Privacy Policy

1. Introduction

This Privacy Policy describes how Pixorr Technologies Inc. (doing business as "KwikUI") collects, uses, shares, and protects your personal information when you access or use any of our products or services, including our website (www.kwikui.com), Chrome extension (KwikSnap), and our AI-powered UI/code prompt generation tools. We are deeply committed to maintaining the privacy, security, and transparency of your data.

By using our services, you agree to the practices outlined in this Privacy Policy. If you do not agree with this policy, please refrain from using KwikUI's services.

2. Who We Are

KwikUI is a product of Pixorr Technologies Inc., a Canadian corporation based in Toronto, Ontario. We operate under the privacy frameworks of Canada and adhere to global privacy standards including the European Union's General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Children's Online Privacy Protection Act (COPPA), among others.

For any inquiries, concerns, or rights requests, you may reach us at:

• Address: 12 Kwik Street, Suite 102, Toronto, Ontario M5G 2C3, Canada
• Email: hello@kwikui.com
• Phone: +1 (438) 293-8299

If required under Article 27 of the GDPR, we will appoint an EU/UK Representative to ensure continued compliance for users in those regions.

3. Scope of This Policy

This Privacy Policy applies to all personal data collected through:

• Our website and platform
• The KwikSnap Chrome extension
• Our backend AI models and interfaces
• Subscription, billing, and customer relationship systems
• Any communication channels, including email and support chat

4. Information We Collect

KwikUI collects various types of personal and technical information, either directly from you or automatically via your interactions with our systems.

Account and Identity Information

When you sign up for KwikUI, we collect information such as your full name, email address, hashed password, and optionally, your job title or company affiliation. This information allows us to authenticate users and tailor features based on usage context.

Payment and Billing Data

For paid services, we collect billing information including transaction metadata, billing address, and payment tokens from trusted third-party processors such as Stripe or PayPal. Raw credit card information is never stored on our servers.

User-Generated Content

This includes code snippets, design prompts, KwikSnap screenshots, or any files uploaded to the platform. These inputs are essential for our core AI services and may be retained temporarily for model refinement, quality checks, or saved to your project history. For more details, feel free to reach out to us.

Technical and Device Metadata

To maintain security and performance, we collect technical data such as IP address, device ID, operating system version, browser type, screen resolution, and browser fingerprints, etc. These help us troubleshoot errors and detect fraudulent behavior.

Usage and Interaction Data

Through tools like PostHog and Google analytics, we collect anonymized behavioral analytics, such as feature clicks, session length, heatmaps, and crash reports. This information guides our ongoing product improvements and UX enhancements.

AI Training Data

Prompts and outputs may be sampled, anonymized, and used to train or fine-tune KwikUI's proprietary models. Users can opt out of having their data used for this purpose unless it is essential to service functionality.

5. KwikSnap Chrome Extension

The KwikSnap Chrome extension captures screen content for UI/code prompt generation use cases. It functions primarily in two modes:

• Local Processing: Basic screenshots and image annotations are processed entirely on the user's local machine.
• Server-Side AI Processing: When AI features are enabled, captured content is securely transmitted over encrypted channels (AES-256) to our servers for real-time analysis.

Captured data is retained on our servers based on your account type. For unregistered users, data (such as screenshots or prompt inputs) is stored temporarily—typically for no more than 24 hours—and is automatically purged thereafter through cryptographic deletion protocols. For free registered users, captured data may be retained on our servers for up to 15 days, unless the user proactively deletes it via their dashboard. For Pro and Power users, data can be retained indefinitely to support extended project work, version control, and custom model enhancements. These users retain full autonomy and can permanently delete any stored data at any time from within their account settings.

Regardless of account tier, KwikUI actively prevents the capture of sensitive fields—including password inputs, credit card data, and any elements flagged with data-sensitive attributes—using advanced DOM recognition and real-time filtering mechanisms. If you believe sensitive data has been captured in error, please report the issue immediately to our Data Protection Officer at hello@kwikui.com, and we will initiate corrective action without delay.

6. Legal Grounds for Data Processing

Under the GDPR and similar frameworks, we rely on the following legal bases to process your information:

• Contractual Necessity: Account creation, authentication, and access to core services
• Legal Obligation: Billing, taxation, fraud detection, and financial reporting
• Consent: Marketing emails, optional features, and participation in surveys
• Legitimate Interests: AI training, usage analytics, and internal debugging
• Vital Interest & Security: System security, abuse prevention, and enforcement

Users may withdraw consent or object to processing at any time through their account privacy settings.

7. Data Sharing with Third Parties

KwikUI does not sell your personal data. We only share your data with third-party providers under strict contractual agreements for specific business purposes:

• Hosting & Infrastructure: Vercel (United States) for global deployment
• AI Services: OpenAI and Anthropic for natural language processing and model inference
• Analytics & Monitoring: PostHog, Google for anonymized product usage analytics
• Payments: Stripe and PayPal for secure subscription billing and invoicing

We may also disclose information when legally compelled to do so by Canadian courts, regulatory authorities, or pursuant to a lawful investigation. During business acquisitions or mergers, relevant data will be transferred securely in accordance with applicable laws.

8. Data Retention and Deletion

We retain your data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law:

• User Account Data: Retained for the lifetime of the account plus two years of inactivity.
• Financial Data: Retained for 7 years to comply with Canadian tax laws.
• KwikSnap Data: Retained up to 24 hours on our servers unless saved by the user on their device(s).
• AI Training Data: Kept for 30 days post-anonymization for internal model improvement.

You may request data deletion at any time via your account dashboard or by contacting hello@kwikui.com.

