Your information

Privacy Policy

Last updated: 5 October 2026

PenguinKit is operated by AFAXON (“we” or “us”). This policy explains how we handle personal information when you visit our website, use a project workspace, purchase a kit or contact us.

Information we collect

We collect account information, including your email address, authentication details and records of terms acceptance; project descriptions, answers, edits and decisions; uploaded PDF or DOCX briefs, their filenames and extracted text; AI recommendations and generated kits; purchase identifiers and payment status; and correspondence you send to support. If you use Google sign-in, we receive the account information needed to authenticate you.

Our hosting and service providers also process technical information such as IP addresses, browser information and service logs. We use account activity and a protected identifier derived from the connection IP address to help prevent abuse. Payment details are submitted to Lemon Squeezy through its hosted checkout. PenguinKit does not store payment card details.

Purposes of processing

We use this information to provide and secure your account; understand your brief; prepare project guidance and kits; verify payment; retain your project for subsequent access and included updates; send account and service messages; answer support enquiries; investigate faults; and prevent misuse. Where necessary, we also retain information to meet legal and accounting obligations or establish, exercise or defend legal claims.

Providing account and project information is necessary to use the project service. If you do not provide sufficient information, we may be unable to authenticate you, prepare your kit or resolve a support request. Optional analytics is described separately below.

AI processing and authorised review

Project content, including submitted descriptions, responses and text extracted from uploaded documents, is disclosed to our AI processing service provider for analysis, preparation and review of the requested guidance. Uploaded documents are retained in access-restricted storage. You should submit only material you are authorised to disclose and exclude credentials, payment details and unnecessary sensitive personal information.

Access to project content and related service records is restricted to authorised personnel for customer support, fault investigation and service quality review. PenguinKit does not publicly publish project content or disclose it to advertising platforms.

Service providers and disclosure

We engage service providers for account authentication, hosting, database and document storage, AI processing, and transactional email delivery. Lemon Squeezy acts as merchant of record for purchases and processes checkout, payment, tax, refund and dispute information under its own Privacy Policy. Google processes information when you choose Google sign-in or consent to Google Analytics.

These categories of recipients receive information necessary to perform their respective functions. Information about the providers relevant to your personal information may be requested using the contact details below. Their applicable contractual terms and privacy notices also govern their processing. We may disclose information where required by law or reasonably necessary to investigate fraud, protect the service or respond to legal claims.

International processing

Personal information may be processed in Pakistan, where AFAXON operates, and in other jurisdictions in which our service providers operate, including outside your country of residence. Privacy laws and protections differ between countries. You may contact us for information about the providers and arrangements relevant to your information.

Cookies and optional analytics

Authentication cookies are used to maintain your sign-in session. Browser storage also records your analytics preference and helps the project workspace preserve the continuity of your actions.

With your consent, Google Analytics measures visits to our public information pages. It processes browser, device and network information and uses analytics cookies. PenguinKit supplies public page addresses without query strings, fixed page names and no referring address. We do not send account identifiers, project conversations, uploaded documents or private workspace page views through this integration, and we do not use it for advertising.

Analytics cookies are configured to expire up to 90 days after a visit. You may decline analytics or withdraw consent through Cookie preferences on a public page. Withdrawal stops further analytics collection through this integration in that browser and removes its Analytics cookies; it does not undo processing that occurred before withdrawal. Your preference applies to that browser.

Retention and deletion

Saved project content, uploaded briefs and generated kits are retained to support access, updates and support. Retention depends on the continuing need for those purposes and any applicable legal, accounting, security or dispute requirements. Revising an answer in the current project view does not necessarily remove its earlier version from saved project history.

To request deletion of an account or project information, email info@penguinkit.com. We may ask for information reasonably necessary to verify that the request concerns your account. We will explain any information that must be retained and the reason for retaining it. Deletion may end access to the relevant workspace and kits. Backup copies and records held by providers may remain until they expire or are deleted under the applicable retention arrangements.

Security

We use private file storage, authentication and access controls to protect project information. No online service or transmission method can guarantee absolute security. Keep your account credentials secure and contact us if you suspect unauthorised access.

Your rights and choices

You can review and revise project answers within your workspace. Depending on applicable law, you may also have rights to access, correct, delete or receive a portable copy of personal information, restrict or object to its processing, or withdraw consent. Contact us to exercise a right or raise a concern. We will handle requests in accordance with applicable law, including any permitted exceptions. Where applicable, you may complain to the competent data protection authority.

Policy updates

We may revise this policy to reflect changes to the service or legal requirements. The updated policy and its revision date will appear on this page. We will provide additional notice of material changes where required by applicable law.

Legal notices and contact

Legal notices and correspondence to AFAXON may be addressed to 1st Floor, Plaza 54, Phase 4 Civic Center, Bahria Town, Rawalpindi, Pakistan, or sent to info@penguinkit.com.