Privacy Policy

This policy is for transparency and does not replace advice from qualified legal counsel.

This Privacy Policy explains how KIRELAY collects, uses, discloses, and protects personal information when you use the website, applications, and related services.

It also describes privacy controls available in account settings, including data export, account deletion, analytics opt-out, and Do Not Sell or Share preferences.

We collect only the information needed to operate, secure, improve, and support the service. The exact information depends on how you use the service.

Where required by law, we rely on contract performance, legitimate interests, legal obligations, or your consent.

• Operate and provide the service Create and manage accounts, authenticate sessions, display stories and relay contributions, deliver messages, operate profile visibility settings, and enable interactions between users.
• Maintain safety and integrity Detect, prevent, investigate, and address spam, fraud, abuse, security incidents, policy violations, blocked users, reports, moderation decisions, and repeat infringement.
• Improve the service Analyze aggregate usage trends, debug reliability, measure feature performance, develop new features, and test user experience.
• Communicate with you Send service-related notices, security alerts, policy update notices, report outcomes, support responses, and other communications where permitted.
• Comply with legal obligations Respond to lawful requests, process privacy and DMCA requests, preserve audit records, meet record-keeping requirements, enforce terms, and defend legal claims.

We use cookies, local storage, session storage, and comparable tools for authentication, security, user preferences, legal document display preferences, device recognition, analytics preferences, and product measurement.

Product analytics may use PostHog or Google Analytics where enabled. Error and performance monitoring may use Sentry, including session replay sampling where enabled. We configure telemetry to avoid default PII collection and redact sensitive request data where practical.

You can use account privacy settings to opt out of product analytics and to submit Do Not Sell or Share preferences. If your browser sends a Global Privacy Control signal, we treat it as an opt-out signal for sale or sharing where required by applicable law.

Your browser may allow you to refuse or delete cookies and storage. Some authentication, security, and preference features may not function properly afterward.

We do not sell personal information for money. We also do not knowingly sell or share personal information of users under 16.

If a data disclosure is considered a "sale" or "sharing" under California law, you may opt out through the Do Not Sell or Share setting, Global Privacy Control, or the contact methods below.

• With service providers Trusted providers for authentication, hosting, backend APIs, analytics, error monitoring, security, anti-abuse, email delivery, customer support, and infrastructure operations, subject to confidentiality and data protection obligations.
• For legal reasons When reasonably necessary to comply with law, process DMCA or other rights complaints, enforce our policies, respond to lawful requests, or protect rights, property, safety, and security.
• Business transfers If we are involved in a merger, acquisition, reorganization, or sale of assets, subject to applicable laws.
• With your consent For other purposes at your direction or with explicit approval.
• Public and collaborative features Public profile information, stories, relay contributions, comments, and other content you choose to publish may be visible to other users according to your settings and the feature context.

We retain personal information only as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law.

Account data is generally retained while your account is active. User content may remain available while published or as needed to preserve collaborative story continuity, subject to deletion rights and applicable exceptions.

Security logs, moderation records, privacy requests, DMCA records, audit logs, and backup copies may be retained for longer periods when needed for safety, compliance, dispute resolution, repeat infringer tracking, or legal obligations.

Aggregated, de-identified, or anonymized data may be retained for longer periods when it no longer reasonably identifies you.

Reasonable administrative, technical, and physical safeguards help protect information from unauthorized access, disclosure, or loss.

No method of transmission or storage is completely secure, so absolute security cannot be guaranteed.

The service is not directed to children under 13. Users must confirm they are 13 or older before using protected features; we store only an age confirmation timestamp, not a birthdate.

We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information, contact us so we can take appropriate action.

If you are under the age of majority in your jurisdiction, you may need permission from a parent or legal guardian to use the service.

Information may be transferred to, stored, and processed in countries with different data protection laws than your own.

Where required, we implement appropriate safeguards for such transfers.

We may update this policy and change the Last updated date, with additional notice where appropriate.

Material updates may require you to accept a new policy version before continuing to use protected features.

• Email legal@kirelay.com