Privacy policy

1. Who is responsible

Kitsch is a brand of Playsthetic LLC, a company registered in the United States. Playsthetic LLC ("we", "us") runs it and is the controller of the personal data the Kitsch cloud service handles. Write to [email protected] for anything about your data, including a data processing agreement for your organization. You can also reach us by post at 2108 N St #6842, Sacramento, CA 95816, United States, or by phone at +1 (510) 337-4660.

An on-premise deployment sends nothing to us, and reaches PostHog, Sentry or the AI providers only if its operator sets them up. That operator decides what happens to its data, and questions about it go to them.

2. What we collect

• Account. Your name, email address, password (as a salted hash), avatar, two-factor settings, the organizations and projects you belong to and your role in each, and when you agreed to the terms and which version.
• Billing. Each organization's credit balance and a ledger of every purchase, charge and refund, with who made it, in which project, and with which model. When a manager buys credits, we record the statement they ticked before paying. Payment details go to Stripe, never to us.
• Content. Projects, shots, assets, descriptions, imported scripts, uploaded reference images, generated frames and films, sequences, exports, and each render with the prompt and references it was made from. Reference images can show people. We do not use them to identify anyone.
• API keys and connected apps. The keys you create, with their names and scopes, and the apps you authorize over OAuth, with their tokens and access.
• Sessions and diagnostics. The IP address and user agent of each signed-in session, and the analytics and error reports in section 4.
• People who are not users yet. The email address of anyone invited or on the waitlist, and whatever you send through the contact form.

3. Why we use it

• To run Kitsch for you, including generations, sharing with members, and emails such as invitations, password resets, purchase confirmations and low balance alerts. The legal basis is our contract with you.
• To bill credits and keep the records that go with them. The legal bases are our contract with you and our legal obligations.
• To understand which features are used and to fix faults. The legal basis is our legitimate interest in a working product.
• To keep Kitsch secure, prevent abuse, handle reports, and enforce the terms. The legal bases are our legitimate interests and, where the law requires us to act, our legal obligations.
• To invite you from the waitlist and answer your messages. The legal bases are your request and our legitimate interest in replying.

We do not sell personal data, share it for targeted advertising, or make decisions about you by automated means alone. We do not use your uploads or outputs to train AI models.

4. Analytics and error reports

Product analytics go to PostHog, on its US servers. In your browser, PostHog stores nothing on your device and sends nothing if your browser sends Do Not Track. Otherwise it sends page views and leaves, joining the waitlist, and generating reference stills, with the style and count. Autocapture, session recording, heatmaps and surveys are off, so nothing reads your pages or records your screen, clicks or keystrokes. Query strings, page titles, and your full user agent, timezone, language and screen size are dropped.

Our servers also send events when you sign up, sign in, create or generate something, import a script, export, or buy credits, with ids and details such as counts, formats and sizes. These are not affected by Do Not Track. Events carry your account id, or the organization's for a purchase, never your name or email address, and never your prompts, descriptions, assets, frames or films. Browser analytics pass through our own domain, which forwards your IP address to PostHog but never your cookies.

Errors in the browser and on our servers go to Sentry. A report carries the error, where it happened, the address without its query string, and request details such as your user agent. Cookies, authorization and API key headers are removed, and reports are not tied to your account. Sentry sees the IP address a report comes from.

5. Cookies and device storage

Kitsch sets a cookie to keep you signed in, and local storage remembers your theme. Both are needed for what you asked for, so there is no consent banner. There are no analytics or advertising cookies.

6. Who receives data

• fal.ai, Replicate and Runware run the AI models. The one running a job receives its prompt, reference images and any text involved, such as an imported script. Runware also checks results for unsafe content. Depending on the model, the job may pass to its maker, ByteDance, Google or Anthropic.
• Stripe sells credits as merchant of record. It receives the buying manager's name and email address, the organization id, the amount and the statement ticked before paying, collects payment details itself, and handles that data as a controller under its own policy.
• Cloudflare (United States) is the site's DNS and CDN, so all traffic passes through it. It also stores files and sends our emails.
• Hetzner (Germany) rents us the servers.
• PostHog and Sentry (United States) receive the analytics and error reports in section 4.

Members of your organizations and projects see your name, email address and avatar, and what you did there, such as renders and credit spending. We disclose data to authorities when the law requires it, and report sexual content involving minors to the National Center for Missing & Exploited Children.

7. International transfers

Kitsch is run from the United States, and most of the companies above process data there. For transfers from the European Economic Area, the United Kingdom or Switzerland, we rely on the EU-US Data Privacy Framework and its UK and Swiss extensions where the recipient is certified, and otherwise on the standard contractual clauses in its data processing terms.

8. How long we keep it

• Your account, until you delete it. Sessions, until you sign out or they expire.
• Content, until it, or the project or organization holding it, is deleted. A file stays while anything in its project, including the render history, still shows it.
• The credit ledger and render history, as long as the organization exists. Stripe keeps its payment and tax records as the law requires.
• Your waitlist entry, until you delete your account or ask us to remove it.
• Invitations, until we remove them. Ask us and we will.
• Analytics and error reports, for our PostHog and Sentry retention periods. Deleting your account leaves events already sent with an id that no longer matches anyone. Ask us and we will delete them.
• Copies held by fal.ai, Replicate and Runware, as long as their own terms say. We cannot delete those for you.

To delete your account, go to Settings, under Account, and confirm with your password. If you are the only manager of an organization with other members, or the only Kitsch admin while other accounts exist, hand that role on first. Deleting your account deletes every organization where you are the only member, with all its content, files and Stripe customer, and forfeits its unused credits. It also deletes your avatar, signs you out everywhere, revokes your API keys and app access, and removes you from the waitlist. Projects you made in organizations with other members stay with them, as do their ledger and render history, with your name removed.

9. Your rights

Depending on where you live, you can access, correct, delete or take a copy of your personal data, object to or restrict how we use it, and withdraw consent. You can change your name and avatar and delete your account in Settings, and export projects and films from the app. For anything else, write to us from the address on your account. We answer within 30 days. In the European Economic Area, the United Kingdom or Switzerland, you can also complain to your data protection authority.

10. California residents

In the past 12 months we collected identifiers (name, email address, IP address, account id), commercial information (credit purchases), internet activity (analytics), the content you upload (including images), and account login credentials, for the purposes in section 3, and disclosed them only to the recipients in section 6. We do not sell personal information or share it for cross-context behavioral advertising, and we use sensitive personal information only to provide the service. You have the right to know, delete and correct your personal information, and not to be treated differently for using these rights. To make a request, yourself or through an authorized agent, write to us.

11. People in reference images

A reference image can show you even if you have never used Kitsch, and whoever uploaded it must have your consent (see the terms). If they do not, write to us. You have the rights in section 9 over it.

12. Children

Kitsch is not for anyone under 18. If you believe a child has given us personal data, write to us and we will delete it.

13. Security

Connections are encrypted, passwords are stored as salted hashes, two-factor authentication is available, and repeated sign-in attempts are limited. A stored file opens only for someone who can reach a project that shows it, and an avatar only for its owner, people who share an organization or project with them, and Kitsch admins. We will tell you and the authorities about a breach where the law requires.

14. Changes to this policy

The date at the top shows the current version, and we tell you in the app or by email before a material change takes effect.