9. International Data Transfers

KwikUI operates globally and may transfer your data to other countries where we or our partners maintain infrastructure. We ensure adequate protections are in place through:

• GDPR Adequacy Decision for data transfers from the EU/UK to Canada
• Standard Contractual Clauses (SCCs) for transfers to the United States
• Enterprise options for Canadian-only data residency via Microsoft Azure

10. Data Security Measures

We prioritize user security through a combination of administrative, technical, and physical safeguards:

• Data in Transit: Protected via TLS 1.3
• Data at Rest: Encrypted using AES-256
• Internal Access Controls: Biometric logins and access logging for administrators

11. Children's Privacy

KwikUI is not intended for children under 13 (or 16 in the EU). If we become aware of underage usage, we will promptly delete the associated account and any collected data.

12. Your Privacy Rights

Depending on your jurisdiction, you have the right to:

• Access your personal data and receive a portable copy
• Correct inaccuracies in your stored information
• Request deletion of your account and associated data
• Object to or restrict processing of certain data categories
• Opt out of marketing or AI training participation

You may exercise these rights via the Privacy Dashboard on our website or by emailing hello@kwikui.com with verification documents.

13. Responsible AI and Machine Learning

KwikUI uses AI tools to enhance productivity, but we strive for responsible use:

• Transparency: Disclosure of AI providers and training use
• Opt-out Options: Enterprise clients can choose not to share data with third-party models
• Bias Mitigation: Regular audits for fairness, accuracy, and non-discrimination in output
• User Accountability: Feedback channels for reporting harmful or biased AI behavior

14. Data Breach Notification

In the event of a data breach, we will:

1. Notify affected users via email and/or SMS within 72 hours if the risk is high
2. Inform the appropriate regulatory bodies, such as the OPC (Canada) or EU data protection authorities
3. Publish status updates and remediation plans on our Trust Center page

We maintain 24/7 security operations monitoring with real-time anomaly detection systems.

15. Policy Changes and Updates

KwikUI reserves the right to update this Privacy Policy as needed. If changes are substantial, users will be notified at least 30 days in advance through email and in-app alerts. Archived versions of our Privacy Policy are available at at request for reference.

Continued use of our services after the effective date of any policy update constitutes your agreement to the revised terms.

16. Cookies & Tracking Technologies

KwikUI uses cookies and similar tracking technologies to enhance user experience, improve service functionality, and collect data for analytics and personalization purposes. This section explains how and why these technologies are used, what types of data they collect, and how users can control their preferences.

What Are Cookies?

Cookies are small text files that are stored on your browser or device by websites you visit. They enable features such as maintaining login sessions, remembering preferences, and collecting aggregated data for analytics. Cookies can be "first-party" (set by KwikUI directly) or "third-party" (set by third-party services we integrate with).

Why We Use Cookies

KwikUI uses cookies and tracking technologies for the following purposes:

• Authentication and Security: To recognize logged-in users, prevent fraudulent login attempts, and protect user accounts.
• Preference Management: To store UI theme choices, language settings, and session state between visits.
• Performance and Analytics: To understand how users interact with our platform and extension, identify issues, and improve usability. This includes tools like [PostHog], which allow us to track session heatmaps, feature usage, and error events (all anonymized).
• Marketing and Attribution: To track the effectiveness of our marketing campaigns, retarget visitors with relevant content, and measure conversion metrics via channels like Google Ads or Meta Ads (when active).

Types of Cookies We Use

• Essential Cookies: Required for the platform to function correctly (e.g., login sessions, load balancing). These cannot be disabled.
• Performance Cookies: Collect anonymized data on how users interact with our platform to help us improve it.
• Functionality Cookies: Remember user preferences and choices to personalize the experience.
• Analytics & Debugging Cookies: Help us understand technical behavior, detect bugs, and test new features.
• Marketing Cookies (if consented): Used only if a user opts in. These help serve relevant ads and track engagement across campaigns.

Third-Party Tracking Tools

KwikUI may embed or integrate tools that set third-party cookies, subject to their own privacy policies. These include:

• Supabase (backend and database and authentication needs)
• Anthropic (Intelligence)
• PostHog (Analytics)
• Stripe (for billing analytics and fraud detection)
• AWS or (hosting, may use runtime cookies)
• Google Services (in the future, e.g., Ads, ReCAPTCHA, etc.)

These partners may process data like IP addresses, browser types, session timestamps, and behavioral metrics to offer their services to us and our users.

User Control & Consent

Under GDPR, CCPA, and other global privacy regulations, you have the right to control your cookie preferences.

• First-Time Visitors: You can choose to accept all cookies.
• Privacy Dashboard: Logged-in users can revisit their cookie preferences anytime.
• Browser Settings: Most browsers allow you to block or delete cookies from specific websites. However, disabling essential cookies may result in limited functionality or inability to access certain features.

Do Not Track (DNT) Signals

KwikUI currently does not respond to "Do Not Track" signals due to lack of standardization in their implementation. However, you can manage tracking preferences manually via your cookie settings or browser configuration.

Retention of Cookie Data

Cookie lifespan varies by type:

• Session Cookies expire once you close your browser.
• Persistent Cookies may remain on your device for a defined period unless manually cleared or expired (typically 7–90 days for analytics cookies, or longer for authentication cookies).

Data collected through cookies is retained only as long as necessary for the stated purposes and is anonymized where feasible.

17. Dispute Resolution

If you have questions, concerns, or wish to raise a complaint about your privacy, contact us directly at hello@kwikui.com. We commit to responding within 72 hours.

If resolution cannot be achieved internally, you may escalate the matter to:

• Canada: Office of the Privacy Commissioner (OPC)
• European Union: Lead Supervisory Authority in your Member State
• Binding Arbitration: As per the Ontario Arbitration Act, 1991