1. Introduction

This privacy policy ("Policy") describes how Kryptonote Labs ("Company", "Kryptonote", "we", "us") collects, uses, and shares personal information of users ("you", "your") of this website, Kryptonote (https://www.kryptonote.com), the "Site".

2. Information We Collect

We collect only the information that we require to run this service. When creating an account we receive:

1. Your name
2. Your email address
3. Your IP address and device session information

When signing in we may also receive data from Google OAuth and Clerk authentication services such as your email and account identifier. Clerk handles user registration, login, session management, and account security controls. Your authentication data is processed in accordance with Clerk's Privacy Policy and Terms of Service.

Paid plans are processed through Clerk Billing and Stripe, who acts as an independent payment controller, meaning we never store or have access to full payment card information.

We use your account details to authenticate you and to save your preferences and data associated with your account, which includes, but is not limited to:

1. Settings such as dark mode
2. Your documents you upload
3. Messages you send to the AI chatbot
4. AI generations related to your documents We also log the IP addresses of your sessions in order to prevent the abuse of our platform and to ensure your account security. You can view all active sessions in your account settings at https://accounts.kryptonote.com/user/security

We do not sell user data to any advertisers or third party companies.

3. Locally stored data

Your browser may store some data locally, for things like:

1. Keeping you signed in (via Clerk)
2. Storing your theme preferences
3. Improving the performance of the site. You can clear these inside your browser at any time, though features may reset when you do.

4. Analytics and Usage Tracking

To understand how Kryptonote is being used, we use Google Analytics and our own internal usage metrics. These tools collect information such as device type, page visits, and general interaction patterns. Some of this data is linked to your account in order to give you the best possible experience and to help us resolve issues, to keep your account secure, and to prevent abuse of our systems.

OpenRouter is used for inference, and we have enabled Zero Data Retention, though your content may be processed by the underlying model providers during inference.

5. Data Sharing

We share minimal data with some third party providers in order to give you the best possible experience through the operation of this website:

• Cloudflare - for file storing, serving and security (https://www.cloudflare.com/privacypolicy/)
• Stripe - for payment processing (https://stripe.com/privacy)
• Clerk - for authentication services (https://clerk.com/legal/privacy)
• Google - for analytics and optional OAuth sign-in (https://policies.google.com/privacy)
• Convex - for storing your user generated content (https://www.convex.dev/legal/privacy)
• Vercel - for hosting the website (https://vercel.com/legal/privacy-policy)
• OpenRouter - for providing AI inference (https://openrouter.ai/privacy)

These services receive only the data to fulfil their roles. Under their respective data processing agreements, these services may not use your data for their own marketing purposes.

6. User Generated Content

You can upload files to Kryptonote, which are stored in Cloudflare R2. Your uploaded files are accessible only to you, both in their original form, and the processed plaintext markdown format.

Your AI messages and generations such as podcasts and videos are stored in Convex.

All paid accounts will have their data stored for the duration that you keep your account open with us.

Inactive free accounts will have their data deleted after 6 months.

7. Your Rights

As a user, you have the right to request your data be deleted.

7.1 Your Rights (UK/EU)

As a UK/EU resident, you are protected by UK/EU data protection law. You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Review active sessions and revoke access for unrecognized IP addresses
• Request deletion of your account and related data

If you request deletion, we will remove your data within thirty working days and confirm via email.

To make a deletion request, contact privacy@kryptonote.com.

8. Updates

We reserve the right to change this Privacy Policy at any time. If we make any material changes to this Privacy Policy, we will post the revised version to our website and update the “Effective Date” at the top of this Privacy Policy. Except as otherwise indicated, any changes will become effective when we post the revised Privacy Policy on our website.

We encourage you to check this Privacy Policy periodically, and if you do not agree to it, you may cease your usage of the Site.

9. Contact

If you have any questions about this privacy policy, please let us know at the email below.

Email: privacy@kryptonote.com