Privacy Policy

We collect information you provide directly, including your email address, account settings, profile details, workspace names, project content, prompts, uploaded files, conversations, saved context, comments, and support messages.

We also collect information created through use of the service, such as selected models, token consumption, feature usage, timestamps, device and browser details, log data, and error reports.

We use your information to provide Kahlo, route prompts to selected models, maintain conversation and project history, process billing, enforce plan limits, support your account, troubleshoot issues, prevent abuse, and keep the service secure.

We may use aggregated or de-identified information to understand usage patterns, improve performance, prioritize product work, and measure reliability.

Kahlo is a multi-model workspace. To generate responses, we send the prompts, files, conversation history, workspace context, and related metadata needed for the request to the provider of the model you choose.

Those providers process data according to their own terms, privacy policies, and enterprise or API settings. The exact provider depends on the model you select and the routing option configured for your account or workspace.

If you add your own provider API keys, we store them encrypted at rest and use them only to send requests to the corresponding provider on your behalf. You can remove or replace your keys through the product.

Requests made with your own keys may also appear in your provider account logs, billing records, and usage dashboards according to that provider's settings.

We use administrative, technical, and organizational safeguards designed to protect your information, including access controls, encryption for sensitive secrets, monitoring, and separation between user workspaces.

We limit access to personal data to people and systems that need it to operate, secure, support, or improve Kahlo.

We retain account information, workspace data, conversations, files, logs, and billing records for as long as needed to provide Kahlo, comply with legal obligations, resolve disputes, prevent abuse, and maintain backups.

When you delete content or request account deletion, we begin removing it from active systems. Some information may remain for a limited time in backups, security logs, billing records, or records we are required to keep.

We use cookies and similar technologies to keep you signed in, remember preferences, protect sessions, measure product usage, and understand how Kahlo is performing.

Depending on where you live, you may have rights to access, correct, export, restrict, object to, or delete personal data. You can contact us through the product or the contact channel associated with your account to make a request.

We may need to verify your identity and account ownership before completing a request.

We work with service providers that help us run Kahlo, including hosting, database, authentication, analytics, payment, email, storage, security, and customer support providers. They may process personal data only as needed to provide services to us.

Kahlo is not directed to people under 18, and we do not knowingly collect personal information from them. If you believe a child has provided personal information to Kahlo, please contact us so we can review and remove it.

We may update this Privacy Policy as Kahlo changes. When updates are material, we will take reasonable steps to notify you through the product or another appropriate channel.

Questions or requests about privacy can be sent to the Kahlo team through the product or the contact channel provided with your account.