Privacy Policy

Last updated: May 23, 2025

Welcome to KupuGPT! This Privacy Policy explains how Hexa LLC ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our KupuGPT website, services, and AI-powered knowledge management platform (collectively, the "Service"). Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

We are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. Your data stays yours, and we are transparent about how we use it.

1. Information We Collect

We may collect information about you in a variety of ways. The information we may collect via the Service includes:

• Personal Data: Personally identifiable information, such as your name, email address, and password or other authentication information (e.g., if signing in via Google, we receive information as permitted by Google's policies and your privacy settings), that you voluntarily give to us when you register for an Account or when you choose to participate in various activities related to the Service.
• User Content: Any documents (e.g., PDFs, Word documents, PowerPoint presentations), text, images, charts, audio files (e.g., MP3s), video files (e.g., MP4s), and other data or information you upload, submit, or otherwise make available to the Service for processing and analysis ("User Content").
• Usage Data: Information that your browser or device sends automatically whenever you visit or use our Service. This may include information such as your computer's Internet Protocol (IP) address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data related to your interaction with our Service features.
• Cookies and Similar Technologies: We may use cookies, beacons, tags, and scripts to collect and track information and to improve and analyze our Service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
• Communications: If you contact us directly (e.g., via email for support), we may receive additional information about you such as your name, email address, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

2. How We Use Your Information

Having accurate information permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Service to:

• Create and manage your Account.
• Provide, operate, maintain, and improve our Service, including analyzing your User Content to generate insights, summaries, and answers as requested by you.
• Process your User Content according to your instructions and solely for the purpose of providing the Service to you.
• Communicate with you, including responding to your comments, questions, and requests; providing customer service and support; and sending you technical notices, updates, security alerts, and administrative messages.
• Monitor and analyze usage and trends to improve your experience with the Service and develop new features (this analysis is performed on aggregated and anonymized Usage Data, not your specific User Content for AI model training).
• Ensure the security of our Service, prevent fraud and abuse, and enforce our Terms of Service.
• Comply with legal obligations, court orders, or other binding legal processes.

Our Commitment to Your Content Privacy (Zero Data Training):
We want to be unequivocally clear: Your User Content is never used to train our general AI models or the AI models of any third parties. The analysis of your User Content is performed solely to provide the KupuGPT Service directly to you and for your benefit. Your data stays yours, and its confidentiality for AI training purposes is paramount.

3. Data Security and Protection

We use administrative, technical, and physical security measures to help protect your personal information and User Content. These measures include:

• Encryption: Your data, including User Content, is encrypted both in transit (e.g., using TLS/SSL) and at rest using industry-standard encryption protocols.
• Access Controls: We implement strict access controls and technical safeguards to ensure that access to your information is limited to authorized personnel who need such access to perform their job duties in providing the Service to you.
• Regular Security Assessments: We conduct regular security assessments and monitor our systems for potential vulnerabilities and attacks.
• Zero Training Policy Reinforcement: Our technical and organizational measures are designed to uphold our commitment that your User Content is not used for training our AI models.

While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any information disclosed online is vulnerable to interception and misuse by unauthorized parties.

4. Data Sharing and Disclosure

We do not sell, trade, rent, or otherwise share your personal information or User Content with third parties for their marketing purposes. We may share information we have collected about you in certain situations as follows:

• With Service Providers: We may share your information with trusted third-party vendors, consultants, and other service providers who perform services on our behalf or assist us in operating our Service (e.g., cloud hosting providers, data analytics services (for Usage Data, not User Content for AI training), customer support tools, payment processors if applicable). These third parties are contractually obligated to maintain the confidentiality of your information and are restricted from using your personal information for any purpose other than to provide services for us.
• By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.
• With Your Consent: We may disclose your personal information for any other purpose with your consent.

5. Your Rights and Choices

You have certain rights regarding the personal information we hold about you. Depending on your location and applicable law, these rights may include:

• Access: The right to request access to the personal information we hold about you and to receive a copy of that information.
• Correction (Rectification): The right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Deletion (Erasure): The right to request that we delete your personal information, subject to certain exceptions (e.g., where we are legally required to retain data). You can delete your User Content and your Account through the Service.
• Data Portability: The right to request that we provide you with your personal information in a structured, commonly used, and machine-readable format, and the right to transmit that information to another controller.
• Withdrawal of Consent: If we are processing your personal information based on your consent, you have the right to withdraw your consent at any time.
• Objection to Processing: The right to object to our processing of your personal information in certain circumstances.
• Restriction of Processing: The right to request that we restrict the processing of your personal information in certain circumstances.

To exercise these rights, please contact us at [email protected]. You may also be able to manage some of your information directly through your Account settings on the Service. We will respond to your request within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing your request.

6. Data Retention

We retain your personal information and User Content for as long as your Account is active or as needed to provide you with the Service and fulfill the purposes outlined in this Privacy Policy. You can delete your User Content at any time through your Account. If you delete your Account, we will delete your personal information and User Content in accordance with our data retention policies and applicable law, though we may retain certain information if required by law or for legitimate business purposes (such as for backups, fraud prevention, dispute resolution, or enforcing our agreements), but not for AI model training.

7. International Data Transfers

Your information, including personal data and User Content, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data and User Content, to the United States and process it there. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and that appropriate safeguards are in place to protect your information during such transfers.

8. Children's Privacy

Our Service is not directed to individuals under the age of 13 (or a higher age threshold if required by applicable law in your jurisdiction). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you become aware that your child has provided us with personal information without your consent, please contact us at [email protected]. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to remove that information from our servers.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will post any Privacy Policy changes on this page and, if the changes are significant, we will provide a more prominent notice (such as by adding a notice on our Service's homepage, or by sending you an email notification). We will also update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

10. Contact Us

If you have any questions, concerns, or comments about this Privacy Policy or our privacy practices, please contact us at:

For privacy-specific inquiries: [email protected]

For general inquiries about KupuGPT: [email protected]