Privacy Policy

1. Introduction

Welcome to KanBandit ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered ticket generation service.

KanBandit is hosted in the European Union and complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Personal Information

• Account Information: Email address, username, and password (encrypted)
• Profile Information: Optional display name and preferences
• Payment Information: Billing details processed through secure third-party payment processors

2.2 Usage Information

• Ticket Data: User inputs, generated tickets, templates, and related metadata
• Technical Data: IP address, browser type, device information, and access logs
• Analytics Data: Usage patterns, feature interactions, and performance metrics

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To provide, maintain, and improve the KanBandit platform
• AI Processing: To generate tickets using AI language models (see Section 5 for AI-specific policies)
• Account Management: To manage your account, authentication, and subscription
• Communication: To send service updates, security alerts, and support messages
• Analytics: To understand usage patterns and improve our service
• Legal Compliance: To comply with legal obligations and protect our rights

4. Data Storage and Security

4.1 Data Location

All your data is stored in secure data centers located within the European Union. We do not transfer your data outside the EU/EEA unless explicitly required for service delivery (e.g., AI processing) with appropriate safeguards in place.

4.2 Security Measures

• Encryption: Data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access controls and multi-factor authentication
• Regular Audits: Security assessments and vulnerability scanning
• Incident Response: 24/7 monitoring and incident response procedures

5. AI Processing and Third-Party Services

5.1 AI Service Provider Integration

We may use third-party AI service providers to process user inputs and generate responses. These providers do not retain or use submitted data to train their models, and all data is transmitted securely and in compliance with applicable data protection laws. Important data protection guarantees:

• Zero Data Retention: AI service providers do not store or use your data for training models
• API-Only Processing: Your inputs are processed only to generate responses and are not retained
• SOC 2 Type II Compliance: Our AI service providers maintain SOC 2 Type II certification or equivalent security standards
• Enterprise Privacy: We use enterprise-grade APIs with enhanced privacy protections

5.2 Third-Party Service Standards

All third-party AI and service providers are required to meet enterprise-grade security and privacy standards. We regularly review and assess our providers to ensure ongoing compliance with data protection requirements.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

• Service Providers: With trusted third parties who assist in operating our service (e.g., hosting, payment processing)
• AI Processing: With AI service providers as described in Section 5, with strict data protection agreements
• Legal Requirements: When required by law, court order, or to protect our legal rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with user notification)
• With Your Consent: With your explicit permission for other purposes

7. Your Rights (GDPR)

Under GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)

To exercise these rights, contact us at privacy@kanbandit.ai. We will respond within 30 days.

8. Data Retention

We retain your data as follows:

• Account Data: Retained while your account is active
• Ticket Data: Retained until you delete it or close your account
• Billing Records: Retained for 7 years for tax and accounting purposes
• Logs and Analytics: Retained for 90 days (anonymized after 30 days)

When you delete your account, we permanently delete your personal data within 30 days, except where retention is required by law.

9. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. For detailed information, see our Cookie Policy.

You can control cookies through your browser settings. Disabling cookies may limit certain features of the service.

10. International Users

If you are accessing KanBandit from outside the European Union, please note that your information will be transferred to and processed in the EU. By using our service, you consent to this transfer and processing. We ensure appropriate safeguards are in place for international data transfers as required by GDPR.

11. Children's Privacy

KanBandit is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@kanbandit.ai.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our service. Your continued use of KanBandit after such changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with your local data protection authority if you believe your data protection rights have been violated.