Kailoo

Legal

Privacy Policy

Last updated: May 2026

1. Who we are

KAILOO is a render review platform operated from Madrid, Spain. References to 'we', 'us', or 'our' refer to KAILOO. Contact: hello@kailoo.eu.

2. Data we collect

We collect: (a) account data you provide at sign-up (name, email, studio name); (b) project data you upload (render images, client feedback, AI summaries); (c) usage data (page views, feature interactions) collected via first-party analytics; (d) billing data processed by our payment provider (Stripe) — we do not store card numbers.

3. How we use your data

We use your data to: provide and improve the KAILOO service; send transactional emails (review link notifications, weekly digest if enabled); respond to support requests; comply with legal obligations. We do not sell your data to third parties. We do not use your renders or feedback to train AI models.

4. Data storage and security

Your data is stored on servers in the European Union. We apply industry-standard encryption in transit (TLS) and at rest. Uploaded images are stored in private blob storage with access controlled by signed URLs.

5. Client review links

Client review links contain a randomly generated token. Access to a project's feedback is limited to anyone with the link. You are responsible for distributing links to the correct recipients. We do not share review link content with third parties.

6. Cookies

We use strictly necessary cookies for authentication (session tokens). We do not use advertising or tracking cookies. Our analytics are privacy-preserving and do not require cookie consent under GDPR.

7. Your rights (GDPR)

If you are in the EU, you have the right to: access your personal data; correct inaccurate data; request deletion of your account and all associated data; object to processing; port your data. To exercise these rights, email privacy@kailoo.eu.

8. Data retention

We retain your data for as long as your account is active. If you cancel, we retain data for 30 days to allow reactivation. After 30 days, data is deleted. You may request immediate deletion at any time.

9. Third-party services

We use: Stripe (payments — EU data processing agreement in place); a cloud hosting provider (EU data centres). All processors have been assessed for GDPR compliance.

10. Changes to this policy

We will notify you by email of material changes to this policy. Continued use of KAILOO after changes constitutes acceptance of the updated policy.

11. Contact

General enquiries: hello@kailoo.eu.
For privacy-related requests, data deletion, or GDPR enquiries, contact us at privacy@kailoo.eu.
KAILOO, Madrid, Spain.