Privacy policy

At Kazaku we take your privacy seriously. This policy describes how we process your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and digital rights (LOPDGDD).

• Identity: ADRIANO TECHNOLOGIES SL (NIF B05342902)
• Address: Calle Suecia 102, Portal 7, 2.º A, 28022 Madrid (Madrid), España
• Email: alvaro@kazaku.com

We process the data you provide and the data generated by your use of the service:

• Account data: email address, name (optional) and password (stored encrypted). If you choose “Continue with Google”, we receive your email and profile name from Google.
• Atelier content: the room photographs you upload, the design instructions you write and the images generated from them.
• Saved products and platform usage preferences.
• Technical data: IP address, session identifiers, device and browser type, and activity logs needed for the security and proper functioning of the service.
• Communications: the messages you send us through support or contact channels.

• Providing the service and managing your account and Atelier scenes — performance of a contract (Art. 6(1)(b) GDPR).
• Generating design proposals and images with artificial intelligence from the content you provide — performance of a contract (Art. 6(1)(b) GDPR).
• Keeping the service secure, preventing fraud and abuse, and enforcing usage limits — legitimate interest (Art. 6(1)(f) GDPR).
• Sending you marketing communications about our own products and news, only with your consent, which you may withdraw at any time — consent (Art. 6(1)(a) GDPR).
• Complying with legal obligations, in particular tax and consumer law — legal obligation (Art. 6(1)(c) GDPR).

The Atelier uses generative AI models from external providers (Google, Gemini models) to plan furnishings, generate images of your space and locate the proposed products within them. To do so, the photographs you upload and your instructions are sent to those providers, which act as service providers and process them under their business API terms, which exclude the use of your content to train their models.

We recommend not uploading photographs showing identifiable people, documents or other visible personal information. If you upload images featuring third parties, you are responsible for having their permission.

Generated images are stored in your account so you can review them, iterate on them and, if you choose, share them via a link. Anyone with that link will be able to view the shared scene.

We do not make decisions based solely on automated processing that produce legal effects on you or significantly affect you (Art. 22 GDPR).

We do not sell your personal data. We share data only with providers that render services to us and process it under our instructions:

• Google Ireland Ltd. / Google LLC — artificial-intelligence models (Gemini) and Google sign-in.
• Hetzner Online GmbH — platform hosting (Germany, EU).
• Cloudflare, Inc. — content delivery network and security.
• Resend, Inc. — transactional email delivery (account verification, password reset).
• Pydantic Services Inc. (Logfire, EU region) — technical telemetry and error diagnostics.

When you leave Kazaku for an external retailer's shop to buy a product, that retailer processes your data as an independent controller under its own privacy policy.

Our servers are located in the European Union. However, some providers (Google LLC, Cloudflare, Resend) may process data in the United States. These transfers are covered by the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission, together with supplementary measures where necessary.

• Account data and Atelier content: for as long as your account remains active. If you delete it, we will erase or anonymise your data, without prejudice to blocking it during the applicable legal limitation periods.
• Technical and security logs: for limited periods proportionate to their purpose.
• Marketing communications: until you withdraw your consent.

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to alvaro@kazaku.com and indicating the right you wish to exercise. We may ask for additional information to verify your identity.

If you consider that the processing of your data does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

We apply appropriate technical and organisational measures to protect your data: encrypted communications (TLS), encrypted password storage, access controls and hosting in European Union data centres.

The service is intended for people aged 18 or over. We do not knowingly process data of children under 14; if we detect a minor's account, we will delete it.

We may update this policy to reflect regulatory or service changes. We will publish the current version on this page and, if the changes are significant, we will notify you by reasonable means.