Privacy Policy

1. Overview

kyuu ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our web-based process simulation platform at kyuu.pro.

We operate in compliance with the EU General Data Protection Regulation (GDPR) and German data protection laws (BDSG).

2. Data Controller

The data controller responsible for data processing on this website is:

kyuu
Hamburg, Germany
Email: privacy@kyuu.pro

3. What Data We Collect

3.1 Account Data

When you create an account, we collect:

• Name and email address
• Password (stored as a cryptographic hash, never in plaintext)
• Billing information (processed by Stripe; we do not store credit card numbers)

3.2 Usage Data

We collect anonymized usage data to improve our service:

• Pages visited and features used
• Session duration and frequency
• Browser type and device information

3.3 Simulation Data

Your simulation projects, flowsheets, and results are encrypted end-to-end. We cannot access, read, or analyze this data. Only you hold the decryption keys.

4. How We Use Your Data

We use your data exclusively to:

• Provide and maintain the kyuu service
• Process payments via Stripe
• Send essential service communications (account verification, security alerts)
• Improve our platform based on anonymized usage patterns

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Data Storage & Security

All data is stored on servers located in the European Union. We employ:

• End-to-end encryption for all simulation data
• TLS 1.3 for data in transit
• AES-256 encryption for data at rest
• Zero-access architecture — our team cannot read your project data

6. Third-Party Processors

We use the following third-party processors, all GDPR-compliant:

• Stripe — Payment processing
• Hosting provider — EU-based cloud infrastructure

7. Your Rights

Under the GDPR, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate data
• Erasure — Request deletion of your data ("right to be forgotten")
• Portability — Receive your data in a structured, machine-readable format
• Objection — Object to specific types of processing
• Restriction — Request restricted processing of your data

To exercise any of these rights, contact us at privacy@kyuu.pro.

8. Cookies

We use only essential cookies required for the service to function (authentication, session management). We do not use tracking cookies or third-party advertising cookies.

9. Data Retention

We retain your account data for as long as your account is active. When you delete your account, all personal data and simulation data are permanently deleted within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform. The "Last updated" date at the top indicates the latest revision.

11. Contact

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: privacy@kyuu.pro