-fraud vendors, analytics providers, and security vendors;
• where permitted by law, from public sources, partners, or other systems that you authorize.

4. Purposes of Processing and Legal Bases

We may process personal information for the following purposes:

• to provide registration, login, identity verification, content generation, editing, export, billing, and customer support;
• to maintain system stability, troubleshoot issues, secure accounts and networks, detect abuse, and prevent fraud;
• to calculate charges, manage credits and subscriptions, resolve payment disputes, and satisfy accounting, tax, and financial obligations;
• to conduct analytics, improve features, evaluate models, develop products, and enhance quality and user experience;
• to send required notices about orders, service changes, security issues, support, or compliance matters;
• where appropriate consent is obtained, to deliver marketing, campaigns, product updates, or personalization;
• to comply with applicable laws, regulations, court orders, or lawful requests from authorities.

Depending on your location, legal bases may include contract performance, compliance with legal obligations, legitimate interests, consent, protection of rights, or another basis permitted by applicable law.

5. Cookies, Logs, and Analytics

We may use cookies, local storage, pixels, log files, and similar technologies to maintain sessions, remember preferences, secure the Services, measure traffic, analyze product usage, improve performance, and evaluate campaign effectiveness.

Different jurisdictions impose different notice and consent requirements for cookies and tracking technologies. You can restrict certain cookies through your browser or device settings, but doing so may affect functionality or service quality.

6. Sharing, Processing by Service Providers, and Disclosure

We may share personal information, or instruct service providers to process it on our behalf, as necessary for the purposes above with the following categories of recipients:

• cloud hosting, storage, CDN, logging, monitoring, and security providers;
• identity, authentication, anti-fraud, content-safety, audit, and customer-support providers;
• payment processors, settlement institutions, banks, tax/accounting providers, and billing-dispute partners;
• analytics, messaging, and product-operations support providers;
• transaction counterparties in a merger, restructuring, financing, asset sale, or similar corporate event;
• authorities, advisers, or other third parties where required by law or necessary to protect our rights or the rights of others.

We require processors and service providers to implement appropriate confidentiality and security measures and to process personal information in accordance with contractual and legal requirements.

7. International Transfers

Because our Services, vendors, cloud resources, model providers, or support operations may be distributed across multiple countries or regions, your personal information may be transferred to, stored in, or accessed from locations outside your country or region.

Where applicable law imposes additional requirements for international transfers, we will take appropriate measures, such as contractual safeguards, security assessments, supplemental protections, or additional notices and consents where required.

8. Retention

We retain personal information for the shortest period reasonably necessary to fulfill the purposes described in this Policy, taking into account account status, service needs, dispute handling, billing and tax obligations, security and fraud-prevention needs, backup recovery, and applicable legal requirements.

In general, account information is retained while your account remains active; order, payment, reconciliation, and compliance records may be retained for the period required by applicable law; logs and security records may be retained for a reasonable operational cycle; and when information is no longer needed, we delete, anonymize, or otherwise handle it as permitted or required by law.

9. Security and Incident Response

We implement reasonable technical and organizational measures to protect personal information, such as access controls, role separation, encryption, logging, backups, monitoring, confidentiality management, and security assessments. However, no internet or information system can be guaranteed to be absolutely secure or continuously available.

If an incident occurs that may affect personal information security, we will take remedial measures and notify you or regulators when required by applicable law.

10. Service Improvement, Model Training, and Product Development

To the extent permitted by applicable law, and consistent with product settings, contractual commitments, and local legal requirements, we may use User Content, interaction data, error samples, log data, and de-identified, summarized, or aggregated derivatives of such data for security review, troubleshooting, quality improvement, model evaluation, model training, feature development, and service optimization.

If applicable law requires additional notice, consent, opt-out rights, or processing restrictions for these activities, we will comply accordingly. You may also contact us at support@originwise.ai to request any restriction or opt-out right available under applicable law.

11. Children and Minors

Our Services are generally not intended for independent use by children where prohibited by law. If local law sets a different age threshold for children, that local standard applies. If you are a parent or guardian and believe a minor has provided personal information without appropriate authorization, contact us and we will take steps as required by applicable law.

12. Your Rights and Region-Specific Requirements

Depending on the laws applicable to you, you may have some or all of the following rights: access, copy, correction, supplementation, deletion, withdrawal of consent, restriction of processing, objection, portability, explanation of automated decision-making, account cancellation, complaint, and the right to receive information about how your personal information is processed.

For example:

• Mainland China users may have rights to access, copy, correct, delete, request explanations, withdraw consent, and cancel accounts, and may also benefit from cross-border transfer, security-incident, and assessment requirements under applicable law;
• EEA/UK users may have rights to access, rectification, erasure, restriction, objection, portability, and complaint to a supervisory authority;
• Residents of certain U.S. states may have rights to know, access, delete, correct, and opt out of certain targeted advertising, profiling, or sharing activities where the relevant state law applies.

You may submit requests by contacting support@originwise.ai. To protect account security, we may request identity verification and may reject, limit, or defer requests that are repetitive, excessive, abusive, or impossible to verify, to the extent allowed by law.

13. Policy Updates and Contact

We may update this Policy to reflect changes in law, regulation, products, processing activities, or business operations. Updated versions will be posted on the website or product pages and become effective when posted or on the date stated in the notice; where required by law, we will provide additional notice.

If you have questions about this Policy, our data practices, or your rights, contact us at support@originwise.ai. You may also lodge a complaint with a competent regulator if applicable law allows.