Privacy Policy
Effective: September 7, 2026
This Policy explains the categories of information KUSTOM KO may collect, why we use it, how it may be shared and the choices available to users.
1. Information we collect
We may collect account details (such as name, work email and organization), authentication and security events, product and plan information, billing identifiers and subscription status, support communications, product usage and diagnostics, device/browser information, and Customer Data you choose to upload or create in SLP Studio or Runway.
Payment card details are handled by our payment processor and are not intended to be stored directly by KUSTOM KO.
2. How we use information
We use information to provide and secure accounts; create and manage organizations, invitations, roles and seats; operate product features; process subscriptions; respond to support requests; prevent fraud and abuse; troubleshoot and improve reliability; communicate service or policy changes; comply with legal obligations; and protect users, KUSTOM KO and third parties.
3. Legal bases and consent
Depending on applicable law, processing may be based on performance of a contract, legitimate interests such as service security and improvement, compliance with legal obligations, or consent where consent is required. You may withdraw consent for optional processing where applicable without affecting prior lawful processing.
4. Service providers and subprocessors
We use specialized providers to operate the Services, including infrastructure/database/authentication, payment processing and transactional email. Current core providers may include Supabase, Stripe and Resend. Providers process information under their own legal and security frameworks and only for the functions for which they are engaged.
5. International processing
Our providers may process or store information in countries other than your own. Where required, we use contractual and organizational measures intended to support lawful cross-border transfers. Different jurisdictions may provide different privacy protections.
6. Retention
We retain personal information and Customer Data for as long as reasonably necessary to provide the Services, maintain security and billing records, meet legal/accounting requirements, resolve disputes and enforce agreements. Retention periods vary by data type. Deletion requests may be subject to legal holds, backup cycles and records we must retain by law.
7. Security
We use administrative, technical and organizational safeguards appropriate to the nature of the service, including authentication, authorization controls, transport encryption and database access controls. No system is completely secure. See Security for additional information.
8. Your privacy choices and rights
Depending on your jurisdiction, you may have rights to request access, correction, deletion, portability, restriction or objection, and to withdraw consent. We may need to verify identity and may decline or limit a request where permitted by law. Organization-controlled data may require coordination with the organization administrator.
9. Cookies and browser storage
We may use strictly necessary cookies or browser storage for authentication, security, preferences and product operation. Additional details are in the Cookie Policy. Where legally required, non-essential technologies will be subject to consent.
10. Children
The Services are intended for business, professional and educational users capable of entering a binding agreement. They are not directed to children under 13. If you believe a child has provided personal information contrary to applicable law, contact us.
11. Organization accounts
If you use the Services through an organization, its administrators may manage your membership, roles and product access and may be able to access organization-controlled content. Your organization may independently determine how it uses or exports data from the Services.
12. Changes and contact
We may update this Privacy Policy as the Services or legal requirements change. The effective date will be updated when changes are posted. Privacy requests and questions can be sent to contact@kustomko.com.