Privacy Policy

KaizenShots (operated by KaizenRise, "we", "us") provides an AI-powered photo feedback service. This Privacy Policy explains what we collect, how we use it, and the rights you have over your data.

1. Information we collect

Account information

• Email address, display name, and password hash when you create an account.
• If you sign in with Google, your Google account email, name, and profile photo.

Photos and feedback content

• Photographs you upload for feedback, along with EXIF and camera metadata.
• Captions, genre selections, and any text you submit with an upload.
• AI-generated feedback output associated with your uploads.

Usage and device information

• IP address, browser type, device, operating system, and pages visited.
• Error and performance data via Sentry.
• Aggregate traffic data via Google Analytics, including pages viewed, referring site, and approximate location derived from IP address.
• Interaction data on our public marketing pages via Microsoft Clarity, including clicks, scrolling, mouse movement, and session recordings that replay how a page was used. Clarity is not loaded inside the signed-in product, so it does not record your photos, your feedback, or anything behind sign-in.

Payment information

• Subscription transactions are processed by Razorpay. We do not store full card numbers. We retain transaction IDs, plan, amount, and status for billing records.

2. How we use information

• To generate AI feedback on photos you submit.
• To run your account, authenticate sessions, and manage subscriptions.
• To operate Discover, Exposures, and other community surfaces you opt into.
• To investigate reports, enforce our Terms, and protect users.
• To send transactional emails (sign-in, billing, notifications).
• To improve the product, including aggregated and de-identified analysis.

3. AI processing of your photos

When you submit a photo for feedback, it is sent to third-party AI providers (currently Anthropic, OpenAI, and Google) to generate the feedback. Providers process the image under their own data-processing terms and do not use your photos to train their public models under our current contracts. Photos remain private to your account unless you choose to publish them to Discover or submit them to an Exposure.

4. Sharing

We share information only as follows:

• Service providers who run infrastructure for us (hosting, storage, payments, email, error monitoring, analytics, AI providers). This includes Google (Google Analytics) and Microsoft (Clarity), who process usage data on our behalf under their own terms.
• Other users, when you choose to publish a photo to Discover or submit to an Exposure. Your display name and the photo become visible.
• Legal compliance, when required by law, court order, or to protect rights, safety, or property.
• Business transfers, in the event of a merger, acquisition, or sale of assets, with notice to you.

We do not sell your personal information.

5. Data retention

• Photos and feedback are retained while your account is active.
• If you delete a photo, it is removed from public surfaces immediately and purged from storage within 30 days.
• If you delete your account, account data is deleted within 30 days, except records we must keep for tax, billing, or legal reasons.
• Audit logs and report records may be retained for up to 24 months for safety and abuse investigation.

6. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data.
• Export your photos and feedback.
• Object to or restrict certain processing.

To exercise any of these rights, contact us at support@kaizenshots.ai.

7. Security

We use TLS in transit, password hashing with bcrypt, signed JWT sessions, and access controls on our infrastructure. No system is perfectly secure. Report suspected vulnerabilities to support@kaizenshots.ai.

8. Children

KaizenShots is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

9. International transfers

We may process data outside your country, including in the United States and the European Economic Area. We rely on standard contractual clauses and provider safeguards where required.

10. Cookies and analytics

We use cookies and similar technologies for authentication and session persistence. Disabling these will break sign-in.

We also use two analytics tools on our public marketing pages.

• Google Analytics measures traffic and which pages people read. You can opt out with the Google Analytics opt-out browser add-on.
• Microsoft Clarity produces heatmaps and session recordings, a replay of clicks, scrolling, and mouse movement on a page, so we can see where the site confuses people. Microsoft handles this data under the Microsoft Privacy Statement. For visitors in the EEA, the UK, and Switzerland, Clarity does not set cookies without consent and records without linking sessions to a returning visitor.

Neither tool runs inside the signed-in product. You can block both through your browser settings or any tracker blocking extension, and the site will still work.

11. Changes

We may update this policy from time to time. Material changes will be notified by email or in-product notice. The "Effective" date at the top reflects the latest version.

12. Contact

KaizenRise. Email support@kaizenshots.ai