Privacy Policy

This Privacy Policy explains how Khyalix FZE (“KHYALIX,” “we,” “us,” or “our”), based at SRTI Park – Sharjah, UAE, collects, uses, shares, and protects personal data when you use the KHYALIX website, applications, AI tools, and related services (the “Service”).

By using the Service, you acknowledge the practices described in this Policy.

1. Information We Collect

We may collect:

• Account data: name, email address, account identifiers, preferences, and authentication or security records.
• User Content: prompts, images, videos, drawings, plans, documents, reference files, project data, settings, and generated outputs.
• Payment data: billing details, transaction identifiers, amount, currency, payment status, purchases, subscriptions, refunds, and chargebacks. Payments are processed by providers such as Stripe; KHYALIX does not directly store complete card numbers or security codes.
• Usage and technical data: IP address, browser, device, pages and features used, model selections, job status, credit usage, timestamps, diagnostics, and security logs.
• Communications: messages, support requests, and attachments you choose to send us.

User Content may contain personal data about you or others. You are responsible for having the rights and permissions required to upload and process it through the Service.

2. How We Use Information

We use information to:

• Create, authenticate, and secure accounts.
• Provide AI generation, editing, storage, project, and related features.
• Process payments, subscriptions, Credits, refunds, and billing records.
• Operate, maintain, troubleshoot, and improve the Service.
• Provide support and send essential account, security, billing, or Service communications.
• Prevent fraud, abuse, unauthorized access, and violations of our Terms.
• Comply with legal, tax, accounting, regulatory, and enforcement obligations.
• Establish, exercise, or defend legal claims.

Where applicable, we rely on performance of our contract with you, consent, legal obligations, and legitimate interests in operating and securing the Service.

3. AI Processing

To perform a generation or editing request, KHYALIX may transmit the necessary prompts, files, settings, and technical information to the third-party AI or processing provider used for that request.

Those providers may process information outside the United Arab Emirates and may temporarily retain inputs or outputs for service delivery, security, abuse prevention, or legal compliance under their applicable terms and privacy policies.

KHYALIX does not sell User Content and does not itself use private User Content to train KHYALIX-owned AI models. Outputs may be stored in your account or projects as part of the Service.

4. How We Share Information

We do not sell or rent personal data.

We may share information only as reasonably necessary with:

• AI model and processing providers used to fulfill your requests.
• Hosting, storage, database, authentication, monitoring, email, security, and support providers.
• Payment and billing providers, including Stripe.
• Professional advisers, authorities, or other parties where required to comply with law, protect rights or safety, investigate fraud or abuse, or enforce our agreements.
• A buyer, successor, or related party in connection with a merger, restructuring, financing, or sale of all or part of the business.

Service providers process information under their own legal and contractual obligations.

5. International Transfers

KHYALIX is based in the United Arab Emirates, but some service providers operate in other countries. Personal data and User Content may therefore be processed or stored outside your country of residence.

Where required by law, we take reasonable steps to use appropriate safeguards for international transfers. Laws in the receiving country may differ from those in your country.

6. Retention and Deletion

We retain information only for as long as reasonably necessary to provide and secure the Service, maintain business records, comply with law, resolve disputes, and enforce agreements.

Account and project data may remain while your account is active. Payment, tax, fraud-prevention, audit, and legal records may be retained for longer where required. Deleted information may remain temporarily in backups, logs, caches, or provider systems before removal.

The Service is not your sole permanent archive. You should download important files and outputs.

You may delete available project assets through the Service. To request account or personal-data deletion, email contact@khyalix.ai from the address associated with your account. We may retain information where required by law or necessary for security, fraud prevention, disputes, or legal claims.

7. Cookies and Communications

We may use cookies and similar technologies to keep you signed in, remember preferences, secure accounts, prevent fraud, support payments, and diagnose performance. Disabling essential cookies may prevent parts of the Service from working.

If non-essential analytics, advertising, or marketing cookies are introduced, we will provide any notice or consent choice required by law.

We may send essential account, billing, security, support, and Service messages. Marketing messages, where used, will include a method to unsubscribe, but you may still receive essential operational communications.

8. Security

We use reasonable technical and organizational safeguards designed to protect personal data. However, no internet transmission, storage system, or third-party service is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your account credentials and promptly reporting suspected unauthorized access.

9. Your Privacy Rights

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection, withdrawal of consent, or a portable copy of eligible personal data, and to complain to an appropriate authority.

To submit a request, email contact@khyalix.ai. We may verify your identity and may limit a request where permitted or required by law, including to protect others or retain necessary legal, payment, security, or fraud-prevention records.

10. Age Requirement

The Service is intended only for users aged 18 or older. We do not knowingly collect personal data from anyone under 18. If we become aware of such data, we may delete the related account and information.

11. Changes to This Policy

We may update this Policy to reflect changes in the Service, providers, or legal requirements. We will update the “Last Updated” date and provide additional notice where required.

12. Contact

For privacy questions or requests, contact: