1. Data Controller

k-deco is operated by Krokanti Games SL, a company registered in Spain. For any questions regarding this privacy policy or your personal data, contact us at legal@krokanti.com.

2. Data We Collect

We collect the minimum data necessary to provide the service:

Account data: Name and email address when you sign in via Krokanti Account (SSO).
Uploaded images: Room photos you upload for AI redesign. Stored in Cloudflare R2 (EU).
Generated designs: AI-generated room redesigns linked to your account.
Usage data: Page views, generation counts, feature usage — collected in aggregate via Google Analytics.
Payment data: Handled entirely by Stripe. We never store your card details.

3. Legal Basis (GDPR)

We process your data based on: (a) contract performance — to provide the k-deco service; (b) legitimate interest — to improve the product and detect abuse; (c) consent — for analytics cookies, which you can disable at any time.

4. Image Processing and Storage

When you upload a room photo, it is sent to the Replicate API for AI processing. Replicate processes the image temporarily and does not retain it after generation is complete. The original photo and generated result are stored in Cloudflare R2 (EU region) linked to your account. Free-tier images may be deleted after 30 days of inactivity. Pro and above plans retain images indefinitely while your subscription is active.

5. Third-Party Services

Replicate: AI image generation — processes uploaded photos temporarily for redesign.
Cloudflare R2: Image storage — stores original uploads and generated results in the EU.
Stripe: Payment processing — handles subscriptions and billing securely.
Vercel: Application hosting — serves the web application.
Google Analytics: Analytics — collects anonymous usage statistics to improve the product.
Brevo: Transactional emails — sends account-related emails.

6. Data Retention

We retain your data as long as your account is active. If you delete your account, all personal data, uploaded images, and generated designs are permanently deleted within 30 days. You can request immediate deletion by emailing legal@krokanti.com.

7. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

Access your personal data.
Correct inaccurate data.
Delete your account and all associated data.
Object to or restrict processing.
Data portability — download your generated images.

To exercise any right, email legal@krokanti.com

8. Cookies

We use essential and analytics cookies. For full details, see our Cookie Policy

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or a notice in the app. Continued use of the service constitutes acceptance.

Privacy Policy