KM Studio — Privacy Policy
KM Studio is a Chrome extension that runs image and video generation in Google Flow in batches. This document explains what the extension collects, why, and — just as importantly — what it does not collect. It also covers the KM Montaj desktop app (section 1e).
The short answer: we never see or store your prompts, or the images and videos you generate. Those stay between your browser and Google Flow. The only usage data that reaches our server is run statistics — numbers only: the mode, the number of jobs, how many succeeded or failed, and the run time (section 1b). The one exception is a problem report that you choose to send (section 1c). Prompts are unlimited on every plan; the paid Pro and Pro + Montaj plans unlock extra features (sections 1d, 1e).
1. What is collected
a) When you sign in with Google
Signing in happens through Google only. Google gives us:
| Data | Why it is needed |
|---|---|
| The stable identifier of your Google account | To recognise your account. We rely on this identifier rather than the email address, so changing your Gmail address does not lose your account or subscription |
| Email address | To show which account is signed in, and to contact you about subscription and payment |
| Name and profile picture | So the extension panel can show who is signed in |
We request only the openid, email and
profile scopes. We have no access to your Gmail messages, Google
Drive files, contacts, calendar or any other Google data — not by policy, but
technically.
We never see or store your password: it is entered only on Google's own page.
b) For the extension to work
| Data | Why it is needed |
|---|---|
Install identifier (install_id) — a random number created
when the extension is installed |
To recognise this computer: so the one-time free Pro trial is given only once per computer, and to count usage for users who are not signed in |
| Device name — operating system and browser version (for example «Windows · Chrome 141») | To list the devices linked to one account and to cap their number (this prevents subscription sharing) |
| Daily generation count (a number only) | Usage statistics (and a daily limit, if one is ever switched on again) |
| Usage statistics (numbers only): the extension version, the install identifier, your account identifier if you are signed in, and per run — the mode (e.g. text → image, image → video), the number of jobs, how many succeeded or failed, and the run duration | Service statistics, limits and support. Prompt text, images, videos, file names and page content are not sent. Not sold and not used for advertising; kept as daily aggregates |
| Latest activity (one record per installation, overwritten each time): the time, the account, the extension version, the country (derived from the network address — the address itself is not stored), and the mode and counts of the last run; the times a device or disconnect limit was hit | To see how many people are working right now and to spot a subscription shared between several people (used on several computers at once, or from different countries on the same day). Nothing is blocked automatically — the administrator reviews it and warns you first. Limit-hit records are deleted after 8 days |
| Administrator message — only if the administrator sends you a warning: the text, when it was sent and when you pressed «Got it» | To show the message in the extension panel (and via the Telegram bot, if linked) and to know it was read |
| Free-trial markers: your Google account identifier and the install identifier (both listed above), plus a keyed one-way hash (HMAC) of your network address (IPv4 address or IPv6 /64 — the address itself is not stored) | To give the free Pro trial only once and to stop one person from collecting trials with many accounts. Kept while the account exists; the network hash is only compared within 30 days |
| Telegram chat ID — only if you link Telegram in the bot | Payment and subscription notices; replies to the requests you send to the bot |
| Payment identifier and amount — only if you buy a subscription | To confirm the payment and activate the subscription |
Install statistics: the install identifier, extension version, browser type
(Chrome or Edge), country (derived from your network address — the address itself is not
stored) and, if present, an ad-link tag (utm) |
To measure where installs come from: how many installs sign in and reach a payment (aggregate numbers only) |
When you click our ad link (kontent-markazi.pages.dev/km): a keyed daily
hash of your network address and the utm tag; a 30-day first-party
km_utm cookie on our own site |
To count link clicks (once per day) and to know the ad source on the payment page. Your IP address is not stored |
Your card details (number, expiry, CVV) never reach our server — they are handled by the payment provider itself.
c) Only if you send a problem report or contact support
| Data | Why it is needed |
|---|---|
| Problem report — sent only when you press «Report a problem» in the extension and confirm it: extension version, interface language, the latest part of the extension's log (it can contain prompt titles or text and file names), panel settings and the browser's user-agent | So the developer can find the cause of the error. The report is kept on our server for up to 7 days and is delivered as a file to the developer's Telegram chat. Nothing is sent unless you press the button and confirm |
| Support messages — what you write or attach in the Telegram bot @KMStudioPro_bot after «Message the admin»; a ticket record (Telegram chat ID, ticket number, your account email and plan, timestamps) | To forward your message to the developer and deliver the reply back to you. Ticket records are kept for up to 180 days |
| Help-center questions the bot could not answer (the question text, Telegram chat ID, language; the latest 300 only) | To improve the help answers |
d) Free, Pro and Pro + Montaj plans
Prompts are unlimited for everyone. The paid Pro plan unlocks extra features (image upscale to 2K/4K and video to 1080p/4K — 1080p needs a Google AI plan, 4K needs Ultra; background upscale, parallel images (2 by default), gallery ZIP, automatic resend of failed prompts, priority support); the Pro + Montaj plan adds the KM Montaj desktop app (section 1e). If you sign in with Google you can try Pro for free, once — no card is asked and it ends on its own. The seller is KM Studio, not Google. Plans, the trial length, terms of sale and refunds: kmstudiopro.pages.dev/shartlar.
