Privacy Policy

Last updated: September 2026

1. Introduction

KiiTOS ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered video generation platform.

2. Information We Collect

Account Information

Email address, name, and billing information when you register for an account.

Content You Upload

Images, videos, audio files, scripts, and text prompts you submit to the Service. This may include faces, voices, and likenesses of individuals.

Generated Content

Videos, images, and audio generated through the Service, along with associated metadata (prompts, settings, timestamps).

Usage Data

Log data, device information, IP addresses, browser type, and interaction patterns with the Service.

3. How We Use Your Information

  • To provide, maintain, and improve the Service
  • To process video generation requests
  • To process payments and manage subscriptions
  • To detect and prevent fraud, abuse, and security incidents
  • To comply with legal obligations
  • To communicate with you about updates and support

4. AI Training Data

We may use aggregated, anonymised data to improve our AI models. We do not use your uploaded faces, voices, or personal content to train AI models without explicit consent. You may opt out of data usage for model improvement at any time.

5. Biometric Data

The Service may process biometric data (facial geometry, voice prints) as part of AI video generation. We process this data only to fulfil your generation request and do not retain biometric data beyond the period necessary to complete the requested operation, unless required by law.

6. Data Sharing

We share information with:

  • AI service providers (HeyGen, ElevenLabs) solely to fulfil generation requests
  • Payment processors (Stripe) to handle transactions
  • Cloud infrastructure providers to host the Service
  • Law enforcement when required by law

7. Data Security

We implement industry-standard security measures including encryption at rest and in transit, access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure.

8. Data Retention

We retain your account information for as long as your account is active. Generated videos are stored for 90 days unless you delete them earlier. You may request deletion of all your data at any time.

9. Your Rights

KiiTOS is operated by a company incorporated in Hong Kong. Regardless of your location, we honour the following rights in respect of your personal data:

  • Access, correct, or delete your personal data
  • Object to or restrict processing of your data
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority

10. PDPO Compliance (Hong Kong)

KiiTOS is a company incorporated in Hong Kong. We process personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong, including the six Data Protection Principles: purpose limitation, accuracy and retention, use limitation, data security, transparency, and data subject access and correction.

10a. GDPR Compliance

For users in the European Economic Area, we process personal data in accordance with the General Data Protection Regulation (GDPR). Our legal bases for processing include consent, contractual necessity, and legitimate interests.

10b. CCPA Compliance

For California residents, we comply with the California Consumer Privacy Act (CCPA). You have the right to know, delete, and opt out of the sale of personal information. We do not sell personal information.

12. Cookies

We use essential cookies to operate the Service and analytics cookies to understand usage patterns. You may control cookie preferences through your browser settings.

13. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect information from children. If we learn that we have collected personal data from a child, we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and updating the "Last updated" date.

15. Contact

For privacy-related inquiries, contact us at privacy@kiitos.world. For matters under the PDPO (Cap. 486), you may also contact the Privacy Commissioner for Electronic Health and Digital Data (Hong Kong) as the supervisory authority.