Privacy Policy

• Account details: your name, email address and a hashed password, or your Google profile name and email if you sign in with Google.
• Your workspace: the agents you create, your conversations with them, files you upload or they create, their memory and notes, automations, and settings.
• Connected apps: if you connect an app (such as Gmail or Slack), the data your agents read from or send to it while doing what you ask.
• Keys you add: API keys or passwords you store for your agents are encrypted, and are only used for the tasks you set up.
• Billing: your plan, payments and invoices. Card, UPI and other payment details are collected and held by Kelviq, our merchant of record (or Creem, for subscriptions started through it before); we never see your full card number. To show the right currency and payment methods at checkout, Kelviq receives your email address and IP address.
• Usage and technical data: how much AI usage your agents consume, sign-in times, device and browser type, IP address, and error logs, to run, secure and bill the Service.

We don't sell your personal data, we don't show ads, and we don't use your content to train AI models.

• to run your agents and the features you use, and keep your workspace in sync across your devices;
• to bill you correctly and prevent fraud and abuse;
• to keep the Service secure and fix problems;
• to answer your support requests and send important account or service messages;
• to meet legal obligations.

We share data only with the providers needed to run the Service, and only what they need:

• AI model providers (such as DeepSeek and OpenRouter): the messages and context your agents send to generate replies. If you connect your own AI provider, your agents use that provider instead.
• Kelviq: checkout, payments, taxes and invoices, as our merchant of record. Creem did this before and still does for subscriptions started through it.
• Composio: secure connections to the apps you choose to connect, only when you connect them.
• Google: sign-in, only if you choose to sign in with Google.
• Our cloud hosting provider: the servers that store your workspace and run your agents.

KutrimBots is operated from India, and our providers may process data in other countries, including the United States and the European Union. We choose providers that protect data with appropriate safeguards.

Data is sent over encrypted connections (HTTPS). Passwords are hashed, stored keys and secrets are encrypted at rest, and every request is limited to your own workspace. Sign-in sessions use secure, HTTP-only cookies. No method is perfectly secure, but we work to protect your data and fix issues quickly.

We keep your workspace data while your account is active. You can delete agents, conversations, files and memory at any time, and they're removed from the Service.

If you close your account, we delete your workspace and its data. We keep payment and tax records, and limited logs, for as long as the law requires.

We use a cookie to keep you signed in, and your browser stores your light or dark theme choice. We don't use advertising or third-party tracking cookies.

You can ask to access, correct, export or delete your personal data, or object to how we use it, by emailing support@kutrimbots.com from your account's email address. We reply within 1 business day and complete requests within 30 days. You can also complain to your local data-protection authority.

KutrimBots isn't meant for anyone under 18, and we don't knowingly collect data from children. If you think a child has given us data, contact us and we'll delete it.

We may update this policy. We'll change the date at the top, and tell you by email or in the app about significant changes before they take effect.

Privacy questions or requests: support@kutrimbots.com.