Data processing summary

A short summary for studios that need to know how we process data on their behalf. The full policy is on the privacy page.

Roles

The studio is the data controller for its clients', crew's and projects' data. Kawni is a processor and acts only on the studio's instructions.

Each studio has its own database. No studio can reach another's data.

Vercel Inc.: Hosting: runs the app and serves its pages. Servers in Mumbai, India; global network; company in the USA.
Turso (ChiselStrike Inc.): Databases: one database for each studio. Mumbai, India (AWS ap-south-1).
Cloudflare, Inc. (R2): File storage: uploads, board files, logos and receipts. Cloudflare's storage regions [region to confirm].
MyFatoorah: Payments: card details and subscription charges. We never see full card numbers. Kuwait and GCC.
Google LLC (Gemini API): The AI copilot: only what a user sends it while using it. USA and Google's global data centers.

Download from Settings, Account at any time. Deleting cancels the subscription at once; the database is deleted 30 days later.

We tell affected studio owners without undue delay after any personal data breach [timing to confirm].

[privacy email].