Legal
Privacy Policy
Last updated: April 29, 2026 — Kizuki Box Inc
1. Who We Are
Kizuki Box Inc is a Canadian corporation operating at kizukibox.com. We build retail display technology for businesses. If you have questions about this policy, contact us at hello@kizukibox.com.
2. What We Collect
When you visit kizukibox.com or app.kizukibox.com, we may collect:
- Pages visited and time of visit
- Referring website or link you came from
- Affiliate or referral code in your URL
- Anonymous session identifier
- IP address (used for country detection only, not stored long term)
- Browser type and device type
When you create an account or make a purchase, we also collect:
- Name, email address, company name, phone number
- Billing and shipping address
- Payment information (processed securely by Stripe — we never see your full card number)
3. Why We Collect It
- To understand how visitors find and use our website
- To ensure affiliate partners are credited correctly for referrals
- To process your orders and manage your account
- To send transactional emails (order confirmations, password resets)
- To improve our products and website
4. Affiliate and Referral Tracking
If you arrive at our website through an affiliate or referral link, we store a referral code in your browser to ensure the referring party receives credit if you make a purchase. This referral code is stored for 90 days. We track clicks and conversions to calculate affiliate commissions.
5. Cookies
We use cookies and local storage for:
- Keeping you logged in to your account (
kb_token, stored locally in your browser) - Remembering your cookie consent preference (
kb_consent, 1 year) - Storing your referral code for affiliate tracking (
kb_aff, 90 days) - Anonymous session tracking for analytics (
kb_session, 1 year)
We do not use advertising cookies or third-party tracking pixels. We do not use Google Analytics or Facebook Pixel.
6. Your Consent Choices
When you first visit our website, we ask for your consent to collect analytics data. You can:
- Accept — we collect analytics and affiliate tracking data
- Decline — we collect nothing beyond what is strictly necessary to serve the website
You can change your preference at any time by clearing your browser's local storage for kizukibox.com.
7. Who We Share Data With
We share data only with the services required to operate our business:
- Stripe — payment processing (stripe.com/privacy)
- SendGrid — transactional email delivery
- DigitalOcean — server hosting (our servers are in San Francisco, USA)
We never sell your personal data to any third party. Ever.
8. Data Retention
- Account data — kept for the lifetime of your account plus 2 years after closure
- Order records — kept for 7 years (Canadian tax requirements)
- Page view analytics — kept for 2 years
- Password reset tokens — deleted immediately after use or after 1 hour
9. Your Rights
Under Canadian privacy law (PIPEDA) and where applicable under GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Withdraw consent for analytics collection
- Receive a copy of your data in a portable format
To exercise any of these rights, email us at hello@kizukibox.com and we will respond within 30 days.
10. Security
We take data security seriously. All data is transmitted over encrypted HTTPS connections. Passwords are hashed using bcrypt and never stored in plain text. Payment data is handled entirely by Stripe and never touches our servers.
11. Children
Kizuki Box is a business-to-business product. We do not knowingly collect data from anyone under the age of 18.
12. Changes to This Policy
If we make significant changes to this policy, we will update the date at the top of this page and notify account holders by email.
13. Contact
Questions about this privacy policy? Contact us at hello@kizukibox.com or write to Kizuki Box Inc, Canada.