Privacy Policy

Who we are

Refresh Kiwi is operated by CJS Global LTD, a company registered in England and Wales under company number 10664657. Our registered office is 8 Henfron, Energlyn, Caerphilly, CF83 2NU, United Kingdom.

We are not VAT registered. You can contact us about this policy or your personal information at info@refresh.kiwi.

What this policy covers

This policy explains how we handle personal information when you visit our website, create an account, ask us to refresh a website, use generated previews, subscribe to Pro, contact support, or connect a custom domain.

Our service is mainly intended for businesses, but individuals may also use it. If you use Refresh Kiwi on behalf of a business, you should make sure you are authorised to share any relevant information with us.

Information we collect

• Account details, such as your name, email address, password hash, plan, subscription status, and session information.
• Website information you provide, including source URLs, prompts, uploaded images, generated website files, preview slugs, custom domains, and DNS connection status.
• Usage and technical information, such as IP address, browser and device information, approximate location derived from technical data, log data, error information, and interactions with our website.
• Payment and billing information processed by Stripe, such as customer identifiers, subscription identifiers, checkout status, and payment events. We do not store full card numbers.
• Communications you send to us, including support requests, feedback, and legal or privacy enquiries.
• Analytics and campaign measurement information collected through Google Analytics and Meta Pixel, subject to your browser settings and any consent controls we make available.

How we use information

• To provide, operate, secure, and improve Refresh Kiwi.
• To create, host, edit, preview, publish, and support generated websites.
• To create and manage accounts, sessions, subscriptions, billing, cancellations, and service limits.
• To process AI-assisted website refreshes, edits, page generation, image localisation, and image remixing where enabled.
• To connect and verify custom domains through hosting providers.
• To prevent abuse, enforce our terms, troubleshoot errors, and maintain service security.
• To analyse aggregate usage and understand how people use the service.
• To respond to enquiries and send service-related messages.

AI processing and model training

We use AI tools to provide the service, including to generate, edit, and remix website content. We do not use your submitted website URLs, prompts, uploaded images, or generated website content to train Refresh Kiwi models.

Some third-party AI providers may process inputs and outputs on our behalf to provide the service. Their handling of that data is governed by our agreements with them and their applicable service terms.

Our lawful bases

• Contract: to provide the service you ask for, including accounts, previews, publishing, subscriptions, and support.
• Legitimate interests: to secure the service, prevent misuse, improve reliability, analyse usage, and develop business operations.
• Legal obligation: to keep records required for tax, accounting, compliance, dispute handling, or law enforcement.
• Consent: where required for optional cookies, analytics, marketing communications, or similar technologies.

Third-party processors

We use trusted third-party providers to run Refresh Kiwi. These may include Cursor / Anysphere for AI agent generation, Stripe for payments, Render for hosting, database, and custom domain infrastructure, GitHub for generated site repository storage, OpenAI for image remixing where enabled, Google Analytics for analytics, and Meta for campaign measurement.

These providers may process personal information in the United Kingdom, the European Economic Area, the United States, or other countries. Where required, we rely on appropriate safeguards such as contractual protections or approved transfer mechanisms.

Generated websites and public content

Generated previews may be accessible to anyone with the preview link unless access controls are added. Published websites and connected custom domains are public by nature.

You should not submit private, confidential, or sensitive personal information in prompts, uploaded images, or website content unless it is necessary and you have the right to do so.

How long we keep information

We keep account, website, subscription, and support information while your account is active or while needed to provide the service. If you ask us to delete your account or data, we will delete or anonymise it where reasonably possible, subject to legal, security, backup, fraud-prevention, dispute, and accounting retention requirements.

Unclaimed or free generated previews may expire or be removed after 7 days. Backups and logs may remain for a limited period before deletion in the ordinary course of business.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. You may also have the right to complain to a data protection authority. To exercise your rights, contact info@refresh.kiwi.

If you are in the UK, you can also contact the Information Commissioner's Office. We would appreciate the chance to resolve your concern first.

Security

We use reasonable technical and organisational measures to protect personal information, including hashed passwords, hashed session tokens, access controls, and reputable infrastructure providers. No online service can be guaranteed to be completely secure.

Changes to this policy

We may update this policy from time to time. If changes are significant, we will take reasonable steps to tell users, such as updating the date above or providing an in-product notice.