Privacy Policy

This policy explains what personal data Katzero collects, why we collect it, who we share it with and the choices you have. Katzero is operated by Katzero MENA FZ-LLC, which is the controller of your personal data. If you have a question, write to support@katzero.com.

The short version: we collect what we need to run Katzero, we don’t sell your data, we don’t show ads, and you can export or delete it at any time.

1. What we collect

Account data

Your email address, your name and your password. We never store your password itself, only a secure hash of it.

Onboarding answers

When you first sign in, we ask a few optional questions: the name you’d like us to use, your mood, how you heard about Katzero and your occupation. We use these to personalise the product and understand who uses it.

Profile picture

If you add one, we store the image you upload.

Your work

The prompts you write, your chat messages with Katzero, images and files you attach, and the sites, files and versions generated for you, including whether and where a site is published. For documents you attach, such as text, PDF or Word files, we keep only the text we read from them. They stay private to you and are never published.

Usage data

Records of what you do in the product that we need to run it fairly, such as which model handled a request, when, how large it was, whether it succeeded, and rate-limit events that count your usage against the free limits.

Technical logs

Basic information that our servers and hosting provider record automatically when you use Katzero, such as IP address, browser and device type, pages requested, timestamps and error reports. We use these to keep the service running and secure.

Messages and reports

If you email us or report a site, we keep your message, your email address if you give it, and the details you send.

2. Why we use it

• To create your account, sign you in and keep your account secure.
• To generate, store, preview and publish your sites, and to keep their version history.
• To personalise the product, for example greeting you by your preferred name.
• To apply usage limits, prevent abuse, and investigate reports of phishing, scams or other harmful sites.
• To send service emails, such as email verification, password resets and important changes to our terms. We don’t send marketing email without your consent.
• To understand how Katzero is used in aggregate and improve it.
• To meet legal obligations and respond to lawful requests.

We don’t sell your personal data and we don’t use it for advertising.

3. Legal bases

Where data protection laws such as the GDPR apply, we rely on these legal bases:

• Contract: to provide the service you signed up for, including generating and hosting your sites.
• Legitimate interests: to keep Katzero secure, prevent abuse, enforce limits and improve the product, balanced against your rights.
• Consent: for optional information such as onboarding answers and your profile picture. You can withdraw consent at any time by removing the information.
• Legal obligation: where the law requires us to keep or disclose information.

4. Who we share it with

We use a small number of service providers (processors) who handle data on our behalf, under contracts that require them to protect it:

• Hosting: Vercel hosts the Katzero app and serves the sites you publish.
• Database: Supabase (Postgres) stores your account, projects, versions, usage records and the images and files you attach.
• Email delivery: Resend sends our service emails, such as verification and password reset messages.
• AI processing: to build and edit your sites, we send your prompt, relevant parts of your project and any images or files you attach (for long files, their most relevant parts) to third-party AI model providers. They process this content to return a response. We send only what a request needs.

We may also share information if the law requires it, to protect people from harm, to enforce our terms, or as part of a merger or sale of the service, in which case this policy will continue to apply to your data.

5. Published sites

Anything you publish is public, including any personal data you choose to put on your site. Preview links are unlisted and marked so search engines don’t index them, but anyone with a preview link can open them. You can unpublish a site at any time.

6. How long we keep it

• Account data, onboarding answers, your profile picture and your work: for as long as your account exists.
• Projects you delete are removed from your account straight away, and their live sites stop working.
• When you delete your account, we delete your personal data and your sites, except where we must keep something for legal reasons.
• Usage records and technical logs: only as long as needed for security, abuse prevention and limits, then deleted or anonymised.
• Backups are overwritten on a rolling basis, so deleted data may remain in them for a short time before it disappears.

7. Security

We protect your data with encryption in transit, hashed passwords, access controls and isolated hosting for generated sites. No online service can be perfectly secure, so please use a strong, unique password. If we become aware of a breach that affects your data, we will tell you and the relevant authorities as the law requires.

8. Your rights

Depending on where you live, you have the right to:

• Access and export your data. Use the export option in Settings to download your account data and projects.
• Correct inaccurate data. You can change your name and profile details in Settings.
• Delete your data. You can delete your account in Settings, which removes your data and takes your sites offline.
• Object to or restrict certain processing, and withdraw consent you have given.
• Complain to your local data protection authority.

For anything you can’t do in Settings, write to support@katzero.com from the email address on your account. We will respond within the time the law requires, usually one month.

9. Cookies

Katzero only uses essential cookies. A session cookie keeps you signed in, and a small companion cookie lets our public pages know you are signed in so they can show a link to your dashboard. We don’t use advertising, analytics or tracking cookies, so there is no cookie banner. If that ever changes, we will update this policy and ask for your consent first where required.

10. Children

Katzero is not meant for children under 13. We don’t knowingly collect personal data from children under 13, and if we learn that we have, we delete it. If you believe a child under 13 has given us personal data, contact us at support@katzero.com. If you are under 18, you need a parent’s or guardian’s permission to use Katzero.

11. International transfers

Our service providers may process data in countries other than your own, including the United States. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission’s standard contractual clauses.

12. Changes to this policy

We may update this policy as Katzero changes. If a change is significant, we will tell you by email or in the app before it takes effect. The date at the top always shows the latest version.

13. Contact

Email: support@katzero.com
Post: Katzero MENA FZ-LLC, Katzero, Hub71, Al Khatem Tower, Abu Dhabi Global Market Square, Al Maryah Island, Abu Dhabi, United Arab Emirates

See also our Terms of Service and Acceptable Use Policy.