Privacy Policy

Last updated: 2026-10-02

What we collect

Account data (email, name, hashed password), the files you upload, the models, versions, renders and conversations you create, payment records from our payment provider — NOWPayments for crypto payments (we never store card numbers or wallet keys), technical logs (hashed IP address, user agent) used for security and abuse prevention, and how you first reached Kubikly (the referring website, campaign tags and the first page you visited) when you create an account.

If you choose Sign in with Google, Kubikly requests only the basic sign-in scopes (openid, email, profile): Google shares your email address, your name and an account identifier so we can create or open your Kubikly account. We do not receive your Google password and do not access any other Google data — no Gmail, Drive, Contacts or Calendar.

We also record a few steps of how the product is used — a visit, a click on a sign-up button, opening the sign-up form, starting an upload, opening a finished model — so we can see where people get stuck. These events are first-party, tied to a random identifier kept in your browser (and to your account once you are signed in), never include your IP address, and are not recorded at all if your browser sends Do Not Track or Global Privacy Control.

If you write to us through the contact form we keep your message, your email address and the name you give. If you write a review or submit a project to the showcase, we keep what you submitted and whether you agreed to its publication.

How we use it

To provide the service: uploads are sent to third-party AI providers (OpenAI, and Anthropic as fallback) solely to analyse and reconstruct your model. We do not use your content to train models. Emails are sent through Resend (see “Emails we send” below). The service is hosted on Render in Frankfurt, Germany.

Kubikly staff may look at your projects — the files you uploaded, the results and your conversations with the assistant — to provide support, investigate failures and improve the quality of our reconstructions. This access is limited to administrators, and opening a project in the admin console is recorded in an audit log. Your content is never sold or shared with anyone outside Kubikly beyond the providers listed above.

The way you first reached us and the product events are used only in aggregate, to understand which channels bring people to Kubikly and which steps need improving. They are never shown publicly and never shared.

Emails we send

Service emails are part of using Kubikly and are always sent: verifying your address, resetting a password, a model that is ready or failed, a payment confirmation and replies to your messages. Product emails are a small number of messages based on how you use Kubikly — for example a reminder that your free model has not been used yet, a note when your credits run low, or what changed in a tool you used. They are sent in four categories (product updates, tips, reminders and offers); offers are off unless you switch them on. Every product email says why you received it and carries a one-click unsubscribe link, and you can choose categories or stop all product emails at any time on your email preferences page.

To know whether an email was useful and to stop mailing addresses that cannot receive it, we keep a record of each email we send, the delivery, bounce and spam-complaint events reported by our email provider (Resend) and, where it reports them, opens; and when you click a link in one of our emails it passes through kubikly.com first, so we record that click and can tell whether a later purchase followed it. An address that bounces permanently or reports a message as spam receives no further product email. These records are used only inside Kubikly.

Privacy by default

Projects are private unless you explicitly create a public link. Public demo projects are the only content indexed by search engines. A review is published only if you tick the box allowing it, and a project appears in the showcase only if you submit it; both are checked by a person first and both can be withdrawn at any time, after which they disappear from the site immediately.

Retention and deletion

You can delete individual projects or close your account from the app. A deleted project disappears from your account and loses any public link; closing your account removes your email address, name and sign-in. The project content itself — uploads, versions, renders and conversations — is kept, accessible only to Kubikly administrators, for support and to improve our reconstructions. If you want it permanently erased, contact us and we will erase it. Payment records are retained as required by law.

Cookies and browser storage

We use a single essential session cookie; local storage for interface preferences, the random identifier described above and how you first arrived (the referring website, campaign tags and first page you visited, kept until you sign up so it can be attached to your new account); and session storage (cleared when you close the tab) for how you arrived on the current visit. No advertising or third-party trackers.

Contact

Questions about your data, or a request to see or erase it: use the contact form and choose “Security & privacy”. More detail on providers, security and the limits of the AI is in the Trust Center. Kubikly never asks for your password by email.