Privacy Policy
This Privacy Policy explains what information Krumart, Inc. ("Krumart," "we," "us") collects through bot.kru.ai (the "Service"), why, and the choices you have.
1. Information We Collect
Account information: your email address and a hashed password (or, if you sign up via a connected account in the future, whatever that provider shares).
Content you create: messages you send, agent personas and instructions you write, skills and routines you save.
Connected accounts: if you connect Gmail, Slack, Discord, Telegram, Facebook, or LinkedIn, we store an encrypted access token so the Service can act on your behalf within the scopes you approved. We do not store your password for those services — the connection is made through each provider's own OAuth login.
Usage data: which model handled a request, token counts, and computed cost, so we can show you usage and enforce plan limits.
Billing information: if you subscribe to a paid plan, Stripe processes and stores your payment details. We receive your subscription status and a Stripe customer/subscription ID — never your full card number.
2. How We Use It
- To operate the Service — running your conversations, agents, routines, and connector actions
- To enforce plan limits and calculate usage/billing
- To maintain security, including detecting abuse of the API or approvals flow
- To communicate with you about your account or changes to the Service
We do not sell your personal information, and we do not use your message content to train models we don't control.
3. AI Processing
When you message an agent, the relevant conversation content is sent to Anthropic's Claude API to generate a response. This is a processing relationship, not a data sale — Anthropic processes this content to return a response to your request.
4. Sharing With Connected Third-Party Services
Actions you approve through the Service — sending an email, posting a message, publishing a share — are carried out through that third party's own API (Gmail, Slack, Discord, Telegram, Facebook, or LinkedIn), using the token from your connection. That's a direct result of your own approval, not something we do independently.
5. Data Retention
We retain your account data and conversation history for as long as your account is active, so agents can keep their memory. You can disconnect a third-party account at any time, which stops future access; you can request deletion of your account and associated data as described below.
6. Security
Connected-account tokens and API keys are encrypted or hashed at rest. Sessions are cookie-based and marked secure/HTTP-only. No method of storage or transmission is 100% secure, but we design the Service to minimize what's exposed if any one piece is compromised — for example, we never store an API key in a form we could read back.
7. Your Rights
You can access and update most of your information directly in Settings. To request a copy of your data, or deletion of your account, email hello@kru.ai — see also our Privacy Choices page.
8. Children's Privacy
The Service isn't directed to children under 16, and we don't knowingly collect personal information from them.
9. Changes to This Policy
We'll update the "Last updated" date above whenever this policy changes materially.
10. Contact
Questions about this policy? Reach us at hello@kru.ai.