Privacy policy

1. Who we are

Kizari.si is operated by Kognics, Inc., 131 Continental Drive, Suite 305, Newark, Delaware 19713, United States. This policy covers our website and writing-assistant application. For privacy questions or requests, email sid@viali.ai and include “Kizari privacy” in the subject.

2. Information we receive

When you sign in with Google, we receive your account identifier, email address, and basic profile information such as your name and profile image. We use these to authenticate you, identify your account, and manage workspace access. Google sign-in does not give Kizari access to your Gmail messages, Drive files, contacts, or calendar.

When you connect X, we receive the account identifier, handle, profile information, granted permissions, and access and refresh tokens. We retrieve relevant public posts and available account/post metrics for the features you use. The current authorization asks for tweet.read, users.read, and offline.access. Previously connected accounts may have granted additional permissions; you can revoke and reconnect them. The current product does not publish automatically or read your direct messages.

We also process information you provide: your topics, goals, voice examples, writing boundaries, conversations with your agents, drafts, uploaded media, schedules, preferences, approvals, and feedback. Technical records may include request details, IP addresses in hosting logs, timestamps, errors, and security events.

3. Why we process information

We use information to run and secure your account; retrieve relevant conversations; personalize research and writing; prepare scheduled drafts; respond to support and privacy requests; and meet legal obligations. Where applicable, we rely on performing our agreement with you, your consent for optional connected services, legitimate interests in operating and securing the service, and legal obligations. You can withdraw a connection by disconnecting it.

We do not sell personal information or use Google account data for advertising. Google identity data is used for account and access management, not as writing research. We do not use connected-platform data to build or train our own general-purpose AI model.

4. AI processing and service providers

Relevant prompts, profile/voice instructions, public-source context, selected drafts, and feedback are sent to OpenAI to generate recommendations and text. Do not provide secrets or sensitive personal information that is not needed for writing. AI output may be inaccurate and must be reviewed.

Our core providers are Supabase (authentication, database, and private file storage), Vercel (hosting and operational logs), OpenAI (AI generation), Google (sign-in), X (connected-account and content APIs), and Stripe (payments and billing). Providers receive the information needed for their role, subject to applicable agreements and their policies. We may also disclose information when legally required or necessary to investigate abuse, protect rights, or complete a business transfer with appropriate safeguards.

Stripe collects and processes your payment card, billing contact and address, tax information where applicable, and payment records. Kizari stores billing identifiers, subscription status, trial dates, and event records to manage access and support, not full card numbers or card security codes. We retain a pseudonymous trial-eligibility marker to prevent repeat introductory trials; limited billing and fraud-prevention records may be retained after account deletion where appropriate.

5. Cookies and browser storage

We use essential cookies and browser storage for sign-in, security, and application preferences. The current site does not include advertising trackers or optional marketing analytics. See our cookie policy. Following a link to Google, X, or another provider takes you to a service with its own policies.

6. Retention

We retain workspace information while needed to provide the service and fulfill the purposes above. You can edit your drafts and disconnect X. Disconnecting removes stored connection credentials but does not itself delete your workspace or posts you have published on X.

Account/workspace deletion is currently a support-assisted process, not instant erasure. We aim to process verified requests within 30 days, subject to applicable law. Limited records may need to be retained for security, resolving disputes, or legal obligations. Backups and providers’ operational records follow their applicable retention schedules. We will explain any applicable exception when responding to your request.

7. Your controls and rights

In Settings you can edit your preferences, pause your routine, disconnect X, export workspace text and media metadata, or record a deletion request. Export does not include image binaries, security logs, or provider credentials. You can also email us without signing in; see data deletion instructions.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information, restrict or object to processing, withdraw consent, and complain to your data-protection authority. We may request information needed to verify your identity. We do not discriminate against users for exercising applicable rights.

8. Security and international processing

We use encrypted transport, server-side credentials, encrypted X-token storage, private media storage, and workspace access controls. No system can guarantee absolute security. Our providers may process data outside your country; applicable contractual and legal safeguards apply to those transfers.

9. Age and policy updates

Kizari is intended for people aged 18 or older. Please contact us if you believe a child has provided personal information. We will update the date above when this policy changes and provide appropriate notice of material changes. Questions: sid@viali.ai.