Who we are

Karnex is an AI website-building service managed by Ario Kaveh. If you have any question about your data or this policy, contact us at any time at support@karnex.ir.

What data we collect

We collect only the data Karnex needs to work, and nothing more:

• Account data — your name and email address. If you sign in with Google, Google also shares your profile picture and a unique Google account ID. If you sign in with email and password, we store only a cryptographic hash of your password, never the password itself.
• Project data — the prompts and descriptions you write, the plans and site versions Karnex produces, files you upload, and the publication state of your versions.
• Support messages — the name, email address and message you send through the support and feedback form.
• Technical data — a session cookie that keeps you signed in, your IP address for security and rate limiting, and basic browser information needed to serve pages correctly.
• Purchase records — if you buy a plan or credits, your order, payment reference and credit records. Payment card details are never stored by Karnex.

How we use your data

We use your data only to: create and secure your account and personal workspace; generate, store and show your projects; answer your support and feedback messages; keep Karnex safe with rate limiting and abuse prevention; and, only with your consent, measure how the service is used. We do not sell your data, build advertising profiles, or share it for anyone else’s marketing.

AI processing

When you ask Karnex to create or revise a site, your request text is sent through OpenRouter to the model provider (for example Google). We only select model routes that do not retain your data or use it for model training. Your request is used solely to produce your own result.

Third parties involved in the service

To run Karnex, limited data is processed by the following services, and each one receives only what its task requires. We never sell or rent your data to anyone:

• Google — account sign-in and, on model routes, AI processing.
• OpenRouter — routing your AI requests to the model provider.
• Vercel — application hosting and delivery.
• Supabase — database and file storage.
• PostHog — consent-based usage analytics with masked inputs (EU servers).
• Resend — delivering support and feedback emails.
• The payment provider — processing your payment when you make a purchase.

Cookies and local storage

We set one essential session cookie to keep you signed in, and we store your analytics consent choice in your browser. During Google sign-in, the browser also briefly stores Google’s OAuth state. You can clear all of these at any time from your browser settings; you will simply be signed out and asked again for consent.

Usage analytics (consent-based)

We use PostHog (EU servers) to improve Karnex. Without your permission we record only anonymous, cookie-free statistics. If you allow it, we also keep an anonymous ID and record sessions on public pages. What you type is masked, and private workspace, sign-in and admin pages are never recorded. You can change your choice at any time from the Analytics settings link at the bottom of every page; declining also clears the stored ID.

Data retention

Your account and project data stay in our database while your account is active. Sessions expire automatically. Support messages are kept only as long as needed to resolve your request, then removed. Analytics records are anonymous and are not linked to your account. When you ask us to delete your account, we delete your account data and projects.

Your rights and choices

You can ask us at any time to show you the data we hold about you, correct it, export your project data, or delete your account, projects and personal data. Email support@karnex.ir; after we confirm you own the account, we act on your request. You can also disconnect Karnex at any time from your Google account’s third-party connections page.

Children

Karnex is not directed at children under 13, and we do not knowingly collect data from children.

Changes to this policy

We may update this policy as Karnex evolves. The date at the top of this page always reflects the current version.

Contact

Questions or requests about your data? Email support@karnex.ir and we will reply.