隐私政策

最后更新：2026 年 8 月 26 日

This Privacy Policy explains how Kite Flyer Software Studio Limited (“Kite Flyer,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal information when you use our website at https://www.kiteflyersoftwarestudio.xyz, our contact and marketing pages, and our products and tools—including the website builder (together, the “Services”).

By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services. Our Terms and Conditions also govern use of the Services.

1. Who we are

The data controller for the Services is Kite Flyer Software Studio Limited, a company operating from Hong Kong. For privacy questions, access or deletion requests, or complaints, contact us at kiteflyersoftwarestudio@gmail.com.

2. Scope

This Policy applies to personal information we process when you:

• visit or interact with our websites and marketing pages;
• submit a contact, enquiry, lead, or project brief form;
• create an account, sign in (including with Google), or use the website builder and related dashboards; or
• purchase, request, or receive paid plans, hosting, publishing, or professional services from us.

3. Information we collect

3.1 Information you provide

• Account and profile data — such as name, email address, password (if you register with email), and profile details you choose to add.
• Business and website content — prompts, briefs, industry selections, business descriptions, contact details for your business, logos, images, copy, and other materials you upload or enter into the website builder.
• Enquiry and lead data — name, email, phone, company, project details, and similar information submitted through contact or lead forms.
• Billing-related data — information needed to process subscriptions or payments (handled primarily by our payment processor; we do not store full card numbers on our servers).
• Support communications — messages you send us by email, WhatsApp, or other channels.

3.2 Google Sign-In and Google user data

You may sign in to the Services using Google OAuth / Google Sign-In (provided through our authentication infrastructure). When you choose Google Sign-In, we request and receive only the information necessary to create and authenticate your account, typically:

• your Google account email address;
• your basic profile name; and
• your Google profile image URL (if provided by Google and available to our auth provider).

We use Google’s authentication tokens solely to complete sign-in and maintain your session. We do not request access to your Gmail, Google Drive, Google Calendar, Contacts, or other Google Workspace content. We do not use Google APIs to read, scan, or modify your Google content beyond basic Sign-In profile information.

How we use Google user data: solely to authenticate you, create and manage your Kite Flyer account, display account identity in the product, communicate service-related messages (such as security or account notices), and provide or improve user-facing features of the Services.

How we store Google user data: account identifiers and profile fields received from Google Sign-In are stored in our authentication and application databases (hosted by our infrastructure providers) for as long as your account remains active, or as needed to operate the Services and meet legal obligations.

How we share Google user data: we share Google Sign-In data only with service providers that process data on our behalf to operate authentication and the Services (for example, our auth/database host). We do not sell Google user data. We do not share Google user data with third parties for advertising, marketing lists, or independent data brokering. We do not use Google user data to train generalized artificial intelligence or machine learning models. Our use of Google user data is limited to the practices disclosed in this Privacy Policy and is intended to comply with the Google API Services User Data Policy, including the Limited Use requirements applicable to our Sign-In use case.

3.3 Information collected automatically

• Usage and device data — pages viewed, features used, approximate location derived from IP, browser type, device type, referring URLs, and timestamps.
• Cookies and similar technologies — session cookies for authentication, preference cookies, and analytics cookies (including Google Analytics where enabled) to understand how the Services are used and to improve performance and security.
• Logs and diagnostics — error logs, generation job status, and security-related events needed to run and protect the website builder.

3.4 Information from website generation

When you use the website builder, we process the prompts and business information you submit, intermediate generation parameters, generated website drafts (including text and layout selections), and related job metadata. Where stock imagery is used, we may query third-party stock image providers using search terms derived from your brief.

4. How we use information

We use personal information to:

• provide, operate, secure, and improve the Services;
• authenticate users (including via Google Sign-In) and manage accounts;
• generate, store, preview, regenerate, and publish website drafts and related assets you request;
• process leads, respond to enquiries, and deliver consultancy or professional services;
• process payments and manage subscriptions when billing is enabled;
• send transactional messages (account, security, billing, product updates related to your use);
• monitor abuse, enforce our Terms, prevent fraud, and protect rights and safety;
• analyse aggregated or de-identified usage to improve product quality; and
• comply with legal obligations and respond to lawful requests.

