Cookie & Similar Technologies Policy

Technologies We Use

Strictly Necessary Cookies and Technologies

These cookies and technologies are essential for our website and platform to function and cannot be disabled. They enable:

• Secure login and authentication
• Account management
• Session continuity
• Payment processing
• Content access and platform security
• Load balancing and traffic routing
• Prevention of fraudulent or abusive activity

We rely on legitimate interests or contract necessity to use these technologies. Because they are strictly necessary, they are set automatically when you access the site.

Examples include:

• session_id – Maintains your active session
• csrf_token – Protects against CSRF attacks
• CDN and caching identifiers
• LocalStorage keys needed to deliver AI chat or content functionality

Analytics and Performance Cookies

With your consent, we use analytics cookies and similar technologies to understand how visitors use our Services, diagnose technical issues, and improve functionality.

We use Google Analytics with IP anonymization enabled. Google Analytics may collect:

• Device information
• Browser type
• Interaction data (e.g., pages visited, features used)
• General location (city/region—not precise location)

We configure Google Analytics so that:

• Data is not used by Google for advertising or cross-site tracking
• Data is not combined with data from other Google services
• Data retention is limited to no more than 13 months
• No personally identifiable information is transmitted to Google

You may opt out at any time through our consent tool or by installing Google's browser add-on: https://tools.google.com/dlpage/gaoptout.

Functionality Cookies

These cookies allow us to remember your preferences and personalize your experience during subsequent visits, such as:

• Display settings
• Volume or mute preferences
• Preferred theme or layout
• Previously viewed or generated AI outputs (non-identifying)

These do not track your behavior across third-party websites and do not identify you over time. They are used only with your consent.

Personalization & AI Interaction Technologies

To support interactive AI experiences, we may use cookies or similar technologies—including LocalStorage and session tokens—to store:

• Chat continuity information
• AI personalization preferences (non-sensitive)
• Interaction history needed to deliver session-level memory
• Safety settings (e.g., content filters or consent sliders)

We do not use these technologies to infer or store sensitive categories of personal data (e.g., sexual orientation, health, or political opinions). Any personalization is limited to functional session continuity and user-selected preferences.

These technologies are used only with your consent, except where required for the platform to function.

Third-Party Cookies and Technologies

Some third parties may use cookies or similar technologies to provide services on our behalf—such as analytics, security monitoring, or performance measurement.

Third-party providers may include:

• Google Analytics (analytics/performance)
• Cloudflare or similar CDN providers (strictly necessary)
• Payment processors (strictly necessary for transaction security)

We do not permit third parties to use cookies for advertising, behavioral profiling, or retargeting on our platform.

Expiration periods are set by each provider. More details are available in each provider's policy.

Detailed List of Cookies & Technologies

A complete, up-to-date table of all first-party and third-party cookies and similar technologies—including names, providers, purposes, and expiration periods—is available at any time through our Cookie Consent Tool, accessible via the footer of our website.

This table forms part of this Policy.

Legal Bases for Processing

Under the GDPR:

• Strictly necessary technologies are used on the legal basis of:
  • contract necessity, where required to provide the Services you request; or
  • our legitimate interests in maintaining the security, integrity, and functionality of our platform.
• All other cookies and similar technologies are used only with your prior consent, which you may withdraw at any time.

Cross-Border Data Transfers

Some providers may process personal data in countries outside your own, including the United States, where data protection standards may differ. When required, we implement safeguards such as:

• Standard Contractual Clauses
• Data Processing Agreements
• IP anonymization for analytics
• Encryption and minimization measures

By consenting to non-essential cookies, you also consent to the associated international data transfers.

Your Choices and Consent Management

You may manage your cookie and tracking preferences at any time using our Cookie Consent Tool, where you can:

• Grant or withdraw consent by category
• Review the list of technologies in use
• Update settings without affecting your access to the tool
• Withdraw consent as easily as you granted it

Most browsers also allow you to block or delete cookies. Blocking strictly necessary technologies may impair the functionality of our Services, including login, chat continuity, payment access, and generation features.

Technologies Used for Users Under 18

Our Services are intended for adults. We do not knowingly place non-essential cookies or identifiers on the devices of individuals under 18. If we learn that that data has been collected, we will delete it promptly.

Changes to This Policy

We may update this Policy from time to time. If we make material changes to how we use cookies or similar technologies, we will:

• Post a clear notice on our website, and
• Request your renewed consent when legally required.

Please review this Policy periodically for updates.

Contact Us

For questions, comments, or requests regarding this Policy, please contact: privacy@kalon.ai.