Privacy Policy

Introduction

At KiKAI Works ("we," "us," "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your information when you visit our website (kikaiworks.com), create an account, purchase Kinkai credits, place orders, upload files, communicate with our team, or use any of our engineering design and automation services.

1. Who We Are

KiKAI Works is an online engineering design platform delivering industrial-grade mechanical, structural, electrical, pneumatic, hydraulic, and automation engineering packages (blueprints, 3D files, simulations, reports, digital twins, etc.). We are currently operated by an individual and will soon incorporate as **KiKAI Works Pte. Ltd.** in Singapore.

Data Controller:
KiKAI Works (pre-incorporation project) Email: privacy@kikaiworks.com Governing law: Republic of Singapore

2. Information We Collect

2.1 Information You Provide

• Account data: name (or company name), email address, password, billing address, country
• Payment information (processed securely by Stripe – we never store full card details)
• Kinkai credit purchase and balance history
• Project specifications, uploaded reference files, photos, drawings, messages/chat with engineers, revision requests
• Any other content you voluntarily submit

2.2 Automatically Collected Information

• IP address and approximate location
• Browser type, operating system, device identifiers
• Usage data (pages visited, actions taken, time spent)
• Cookies and similar technologies (see Section 9)

2.3 Information from Third Parties

Transaction data from Stripe. Future subcontractors (e.g., fabricators or installers) only when you explicitly opt in to physical fabrication services.

We do **not** collect sensitive personal data unless you voluntarily include it in project files or messages.

3. How We Use Your Information

We use your data to:

• Create and manage your account and Kinkai balance
• Process payments and deliver engineering files
• Communicate about projects (including recorded video calls and chat)
• Provide customer support
• Improve our platform and services
• Prevent fraud and enforce our Terms of Use
• Comply with Singapore and international legal obligations (tax, export controls, accounting)

4. Legal Bases (for GDPR, PDPA, and similar laws)

• Performance of contract (delivering your project or Kinkai services)
• Legitimate interests (security, fraud prevention, service improvement)
• Legal obligations (tax and accounting records)
• Consent (only when explicitly given)

5. Data Sharing

We do **not** sell or rent your personal data.

We share only with:

• Stripe (payment processing)
• Amazon Web Services – AWS (hosting/storage in the United States – S3, SES, etc.)
• Subcontracted engineers/fabricators (only project-related files, and only when required)
• Legal authorities when required by law

6. International Data Transfers

Your data is primarily stored in the United States (AWS). We use Standard Contractual Clauses and other approved safeguards to protect transfers outside Singapore, the EU, UK, or other strict jurisdictions.

7. Data Retention

• Account & contact details: deleted or anonymised within 30 days of account closure
• Project files, chat history, quotations, invoices, deliverables: retained indefinitely for legal, tax, liability, and quality purposes
• Kinkai transaction records: retained for 7 years (Singapore tax law)
• You cannot delete your account while active projects exist or if required by law

8. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data
• Restrict or object to processing
• Data portability
• Withdraw consent
• Lodge a complaint with the Personal Data Protection Commission (PDPC) Singapore or your local authority

Contact: privacy@kikaiworks.com – we respond within 30 days (or sooner where required).

9. Cookies & Tracking

We use:

• Essential cookies (login, cart, security)
• Functional & anonymised analytics cookies (self-hosted Matomo)

You can manage cookies in your browser. See our separate Cookie Policy for details.

10. Security

We implement industry-standard protections:

• Encryption in transit (TLS) and at rest
• Secure AWS infrastructure
• Strict access controls
• Regular security reviews

11. Age Requirement

Our Services are only for individuals aged 18 and above. We do not knowingly collect data from persons under 18.

12. Future Services

This Policy also applies to any future services we may offer (fabrication outsourcing, installation, digital twins, maintenance scheduling, etc.).

13. Changes to This Policy

We may update this Policy at any time. Material changes will be notified by email or prominent notice on the Website.