We do not sell your personal information. We do not use Google user data for serving advertisements.

5. Automated drafting and third-party model providers

To generate website content and related features, we may send your prompts, brief details, and necessary context to third-party model providers under contract with us. Those providers process data to return generation results to us so we can display them in the Services. You should not submit sensitive personal data (such as government ID numbers, financial account secrets, or health data) in prompts unless it is strictly necessary for your website and you understand it may be processed by those providers.

We design our product flows so Google Sign-In profile data is used for authentication and account management, not as training input for third-party foundation models. Content you voluntarily enter into the builder (prompts, business copy, uploads) is processed to deliver the generation features you request.

6. How we share information

We share personal information only as needed to operate the Services or as required by law, including with:

• Infrastructure and auth providers (for example, database, storage, and authentication hosting used to run accounts and the website builder);
• Model and tooling providers that process prompts and generation requests on our behalf;
• Payment processors (for example, Stripe) when you purchase paid plans;
• Analytics providers (for example, Google Analytics) for aggregated product and site analytics;
• Email and communications providers used to send transactional or support messages;
• Stock media providers when the builder requests licensed imagery based on your brief;
• Professional advisers (legal, accounting) under confidentiality where needed; and
• Authorities or counterparties when required by law, legal process, or to protect rights, safety, and security.

If we are involved in a merger, acquisition, or asset sale, personal information may be transferred as part of that transaction, subject to continuing confidentiality and this Policy (or a successor policy notified to you).

7. Cookies

We use essential cookies to keep you signed in and to protect accounts. We may also use analytics cookies to understand traffic and improve the Services. You can control cookies through your browser settings; blocking essential cookies may prevent sign-in or core features from working.

8. Data retention

We retain personal information for as long as your account is active or as needed to provide the Services, resolve disputes, enforce agreements, and meet legal, tax, and accounting requirements. Website drafts, published sites, prompts, and generation history may be retained while your account remains open and for a reasonable period afterward for backup, abuse prevention, and legal compliance. You may request deletion as described below.

9. Your choices and rights

Subject to applicable law (including Hong Kong PDPO), you may:

• access the personal information we hold about you;
• request correction of inaccurate information;
• request deletion of your account and associated personal data (subject to legal retention needs);
• withdraw consent where processing is consent-based (without affecting prior lawful processing); and
• object to or request restriction of certain processing where the law provides that right.

To exercise these rights, email kiteflyersoftwarestudio@gmail.com from the address associated with your account and describe your request. For Google Sign-In users, you may also disconnect Google access via your Google Account permissions settings; doing so may prevent further Google Sign-In until you reconnect. Disconnecting Google does not automatically delete your Kite Flyer account or stored content—please submit a deletion request if you want that data removed.

10. Security

We implement administrative, technical, and organizational measures designed to protect personal information, including encrypted transport (HTTPS), access controls, and use of reputable infrastructure providers. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

11. International transfers

We operate from Hong Kong and may process and store information in Hong Kong and other countries where our service providers operate. Where data is transferred internationally, we take steps consistent with applicable law to protect it.

12. Children

The Services are directed to businesses and adults. We do not knowingly collect personal information from children under 16 (or the minimum age required in your jurisdiction). If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

13. Third-party links and services

The Services may link to third-party websites or integrate third-party tools (including Google Sign-In). Their privacy practices are governed by their own policies. We encourage you to review those policies.

14. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. If we materially change how we use Google user data, we will update this Policy and, where required, obtain additional consent before using that data in a new way. Continued use of the Services after an update constitutes acceptance of the revised Policy where permitted by law.

15. Contact

Kite Flyer Software Studio Limited
Email: kiteflyersoftwarestudio@gmail.com
Website: https://www.kiteflyersoftwarestudio.xyz