Privacy Policy

Last updated: 2026-08-06

At Kiahalat BioCraft, we are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other EU data privacy laws. This Privacy Policy describes how we collect, use, and process your data.

1. Data Controller

The data controller for this website is YVPLTD, who manages the technical cluster hosting kiahalat.eu.org. You can contact us for any privacy inquiries, data access requests, or deletion requests at privacy@yvpltd.com.

2. What Data We Collect

We process the following categories of personal data:

• AI Sandbox Inputs: Any text inputs you enter into the live AI sandbox. These inputs are processed in-memory to generate your request and are never stored or logged on our servers or by third-party API providers.
• PayPal Checkout Metadata: If you upgrade to our Premium plan, transaction records, including subscription status, email, and amount, are securely sent to PayPal. Payment transactions are governed by the PayPal Privacy Statement.
• CDN Security Logs: Cloudflare operates our Content Delivery Network (CDN). Cloudflare processes technical headers, IP addresses, and performance data to defend against attacks (such as DDoS) and ensure secure caching.

3. How We Process AI Inputs

Your inputs for the AI tool are transmitted using secure HTTPS encryption to our Cloudflare Workers backend, which proxies the request to our external text LLM provider. The data is processed statelessly in real-time, and is not stored, cached, or utilized for machine learning training.

4. Your Rights Under GDPR (Articles 12-23)

As an EU resident, you have the following rights regarding your data:

• Right of Access (Art. 15): Request a copy of your personal data.
• Right to Rectification (Art. 16): Correct inaccurate data.
• Right to Erasure / Right to be Forgotten (Art. 17): Request deletion of your data.
• Right to Restriction of Processing (Art. 18): Restrict how your data is used.
• Right to Data Portability (Art. 20): Request data in a machine-readable format.
• Right to Object (Art. 21): Object to processing of data.

To exercise these rights, please email privacy@yvpltd.com. We respond to all requests within 30 days free of charge.