e) The KM Montaj desktop app
KM Montaj (part of the Pro + Montaj plan) assembles videos on your own computer: your images, clips, voices and texts are processed locally and are never uploaded to our server.
| Data | Why it is needed |
|---|---|
| Licence check: your account key, a one-way hash of the computer's identifier (derived from the Windows MachineGuid), the computer name and the app version | To issue the licence to this computer and keep the limit of 3 computers per account; you can see and unlink your computers in the app. Kept while the account exists |
| App download counts and licence activations (per account and computer) | Service statistics and the 2-computer limit (the licence record above) |
| AI voice («🎙 Ovoz yaratish», optional) — nothing reaches us | In the free mode the scene text is sent to Microsoft's speech service (Edge voices); in the quality mode it goes from your computer directly to OpenRouter (and through it to Google Gemini TTS) with your own OpenRouter key. Both process it under their own terms. The key is stored only on your computer, encrypted |
2. What is NOT collected
- Your prompts — the text you write goes from your browser straight to Google Flow and never passes through our server (unless you send a problem report yourself, see 1c)
- The images and videos you generate — they are created in Google Flow and downloaded directly to your computer
- Browsing history, other open sites, bookmarks
- Passwords — neither your Google password nor any other
- Google Drive, Gmail, Calendar, Contacts — no data from any Google service
- File names and page content — run statistics contain only the mode, numbers and durations (unless you send a problem report yourself, see 1c)
3. Why each permission is requested
| Permission | Why |
|---|---|
debugger |
Google Flow's prompt field is a rich-text editor that rejects synthetic input events; attaching the debugger to that one tab is the only method that actually works. It is used only on Google Flow pages and only after you press «Start». Chrome shows its own banner while it is attached |
downloads |
To save each finished image/video under the correct, numbered file name |
storage |
To keep your settings and sign-in state inside your own browser |
identity |
To open the Google sign-in window |
tabs |
To detect whether a Google Flow tab is open and to focus it. The URLs of your other tabs are not read and never leave your machine |
sidePanel |
To open the extension's own side panel (the whole workspace lives there) |
notifications |
A browser notification when a long queue finishes, so you can work on something else meanwhile |
host_permissions |
labs.google and flow.google.com — where the work
happens; flow-content.google — Google Flow's own storage for the
images and videos you generated (read only to save them to your computer and
to build the gallery ZIP); kontent-markazi.pages.dev and
km-studio-api…workers.dev — our own server (account, plan,
trial). No other site can be accessed |
3-bis. Limited Use of Google user data
KM Studio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Concretely, the data obtained from your Google account
(openid, email, profile):
- is used only to provide user-facing features (recognising your account, running the subscription and the one-time trial);
- is never used for advertising of any kind;
- is not sold or transferred to data brokers, ad networks or any other third party;
- is not read by humans, except: (a) with your explicit consent, (b) to investigate a security incident or where required by law, or (c) when the data is fully anonymised and aggregated.
Your prompts, images and videos are not Google API data — they stay between your browser and Google Flow and never pass through our server, except the log excerpt inside a problem report that you choose to send (1c).
4. Who the data is shared with
We never sell your data and never use it for advertising. It passes only through these services:
- Google — for authentication
- Cloudflare — where the server and database run (data is stored in the Eastern Europe region)
- Payment provider — only if you buy a subscription, and only to confirm the payment
- Telegram — only if you contact support or send a problem report: your messages and the report are delivered to the developer there
- Microsoft, OpenRouter and Google — only if you generate AI voices in KM Montaj: the scene text goes from your computer directly to Microsoft's speech service (free mode) or, with your own OpenRouter key, to OpenRouter and Google (quality mode), under their terms, and never passes through our server (1e)
Data may be disclosed on a formal legal request where the law requires it.
5. Security
- All traffic is encrypted (HTTPS)
- The one-time sign-in code returned by Google sign-in is stored only as an irreversible hash, lives for 2 minutes and works once
- The extension then keeps an account key; it is sent in a request header (not in the address), and we can revoke it at any time on request — after that every device must sign in with Google again
- Network addresses are never stored in the clear — only a keyed one-way hash (HMAC; free-trial check and counting ad-link clicks)
- We store no passwords at all, so there are no passwords to leak
6. How long data is kept
- Account data — until you ask us to delete it
- Daily generation counter — as a per-day record, which loses meaning afterwards
- Usage statistics — as daily aggregates
- Latest activity — one record per installation (each new one replaces the old); limit-hit records — 8 days; administrator messages — while the account exists
- Payment records — kept as long as accounting rules require
- Problem reports — up to 7 days on our server
- Support ticket records — up to 180 days
7. Your rights
At any time you may request:
- a copy of the data we hold about you;
- full deletion of your account and everything linked to it;
- unlinking a device — you can also do this yourself from the extension's «Devices» section.
Write to the address below. Account deletion requests are completed within 30 days.
8. Children
KM Studio is not directed to children under 13 and we do not knowingly collect data from them.
9. Changes to this policy
If this policy changes, the date at the top of the page is updated and the change is announced in the extension panel. Continuing to use the extension after a change means you accept the updated policy.
10. Contact
Questions, data requests, account deletion: behzodbekolimov@gmail.com · Telegram @KMStudioPro_bot