Privacy policy

This policy covers kiteware.com and every Kiteware product: Kiteware Cloud, Kiteware Web, Kiteware Email, and Kiteware Agents, including the Kiteware Agents iPhone app. It is written in plain English on purpose. If anything here is unclear, email hello@kiteware.com and a person will answer.

What we collect

• Your account. Your name, email address, and a hash of your password. We never store the password itself.
• What you run with us. The databases, caches, storage buckets, containers, websites, mailboxes, and agents you create, their configuration, and the data inside them. That data is yours; we only process it to provide the service.
• Operational data. Resource metrics (CPU, memory, restarts), build and runtime logs for your containers, health-check results, and an audit trail of actions taken on your account. Metrics are kept for a short rolling window (seven days by default); logs and audit events for as long as the instance exists.
• Connected services. If you connect a GitHub account, we store the installation identifier and use short-lived tokens to clone your repositories. We never store your GitHub password.
• Billing. Payments for every Kiteware product are handled by Stripe. We keep a customer identifier and your subscription status; card details never touch our servers.
• Forms on this site. If you request an invite or join a waitlist we keep your email address, the product you asked about, and anything you wrote in the message box, so a person can reply.

Kiteware Agents

Kiteware Agents runs AI agents for your business, which we call Kits. If you use them, we also hold the following. Each item is kept for the period shown, then deleted automatically.

• Your business profile. The description of your business and the answers you give when you set up an agent. Kept while you have the agent.
• Agent email. Mail sent or forwarded to an agent's address, and the replies you approve. Kept for 12 months. Mail we quarantine as suspicious is kept for 30 days.
• The agent's notes and work. What an agent has learned about your business and the drafts it has prepared. Kept while you have an account.
• Activity records. Your feed, the approvals you gave or refused, requests you made, and an audit trail of what each agent did: 12 months. Records of each agent work session: 90 days. Usage records, used for billing: 24 months.
• Keys you add. If you give an agent access to another service, the key is encrypted on your device before it is sent, and only Kiteware's systems can use it. The agent never receives it. You can revoke a key at any time, which deletes it.
• The iPhone app. A device token so we can send you notifications when something needs your approval.

A small number of Kiteware staff can access the systems that run agents, and only do so to operate the service or fix a problem. Deleted data can remain in our encrypted backups for up to 35 days before it is overwritten.

Cookies

We set one cookie: a signed session token that keeps you logged in across kiteware.com and its subdomains, including Kiteware Agents on the web. It contains your account id and email, is not readable by other sites, and expires when you sign out or it times out. We do not use advertising or cross-site tracking cookies.

Who else sees your data

We use a small number of providers to run the service, each only for the purpose listed:

• Stripe for payments.
• Anthropic, whose Claude models design and edit Kiteware Web sites and run Kiteware Agents. What an agent works on is sent to Anthropic to be processed. Anthropic keeps this data for up to 30 days and does not use it to train its models.
• Postmark to deliver mail to and from agents' email addresses. Postmark keeps messages for up to 45 days.
• Apple to deliver notifications to the iPhone app and to distribute the app through TestFlight.
• Resend for transactional email such as alerts and replies to your requests.
• GitHub for repository access you authorise.
• Cloudflare for serving this website, Kiteware Web sites, and the connection between the Kiteware Agents app and our servers.

We do not sell your data or share it for marketing.

Email you'll get from us

Alerts you configure, replies to requests you make, and notices about your account or changes to pricing. No newsletter unless you ask for one.

Your choices

• You can export your data at any time: database backups, your website files, and mailboxes in standard formats.
• You can delete an agent from the app or the web. Its scheduled work and email address stop at once, and its notes are deleted.
• You can delete any instance yourself from the dashboard; its data is removed with it.
• To delete your account, or to ask what we hold about you, email hello@kiteware.com from your account address. We act on deletion requests within 30 days.

Changes

If this policy changes in a way that affects you, we'll email your account address before the change takes effect.