1. Overview
Klow (“we,” “our,” or “us”) operates klow.info and the Klow platform. This Privacy Policy explains how we collect, use, and protect your information when you use our services.
2. Information We Collect
- Account information: Email address used to create your account.
- Agent data: Messages, tasks, and reports generated by your agents. This data is stored on our servers and used solely to provide the service.
- Integration credentials: API keys and tokens you provide to connect third-party integrations are encrypted at rest using AES-256-GCM.
- Wallet data: Each agent's crypto wallet private key is encrypted at rest. We do not have the ability to move funds without your explicit approval.
- Usage data: Token usage, credit consumption, and feature usage are tracked for billing and product improvement purposes.
- Analytics: We use PostHog to understand how users interact with our product. No personally identifiable information is shared with PostHog beyond anonymous session identifiers.
3. How We Use Your Information
- Providing and operating the Klow platform
- Processing payments via Stripe
- Sending transactional emails (magic link, onboarding, billing receipts)
- Improving the product through aggregated, anonymized analytics
- Responding to support requests
We do not sell your data. We do not use your agent's conversation data to train AI models.
4. Data Storage & Security
- All data is stored on servers in the United States (Neon Postgres, Render, Upstash Redis).
- All API keys and wallet private keys are encrypted at rest using AES-256-GCM.
- All traffic is encrypted in transit via TLS 1.2+.
- Each agent runs in an isolated container with no access to other users' data.
- Authentication is handled via email magic links and optional Google OAuth — we never store passwords.
5. Third-Party Services
We use the following third-party services to operate Klow. Each has its own privacy policy.
- Stripe — payment processing
- Resend — transactional email delivery
- Render — cloud hosting for agent containers
- OpenRouter — AI model inference (your agent's conversation content is sent to AI model providers via OpenRouter)
- Neon — database hosting
- PostHog — product analytics
6. AI Model Providers
When your agent processes a request, that request is sent to an AI model provider (such as Anthropic, OpenAI, or Google) via OpenRouter. The AI model provider receives the conversation content as input. Please review the privacy policies of the model provider your agent uses.
7. Data Retention
- Active account data is retained while your account is active.
- When you cancel your subscription, your agents are suspended immediately. Your account data is retained for 30 days, after which agent containers and their data are permanently deleted.
- You can request immediate deletion of your data by contacting hello@klow.info.
8. Your Rights
You have the right to access, export, correct, or delete your personal data. Contact us at hello@klow.info and we will respond within 30 days.
9. Cookies
We use session cookies to maintain your authenticated state. We use PostHog cookies for product analytics. We do not use advertising cookies.
10. Changes to This Policy
We will notify you of material changes to this policy via email. Continued use of the service after notification constitutes acceptance of the updated policy.