Privacy policy

Who is responsible?

Klein Kabaal Labs (Pty) Ltd, based in Pretoria, South Africa, operates this website and its brand studio. For privacy enquiries, contact hello@kleinkabaal.co.za. This notice covers this site, not the separate apps and external websites we link to.

What we process, and when

• Browsing: our hosting and security providers process technical request information, such as IP addresses, browser details and request times, to deliver and protect the site.
• Filling in the brief: answers and selected files remain in the current browser session until you request AI generation or choose to email us. Reloading or leaving the page resets the form. Files selected for preview are not uploaded or read by AI.
• Using AI: when you request names, a brand concept, refinements or a reel storyboard, relevant business and creative information is sent through our server to Anthropic (Claude). Optional artwork generation sends the relevant creative brief to OpenAI. This can include your business name, description, service area, services, preferences, feedback and previous generated direction. Dedicated contact, address, testimonial, link and file fields are excluded from the brand request. Anything you type into creative free-text fields can still be sent: please leave out sensitive or confidential information.
• Generation records: we keep access-code hashes, request identifiers, timestamps, outcomes, model and usage metadata to manage allowances, costs and abuse. Generated artwork is stored in a private image library with associated records; the current implementation uses your invite code to control access. Keep it private.
• Launch packs: accepting a brand direction can start the disclosed image and storyboard requests. We store an invitation-protected storyboard and a fingerprint of its inputs to reuse matching results and prevent duplicate charges. The fingerprint is not the original brief. Website captures, optional contact details, WhatsApp cards and MP4 renders stay on your device. Asset descriptions, not screenshot pixels or uploaded files, are sent to the storyboard model. Your optional contact fields appear in outputs only when you choose to include them; creative free-text can still contain information you type yourself.
• Contacting us: if you email a brief or enquiry, we receive the message, contact details and attachments you choose to send. Downloading a brief does not automatically email it or submit a sales enquiry.

Why we use it

We use information to provide the service you request, answer enquiries, prepare proposals, keep the service secure and manage its operation. Depending on the activity, processing is based on your consent, steps towards or performance of an agreement, legal obligations, or legitimate interests such as preventing abuse. Providing a brief is voluntary; without the required business details we cannot generate a useful concept. We do not sell your information or automatically subscribe studio users to marketing.

Service providers and international processing

We use Anthropic for text and creative direction, OpenAI for optional image generation, Sites and Cloudflare for hosting, security and storage, and Microsoft 365 for email. Information may be processed outside South Africa. These providers have their own processing terms and retention practices; we do not promise zero provider retention. Do not submit customer records, passwords, identity documents, financial records or children’s information to the studio.

Cookies and measurement

The studio does not currently set advertising cookies, run session replay or send events to PostHog. It uses a temporary journey identifier and server-side usage records to associate generation attempts. Hosting and security services may use essential technical storage or cookies. If optional tracking is introduced, we will update this notice and provide any required choice before enabling it.

Storage and security

Form answers are not saved as a customer account. Generated artwork and usage records persist on our server; they are not automatically removed when you close the page or when an invite expires. Cached launch storyboards become inaccessible after seven days and are cleared when an expired record is next requested; this is not a scheduled deletion guarantee. Minimal request receipts remain to prevent automatic repeat billing. Contact us to request deletion. We retain records only as needed for the service, security, dispute handling or legal requirements, and assess deletion requests against those purposes. Provider logs and backups may have separate retention periods. Access controls, encrypted connections and server-held API secrets reduce risk, but no internet service is risk-free.

Your choices and rights

You may ask to access or correct information, request deletion where applicable, object to processing, or withdraw consent for future consent-based processing. Email us using the privacy contact above; we may need to verify your identity proportionately. For studio records, provide a generation identifier if available—never send a password or your full invite code. Withdrawal does not undo lawful earlier processing.

You may also complain to South Africa’s Information Regulator. We will update this notice when the service changes, and highlight material changes before affected new processing.