Privacy Policy

Effective Date: March 1, 2026

Last Updated: April 10, 2026

This Privacy Policy explains how Knova Inc. (“tapi,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use the tapi.ai website, mobile applications, APIs, and related services (collectively, the “Service”). This Policy forms part of our Terms of Service.

If you do not agree with this Policy, please do not use the Service.

1. Scope

This Policy applies to personal information we process in connection with the Service. It does not apply to third-party websites, products, or services, which are governed by their own privacy policies.

2. Information We Collect

We collect the following categories of information:

2.1 Information You Provide

• Account information: name, email address, username, password, profile photo, and similar registration details.
• Content and inputs: text prompts, images, audio, video, files, code, remixes, and other material you submit, generate, share, or interact with on the Service (“User Content”), including Space Apps and similar creations.
• Communications: messages you send to us (for example, support requests, feedback, and survey responses).
• Payment information: billing address, payment card or bank details, and transaction history. Payment card details are processed by our payment processors and are not stored on our servers.
• Verification and parental-consent information: information provided to verify your identity, age, or a parent’s or guardian’s consent where required.

2.2 Information Collected Automatically

• Device and technical information: IP address, device type, operating system, browser type, language, mobile network information, and unique device identifiers.
• Usage information: pages viewed, features used, actions taken, referring URLs, timestamps, session duration, and interactions with Space Apps and other content.
• Location information: approximate location derived from your IP address. We do not collect precise geolocation unless you enable it and grant permission.
• Cookies and similar technologies: see Section 6.

2.3 Information from Third Parties

• Single sign-on and social login: if you sign in using a third-party service (e.g., Google or Apple), we receive basic profile information as authorized by you and that provider.
• Channel partners and B2B customers: if your organization provides the Service to you, we may receive your business contact details and usage information from that organization.
• Service providers and analytics partners: information that helps us operate, secure, measure, and improve the Service.
• Public sources and advertising partners: limited information used for fraud prevention, attribution, and marketing where permitted by law.

2.4 Sensitive Information

We do not ask for sensitive personal information (such as government ID numbers, precise geolocation, or information about health, race, religion, or sexual orientation) as a normal part of the Service. If you choose to include sensitive information in your User Content, you do so voluntarily and at your own risk.

3. How We Use Information

We use personal information to:

1. provide, maintain, and operate the Service, including authenticating you and processing transactions;
2. generate, store, and display User Content and AI outputs you create or interact with;
3. personalize features, recommendations, and content;
4. communicate with you about updates, security alerts, administrative messages, and, with your consent where required, marketing;
5. measure and analyze performance, usage, and trends;
6. develop, test, and improve the Service, including new features and AI models (see Section 4);
7. detect, investigate, and prevent fraud, abuse, security incidents, and violations of our policies or law;
8. comply with legal obligations and enforce our Terms of Service; and
9. for other purposes disclosed at the time of collection or with your consent.

We process personal information based on your consent, the performance of our contract with you, our legitimate interests (such as operating and securing the Service), and compliance with legal obligations.

4. AI and Machine Learning

The Service uses AI and machine-learning models, including both tapi’s and third-party providers’ models, to generate outputs from inputs you supply.

• Improving our Service: we may use inputs, outputs, and usage data to operate, secure, debug, evaluate, and improve the Service, including to train and fine-tune models.
• Your controls: where we offer a setting to exclude your content from model training, your choice in that setting will control. By default, content processed through our B2B offerings is not used to train our general-purpose models.
• Third-party models: inputs and outputs may be processed by third-party model providers under contracts that restrict their use of your data to providing the model service to us.
• Automated processing: the Service generates outputs through automated means. These outputs are probabilistic and are not a substitute for professional advice. We do not use personal information to make decisions that produce legal or similarly significant effects about you.

5. How We Share Information

We share personal information in the following circumstances:

• With other users: User Content you choose to share publicly or with specific users is visible to those users according to the sharing settings you select. Your profile information may also be visible to other users.
• Service providers: with vendors that perform services on our behalf, such as cloud hosting, AI model inference, analytics, customer support, email delivery, payment processing, and fraud prevention, under contracts that limit their use of your information.
• B2B customers and channel partners: if you access the Service through an organization or partner, we may share relevant information with that organization or partner.
• Corporate transactions: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to customary confidentiality protections.
• Legal and safety: where we believe in good faith that disclosure is necessary to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, or safety of tapi, our users, or others.
• With your consent: in other cases where you direct or consent to the sharing.

