Privacy Policy

Last updated: September 4, 2026

KafLabs ("KafLabs," "we," "us," or "our") operates a family of products and services, including websites, web applications, and downloadable software (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our websites, use our online tools, or download and run any of our software.

This policy applies to all KafLabs products and websites, including but not limited to QR Anvil, SetupForge, ImageForge, and PDF Anvil. Individual products may maintain their own supplemental privacy policies that provide additional details specific to that product. In the event of a conflict between this policy and a product-specific policy, the product-specific policy prevails for that product.

By accessing or using any of our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Services.

1. Information We Collect

1.1 Information You Provide

  • Account information: When you create an account on any of our products, we may collect your name, email address, and profile image through your authentication provider (e.g., Google, GitHub).
  • User content: Data you submit through our Services, such as QR code content, uploaded images, application selections, or contact form messages.
  • Communications: Information you provide when you contact us for support or send us feedback.
  • Payment information: If you purchase a paid plan or subscription, our third-party payment processor collects payment details (e.g., credit card number, billing address). We do not store full payment card information on our servers.

1.2 Information Collected Automatically

  • Log and usage data: IP address, browser type, operating system, referring URL, pages visited, features used, and timestamps.
  • Device information: Device type (mobile or desktop), screen resolution, and general hardware characteristics.
  • Analytics data: We may use privacy-focused analytics tools to understand aggregate usage patterns. Where available, we honor your browser's "Do Not Track" signal. kaflabs.com and PDF Anvil are hosted on Cloudflare. Their visitor counts come from the traffic analytics that Cloudflare, as our hosting provider, aggregates from its own request logs. These sites load no analytics script and set no analytics cookies.
  • Cookies and similar technologies: See Section 5 below.

1.3 Information From Third Parties

We may receive information from authentication providers (e.g., Clerk, Google, GitHub) when you sign in, including your name, email, and profile image.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain our Services
  • Process transactions and manage your account
  • Provide analytics features where applicable (e.g., QR code scan tracking)
  • Send transactional communications (e.g., account verification, purchase receipts)
  • Respond to your inquiries and provide customer support
  • Improve, personalize, and develop new features for our Services
  • Monitor usage patterns to detect and prevent abuse, fraud, or security threats
  • Enforce our Terms of Service and comply with legal obligations

3. Data Sharing and Disclosure

We do not sell your personal information. We may share data in the following circumstances:

  • Service providers: We work with trusted third-party vendors (e.g., hosting providers, authentication services, payment processors, analytics platforms) who process data on our behalf under confidentiality obligations.
  • Legal requirements: We may disclose information when required by law, legal process, or government request, or to protect the rights, property, or safety of KafLabs, our users, or others.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Specifically:

  • Account data is retained for as long as your account remains active. Upon account deletion, we will remove or anonymize your data within a reasonable timeframe.
  • Temporary data (e.g., uploaded files, installer selections) may be automatically deleted within 24 hours of processing, depending on the product.
  • PDF Anvil files never leave your device. Every PDF tool runs in your browser. Your files are not uploaded to our servers, so we do not receive, store, or delete them.
  • Aggregated analytics data that cannot identify individuals may be retained indefinitely.

5. Cookies and Tracking Technologies

Our Services may use the following types of cookies and similar technologies:

  • Essential cookies: Required for authentication, session management, and security. These cannot be disabled without affecting core functionality.
  • Analytics cookies: Used to understand usage patterns and improve our Services. Where we use analytics, we strive to use privacy-focused tools and honor "Do Not Track" browser signals.

We do not use advertising or cross-site tracking cookies. You can manage cookie preferences through your browser settings.

6. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL), secure authentication, access controls, and regular security reviews. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Data portability: Request your data in a structured, machine-readable format.
  • Opt-out: Opt out of non-essential communications or analytics tracking (where supported by the product).

To exercise any of these rights, please contact us at privacy@kaflabs.com.

8. Children's Privacy

Our Services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such data, please contact us immediately and we will take steps to delete it.

9. International Data Transfers

Our Services and our service providers may operate in countries other than the one you live in. If you access our Services from another country, your information may be transferred to, stored, and processed in those countries. By using our Services, you consent to such transfers.

10. Third-Party Links

Our Services may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of such third parties. We encourage you to review the privacy policies of any third-party services you access.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or through our Services. Your continued use of the Services after any changes constitutes your acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: