K3 Kimi Privacy Policy | Prompts, Images and Billing

How K3 Kimi handles account data, Kimi K3 prompts, image input, OpenRouter processing, Stripe billing, analytics, security, and privacy requests.

PublishedJul 17, 2026

UpdatedOct 1, 2026

Effective date: July 18, 2026

This Privacy Policy explains how K3 Kimi collects, uses, and shares information when you visit k3kimi.com, create an account, submit a Kimi K3 request, buy a subscription, or contact support.

Key Points

K3 Kimi is an independent hosted interface. It is not operated by Moonshot AI or OpenRouter.
Your recent chat messages and an attached image are sent to OpenRouter and the selected Kimi K3 provider to produce a response.
K3 Kimi does not intentionally store chat message text or attached images in its application database after the response is returned.
Your browser stores recent chat history locally on your device so you can continue a conversation. This may include partial output if a stream is interrupted. You can remove it by clearing site data or starting a new chat.
Chat requires an account with a paid plan or credit pack. A signed browser cookie and pseudonymous abuse-prevention records may be used to limit abuse.
We do not use your prompts, images, or responses to train our own AI models.
Stripe processes payments through the ShinStar business profile. K3 Kimi does not store your full card number.
Google Analytics 4 and our privacy-focused pageview service measure site usage.

Information We Collect

Account information: your name, email address, login identifiers, profile image, and authentication records.
Model request content: the recent messages and optional image needed to complete your Kimi K3 request.
Usage information: response credit charges, model request identifiers, token-usage totals, request status, timestamps, and rate-limit signals. Application billing records do not intentionally include your prompt text.
Device and network information: IP address, browser, operating system, referring page, country or region, and security events. Where K3 Kimi keeps abuse-prevention quota records, they store keyed hashes derived from the browser identifier, IP address, and browser user agent rather than storing those values in the quota record itself.
Payment information: plan, price, currency, order status, subscription status, Stripe customer identifiers, invoices, refunds, disputes, and limited payment metadata.
Support information: the email, message, screenshots, and other details you choose to send when requesting help.
Analytics information: pageviews, landing pages, traffic sources, device categories, countries, sessions, and product events.

How Model Requests Are Processed

When you send a chat request, K3 Kimi forwards the recent conversation and optional image to OpenRouter using the moonshotai/kimi-k3 model identifier. OpenRouter then routes the request to the available Kimi K3 provider.

Chat requests require a signed-in account with a paid plan or credit pack. Images require an account. A daily network limit helps prevent automated or shared-network abuse.

Recent chat messages, including partial output left visible after an interruption, are saved in your browser's local storage, not in the K3 Kimi application database. This local history is sent again only when it is included in a later request. Starting a new chat removes the saved conversation from that browser.

Provider handling, retention, and abuse monitoring are also governed by the current OpenRouter and model-provider policies. Do not submit passwords, private keys, health records, financial account numbers, confidential client data, or other regulated information unless you have independently confirmed that the provider terms and your legal obligations permit it.

How We Use Information

We use information to authenticate accounts, deliver Kimi K3 responses, apply credits, prevent abuse, process subscriptions, send transactional messages, troubleshoot failures, measure performance, respond to support, protect the service, and comply with legal obligations.

We do not sell personal information for money.

Service Providers

We may share information with providers that support model inference, hosting, databases, authentication, email, analytics, fraud prevention, customer support, and payments. Current material providers include OpenRouter for model access, Moonshot AI or another listed Kimi K3 endpoint provider for inference, Cloudflare for hosting and DNS, Stripe through the ShinStar business profile for payments, and Google Analytics 4 for analytics.

Retention

Chat message text and attached images: not intentionally persisted in the K3 Kimi application database after the response is returned.
Browser chat history: retained locally on the device until you start a new chat, clear the site's browser storage, or the browser removes it.
Abuse-prevention quota records: retained as pseudonymous identifiers for abuse prevention. Daily network-limit records are separated by date.
Model request metadata and credit transactions: retained as needed for account history, billing, fraud prevention, and support.
Account and subscription records: retained while the account is active and for a reasonable period afterward for security, accounting, disputes, and legal compliance.
Analytics data: retained according to the settings of the relevant analytics property.
Support correspondence: retained while needed to resolve the request and maintain an appropriate business record.

Backups and provider systems may retain information for additional limited periods under their own technical and legal requirements.

Cookies and Similar Technologies

K3 Kimi uses essential cookies for authentication and security. The signed k3kimi_guest_id cookie distinguishes a browser for abuse prevention; deleting it does not remove the separate pseudonymous network limit that also protects against abuse. K3 Kimi also uses local storage for completed chat history. Analytics scripts may use cookies or similar identifiers to measure visits and product events. Browser controls can limit non-essential storage, but blocking essential cookies can prevent sign-in or checkout.

Security

We use reasonable administrative, technical, and organizational safeguards, including server-side secret storage, encrypted transport, authenticated write routes, rate limits, and, when checkout is enabled, payment processing through Stripe. No online service can guarantee absolute security.

Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, export, object to, or restrict certain processing of personal information. Send a request from the email address associated with your account to contact@k3kimi.com. We may verify your identity before completing a request.

You can also cancel a paid subscription from Billing settings and use browser controls to manage cookies and local chat history.