Privacy Policy

This Privacy Policy explains what information Holy LLC (“we”, “us”) collects when you use Kaleidicloud and its rooms (the Brick Box Studio: Kingdom Connection, Goldensounds, and others), how we use it, who we share it with, and what choices you have. It applies alongside our Terms of Use and Cookie Policy.

1. Information you give us

• Account info: email, password (hashed), display name, handle.
• Profile content: photo, cover, bio, colors, roles, links, project pages, needs, offerings, media, forum posts, quotes, bookings, auctions and bids, messages, and any other content you post.
• Brick Box Studio confession: if you join as a provider, a record that you affirmed the evangelical confession, the version affirmed, and the date.
• Payment info: when you send or receive money we collect the amounts, description, and status. Card / bank details are collected and stored by our payment processor (Stripe), not by us.
• Communications: messages you send through the platform and support emails you send us.

2. Information we collect automatically

• Device and log data: IP address (short-term), browser / user-agent, timestamps, referrer, and the pages you visit on Kaleidicloud.
• Cookies and local storage: to keep you signed in, remember preferences, and understand pageviews. See the Cookie Policy.
• Pageview analytics: a session id (random, stored in your browser) is used to count anonymous pageviews on public pages.

3. Information from third parties

• Sign-in providers (e.g. Google): if you sign in with a third-party provider, we receive your email, name, and profile photo per that provider.
• Payment processor (Stripe): we receive payout status, dispute status, and other metadata needed to operate paid features.

4. How we use your information

• Provide the Services, including matchmaking, discovery, messaging, bookings, auctions, bargaining, forums, payments, and the Brick Box Studio.
• Personalize what you see (colors, matches, project recommendations) using both manual and AI-assisted matchmaking.
• Keep the network safe (moderation, content-policy enforcement, blocking, fraud prevention, blacklisting).
• Communicate with you about your account, security, changes to policies, and — with your consent where required — new features.
• Debug, secure, and improve the platform.
• Comply with legal obligations.

5. AI features and your content

Some features use AI to summarize profiles, suggest matches, and help fill out listings. When these run, the relevant profile fields and prompts are sent to our AI provider (currently OpenAI) via our server-side proxy, using our own account. We do not sell your content and we do not use it to train third-party foundation models. AI outputs may be inaccurate — please review before relying on them.

6. When we share your information

• With other users — content you post publicly, and messages you send in a conversation, are visible to the intended recipients or the public part of the platform.
• Service providers — hosting (Lovable Cloud, built on Supabase), payments (Stripe), email delivery, AI (OpenAI), analytics, and security tools. They may only use your data to provide services to us.
• Legal reasons — to comply with law, respond to lawful requests, enforce these policies, protect our rights, or protect users from harm.
• Business transfers — if Holy LLC is involved in a merger, acquisition, financing, or asset sale, information may be transferred as part of that transaction, subject to this policy.

We do not sell your personal information.

7. Public information

Your handle, display name, profile photo, cover, bio, colors, roles, projects, needs, offerings, quotes you request or receive, listings, and other content you choose to publish are public. Do not post anything you want kept private.

8. Retention

We keep account and profile information for as long as your account is active. When you delete your account, we delete or anonymize your personal information within a reasonable period, except where we need to retain it for legal, tax, safety, or fraud-prevention purposes. Public blacklist entries may be retained indefinitely as described in the Terms.

9. Security

We use industry-standard measures (encryption in transit, row-level security in the database, hashed passwords, access controls) to protect your information. No system is perfectly secure; you use the Services at your own risk.

10. Your choices and rights

• Update or delete profile content from your account settings.
• Delete your account from account settings, or by emailing us.
• Opt out of non-essential emails using the unsubscribe link.
• Depending on where you live (for example, in the EEA / UK, or in California under the CCPA/CPRA), you may have additional rights — access, correction, deletion, portability, restriction, objection, and the right to lodge a complaint with your local data protection authority. To exercise these rights, contact us at kaleidicloud@gmail.com. We will not discriminate against you for exercising them.

11. Children

The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

12. International users

Kaleidicloud is operated from the United States. If you use the Services from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate.

13. Changes

We may update this Privacy Policy. When we do, we will change the “Effective” date and, for material changes, provide additional notice.

14. Contact

Privacy questions or requests: kaleidicloud@gmail.com.