Security & Trust

Data we process

Depending on how you actually use your account:

• Messages sent in the chat and the context of the conversation
• Your project files, uploaded images and logos, and the websites you publish
• Your e-mail, name, plan and usage counters
• Error logs needed to keep the service running

The full list, with legal bases and how long we keep each item, is in the Privacy Policy.

AI models

To answer, Kaivo sends the useful part of your request and its context to the provider of the model used. Each provider applies its own terms. We don't sell your data and we don't use it for advertising.

Where it runs

• Chat and Byte: generation goes through Kaivo's servers, then the model provider.
• Website previews and the code playground run in your browser, inside an isolated frame.
• Kaivo CLI runs on your computer, in the folder where you start it. It asks before changing a file or running a command, and keeps your conversations in the project's .kaivo folder. If you add your own API key, it stays on your computer.

Account

Sign-in is handled by Supabase Auth: Kaivo doesn't keep a separate password database. Your session is a cookie on our domain. You can sign out of every device from your account settings.

Payments

Subscriptions go through PayPal. Card details are handled by PayPal and never stored by Kaivo.

Deletion

You can delete a conversation or a project yourself. To delete your whole account and its data, write to kaivo-support@kaivoia.site. The request is handled by hand.

Service providers

Reporting

Report a security problem to kaivo-support@kaivoia.site. To report illegal content on a published website, use the report page. There is no paid bug bounty program.