Privacy Policy

1. Introduction

Web3 Studios LLC ("Company," "we," "us," or "our") operates the Kinexis.AI platform and related services (the "Service"). This Privacy Policy explains how we collect, use, store, and protect your information when you use the Service.

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, you must not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Password (stored as a cryptographic hash; we never store plaintext passwords)
• Google account information if you choose to sign in with Google (name, email, profile picture as provided by Google OAuth)

2.2 Video Content and Analysis Data

When you submit a video for analysis, we collect and process:

• The video file you upload or the YouTube video URL you provide
• Video metadata (title, description, duration, file type)
• AI-generated analysis data, including authenticity signals, behavioral pattern data, emotion classifications, facial action unit codes, credibility-relevant indicators, transcripts, and summary reports

2.3 Payment Information

Payment processing is handled entirely by Stripe, Inc. We do not store your credit card number, bank account details, or other sensitive financial information on our servers. We receive and store a Stripe customer identifier to associate your account with your payment history.

2.4 Usage and Analytics Data

We use analytics tools to collect anonymized usage data, including:

• Pages visited and features used
• Browser type and device information
• Referring URLs
• Approximate geographic location (country/region level)
• Session duration and interaction patterns

This data is collected in aggregate and is not used to identify individual users.

2.5 Cookies and Session Data

We use HTTP-only session cookies to maintain your authentication state. These cookies are strictly functional and are required for the Service to operate. We do not use advertising cookies or tracking cookies.

2.6 Enterprise and API Data

For enterprise customers, we additionally collect organization name, API key hashes (API keys are hashed and never stored in plaintext), webhook endpoint URLs, and audit log data (user actions, API requests, timestamps).

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service, including processing videos and generating analysis reports.
• Authenticate your identity and manage your account.
• Process payments and maintain billing records.
• For public analyses, display results on the Kinexis.AI website.
• Communicate with you about your account, transactions, and Service updates.
• Monitor and analyze usage trends to improve the Service.
• Detect and prevent fraud, abuse, and security incidents.
• Generate anonymized and aggregated data for research and Service improvement (see Section 6).
• Comply with legal obligations.

4. We Do Not Sell or Share Your Data

We do not sell, rent, trade, or otherwise share your personal information or User Content with third parties for their marketing or commercial purposes.

We share data only with the third-party service providers described in Section 5, solely as necessary to operate the Service, and we require these providers to protect your data in accordance with their respective privacy policies.

5. Third-Party Service Providers

We use the following third-party services to operate the Service. Each processes data only as necessary for its stated purpose:

• Stripe. Payment processing and subscription management. Subject to Stripe's Privacy Policy.
• Google. Analysis and report generation. Content is submitted to Google for processing.
• Cloudflare. Account security.

We also use industry-standard providers for hosting, database services, video storage and delivery, analytics, and background processing. These providers process data only as necessary to operate the Service.

6. Data Retention and Deletion

6.1 Retention

We retain your account information, video files, and analysis data for as long as your account is active or as needed to provide the Service. Enterprise audit logs are retained for the duration of the organization's subscription plus a reasonable wind-down period.

6.2 Deletion Requests

You may request deletion of your account and associated data by contacting us at privacy@kinexis.ai. Upon receiving a verified deletion request, we will delete your personal data, video files, and analysis records within thirty (30) days.

6.3 Anonymized Data

Following deletion, we may retain anonymized and aggregated data that is no longer linked to your identity. This data cannot be used to identify you and may be used for research, analytics, and Service improvement purposes.

6.4 Limitations

We cannot guarantee deletion of data that has been cached by search engines. We will make commercially reasonable efforts to remove such content upon request.

7. Data Security

We implement industry-standard technical and organizational measures to protect your data, including:

• Encryption in transit (TLS/HTTPS for all communications).
• Cryptographic hashing of passwords and API keys (never stored in plaintext).
• Database-level access controls to enforce data isolation.
• Secure session management to protect authentication tokens.
• Signature verification for all webhook communications.
• Bot detection to prevent automated abuse.

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly. If you believe a minor has provided us with personal information, please contact us at privacy@kinexis.ai.

9. Your Rights

9.1 Account Holder Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate personal information.
• Request deletion of your personal information (see Section 6.2).
• Receive a copy of your data in a portable format.
• Withdraw consent for data processing where consent is the legal basis.

To exercise any of these rights, contact us at privacy@kinexis.ai. We will respond to verified requests within thirty (30) days.

9.2 Rights of Non-User Video Subjects

If you are an individual who appears in a video analyzed through the Service but did not submit the video yourself, you have the right to request removal or redaction of your biometric data and likeness from our platform.

To submit a removal request, visit our Removal Request page or contact us directly at subjects@kinexis.ai. We will respond to verified requests within fifteen (15) business days.

10. Biometric Data Notice and Retention Schedule

10.1 What Constitutes Biometric Data

The Service uses AI to verify video authenticity and analyze behavioral patterns in video content. This process involves the collection and processing of biometric data, including:

• Facial geometry and landmark positions
• Expression patterns and behavioral signal classifications
• Expression coding and action unit classifications
• Derived emotion and credibility assessments

10.2 Consent Requirements

By submitting video content to the Service, you acknowledge and consent to the processing of biometric data contained in that content. As stated in our Terms of Service, you are solely responsible for obtaining informed written consent from all identifiable individuals whose biometric data may be processed through the Service, in compliance with any applicable biometric data privacy laws in your jurisdiction, such as the Illinois Biometric Information Privacy Act (BIPA).

10.3 Retention Period

Biometric data derived from video analysis is retained for a maximum of three (3) years from the date of creation, or until the associated analysis is deleted by the submitting user, whichever occurs first.

10.4 Destruction Protocol

Upon expiration of the retention period or upon a verified deletion request:

• Biometric data and associated analysis results are permanently destroyed from production systems within thirty (30) days.
• Encrypted backup copies containing biometric data are purged within ninety (90) days.

10.5 Annual Review

We conduct an annual review of our biometric data retention practices to ensure compliance with applicable laws and to verify that data exceeding the retention period has been properly destroyed.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the Service at least fourteen (14) days before the changes take effect. Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.

12. Contact

For questions or concerns about this Privacy Policy or our data practices, contact us at:

Web3 Studios LLC
Email: privacy@kinexis.ai