We do not sell personal information for money. Some of our advertising and analytics practices may be considered “selling” or “sharing” under certain U.S. state privacy laws; see Section 9 for how to opt out.

6. Cookies and Similar Technologies

We and our service providers use cookies, SDKs, pixels, and similar technologies to operate the Service, remember your preferences, authenticate you, measure performance, and support marketing and attribution. You can control cookies through your browser settings and, where available, through an in-product preference center. Some features may not function properly if you disable cookies.

We honor Global Privacy Control (GPC) signals for residents of states whose laws require us to do so. When we detect a GPC signal from your browser, we treat it as a valid request to opt out of targeted advertising and “sale” or “sharing” of personal information tied to that browser.

7. Data Retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods depend on the type of information and the context of collection. When personal information is no longer needed, we delete, anonymize, or aggregate it. We may retain backups and records as required by law for limited additional periods.

8. Your Choices

• Account: you can review and update your account information in your settings and can delete your account as described in the Terms of Service.
• Communications: you can unsubscribe from marketing emails via the link in each message. We may still send transactional or administrative communications.
• Device permissions: you can manage camera, microphone, photo, location, and notification permissions through your device settings.
• Model training: where offered, you can manage whether your content is used to train our models through your account settings.

9. U.S. State Privacy Rights

Depending on where you live, you may have the rights described below. We do not discriminate against you for exercising these rights.

9.1 California (CCPA/CPRA)

California residents have the right to:

• Know and access the categories and specific pieces of personal information we collect, use, disclose, and share;
• Delete personal information we collect from them, subject to exceptions;
• Correct inaccurate personal information;
• Opt out of the “sale” and “sharing” of personal information (including cross-context behavioral advertising);
• Limit the use and disclosure of sensitive personal information to permitted purposes; and
• Non-discrimination for exercising these rights.

You may submit requests through the in-product privacy controls, by emailing privacy@tapi.ai, or via our Do Not Sell or Share My Personal Information page. We will verify your request using the information you provide and will respond within the time required by law. You may use an authorized agent to submit a request on your behalf with appropriate documentation.

Categories of personal information we have collected in the prior 12 months include identifiers, commercial information, internet or network activity, geolocation (approximate), audio/visual information (where you submit it), professional or employment information (for B2B users), and inferences. We collect, use, and disclose these categories for the purposes described in Sections 3 and 5.

9.2 Other U.S. States

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, New Jersey, New Hampshire, Minnesota, Maryland, and other states with comprehensive privacy laws may have rights to access, correct, delete, obtain a copy of, and opt out of certain processing of personal information, including targeted advertising and, in some states, profiling producing legal or similarly significant effects. To exercise these rights, email privacy@tapi.ai. You may appeal a denied request by replying to our response within a reasonable time.

10. Children’s Privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you are between 13 and the age of legal majority in your jurisdiction, you may use the Service only with the consent of a parent or legal guardian.

If you are a parent or guardian and believe your child has provided personal information to us without your consent, please contact privacy@tapi.ai and we will take appropriate steps to delete that information.

11. International Data Transfers

tapi is headquartered in the United States and operates globally. When you use the Service, your personal information may be transferred to and processed in the United States and other countries that may have different data protection laws than your country. Where required by law, we implement appropriate safeguards for international transfers.

12. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your account credentials.

13. Third-Party Services

The Service may link to or integrate with third-party services, including AI model providers, payment processors, social media platforms, and analytics tools. We are not responsible for the privacy practices of these third parties, and we encourage you to read their privacy policies before using their services.

14. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you through the Service or by other reasonable means before the changes take effect. Your continued use of the Service after the effective date of the updated Policy constitutes your acceptance of it.

15. Contact Us

If you have questions about this Policy or our privacy practices, please contact us:

This Privacy Policy was last updated on April 10, 2026.