Privacy policy
What kaibo collects, why, who processes it, and how to delete it. Draft pending legal review.
updated 2026-11-12
draft. lawyer review is required before this page is relied on.
Draft. This text describes what the service does today. It has not been reviewed by a lawyer and must be before launch. Items in square brackets are not filled in yet.
Who we are
[Legal entity name], [address]. Contact: [privacy contact email].
What we collect
Account data. Name, email and organization membership, handled by our sign-in provider (Clerk). We store the Clerk user and organization ids.
Memory content. The events and text you send through the API, the memories derived from them, and the metadata around them (timestamps, source labels, hashes). You control what you send. Do not send data you are not allowed to process.
API keys. We store a hash of each key, its last four characters, label and scopes. The full key is shown once and cannot be recovered.
Operational data. Request ids, timing, error names and rate-limit counters. We do not log request bodies or memory text. A hash of the source network address is used for abuse limits on the public demo.
What we do not do
We do not sell your data. We do not use your content to train models. Today no third-party AI model receives your content; if that changes, the subprocessor list changes first.
Why we process it
To run the service you asked for: store events, derive and return memories, enforce limits, keep the service secure, and bill if billing is added.
Where it lives
Data is stored with our subprocessors, listed on the subprocessors page. [Regions to be confirmed.]
Retention and deletion
Memory content stays until you delete it or delete the project or organization. Forgetting a memory tombstones it at once and purges the text after a grace window (24 hours by default). The deletion ledger keeps hashes, not text. Demo accounts are deleted automatically after 8 hours.
Your rights
Depending on where you live you can ask to access, correct, export or delete your data. Write to [privacy contact email]. Memory owners can also use the API and dashboard to export and forget.
Changes
We will date every change on this page.