How Kryden handles personal information

Your device. Local Agent content and state are stored under your operating-system account. Kryden cannot remotely erase your device. Optional Brain, Cloud, support, or connected-service features can transmit selected content off the device.

Kryden Cloud. A managed workspace may place Agent content, files, runtime state, connection material, and operational logs on a workspace-scoped DigitalOcean VPS connected through Cloudflare.

Kryden HQ. HQ and the control plane maintain identity, workspace, security, entitlement, billing, Cloud, integration, workflow, Telegram, support, and service records. They are not merely pointers to data stored elsewhere.

Kryden Brain. Brain sends the prompt and the context, tools, files, and other inputs needed for a request to a model provider and receives the response and usage information.

Connected services. Telegram, Pipedream, and providers you connect process data under their own terms and retention practices in addition to Kryden's handling described here.

Kryden does not use Customer Content to train generalized artificial-intelligence models unless you expressly opt in.

Human review of Customer Content is limited to circumstances reasonably needed for a support request you initiate, security or abuse investigation, legal obligation, or service operation that cannot be completed automatically.

For Kryden Weekly, checking the consent box requests a confirmation email from Brevo. You are not added to the newsletter list unless you click the confirmation link. We use the confirmed email address to send the newsletter, and each newsletter includes a way to unsubscribe and withdraw consent.

When you use the current Kryden-managed Brain path, Kryden sends request content to OpenAI under Kryden's provider account. Kryden currently sends Responses API requests with store: false. That setting is not a universal zero-retention promise: provider abuse-monitoring or legally required records may still apply.

OpenAI's current API data controls state that API data is not used to train models by default unless the customer opts in, and describe the retention that can apply to abuse-monitoring logs. A provider-account mode, when available, is also governed by your relationship with that provider.

We may also disclose information to professional advisers; to authorities or other parties when required by law or reasonably necessary to protect rights, safety, security, or service integrity; and to a successor in a merger, financing, reorganization, or sale subject to applicable safeguards.

Kryden does not currently sell personal information for money or use the public website for third-party behavioral advertising.

We retain information only for as long as reasonably necessary for the purpose for which it was collected, including providing the service, maintaining security and billing records, resolving disputes, enforcing agreements, and meeting legal obligations. The period depends on the data, account and service state, provider terms, and applicable law.

For Kryden Weekly, Brevo retains subscription and consent records while the subscription is active. After you unsubscribe or otherwise withdraw consent, Kryden and Brevo may retain limited consent and suppression records as needed to honor that preference, avoid sending further newsletter email, and document when and how consent was obtained.

A request to "forget" an item removes it from the active Agent memory where that function is supported. It does not by itself delete a conversation, local workspace, managed Cloud workspace, HQ account, billing record, security log, backup, Telegram record, or information held by another connected provider.

Desktop and Cloud histories do not automatically merge. Exporting or deleting one environment does not automatically export or delete another environment or provider. Local data remains on your device until you remove it; Kryden cannot remotely erase it. Residual copies in backups, security logs, provider systems, or records subject to legal holds may remain until deleted under the applicable lifecycle.

Kryden uses technical and organizational measures intended to limit access and protect information, including scoped and revocable sessions, credential protection appropriate to the credential's role, workspace boundaries, approval controls, and provider access controls.

No service can guarantee perfect security. Protect your devices and passkeys, use the narrowest practical permissions for connected accounts, and promptly report suspected unauthorized access to [email protected].

Depending on where you live and subject to applicable exceptions, you may have the right to:

• • Request access to or a copy of personal information we hold about you.
• • Request correction of inaccurate personal information.
• • Request deletion, subject to identity verification and permitted legal, security, billing, fraud-prevention, backup, and operational exceptions.
• • Request portability, restriction, or objection where applicable law provides those rights.
• • Request information about categories of personal information, sources, purposes, and categories of recipients.
• • Opt out of sale or sharing where applicable. Kryden does not currently sell personal information for money or use the public website for cross-context behavioral advertising.
• • Withdraw newsletter consent at any time by using the unsubscribe link in a Kryden Weekly email.

To make a privacy request, email [email protected]. We may need to verify your identity and, for an organization or authorized-agent request, your authority. We will not discriminate against you for exercising an applicable privacy right.

Agent prompts, memory, files, and connected accounts can contain sensitive information. Unless Kryden has expressly agreed in writing to support a regulated use, do not submit protected health information subject to HIPAA, full payment-card or authentication data, biometric templates, highly sensitive government identifiers, export-controlled data, or regulated financial or education records.

Do not use Kryden to make or materially determine employment, credit, housing, insurance, healthcare, education, government-benefit, or legal-rights decisions unless Kryden has expressly approved that use in writing and the legally required safeguards are active.

We may update this Privacy Policy as our services or legal obligations change. We will update the date and version above and provide additional notice when required. If a change materially expands how we use Customer Content, we will seek consent when required rather than treating a page view as consent.

For privacy questions, requests, or concerns, contact [email protected].