Privacy Policy

The short version

• We collect the account details you sign up with, and the content you choose to put into the product.
• Your content is sent to an AI model provider so the assistant can answer you. It is not used to train anyone's models.
• We do not sell your personal information, and we do not share it with advertisers.
• You can delete your account, and everything in it, from inside the app.

What we collect

• Account information. Your email address, and your name and profile image if your identity provider supplies them. Authentication is handled by Clerk; we never see or store your password.
• Content you provide. Whatever you put into the product — messages you send the assistant, documents and files you upload, and the records the app is built to keep for you. In Vouch that means resumes, cover letters, the jobs you are tracking, and offers you record. In other apps it is the equivalent domain data for that app.
• Connected accounts. If you connect a third-party account (for example a mail account), we store the access tokens needed to act on your behalf and the data you ask the agent to work with. You can disconnect at any time.
• Technical and diagnostic data. IP address, device and browser type, and request logs, kept for security, abuse prevention and debugging.
• Payment records. If you subscribe, Stripe processes the payment. We receive the subscription status and the last four digits and brand of the card; we never receive your full card number.

Our mobile apps contain no third-party advertising or analytics SDKs. The website uses PostHog and Google Analytics to measure traffic.

How we use it

• To provide the product: to run the assistant, store your work, and show it back to you.
• To send you the messages the product exists to send — for example a match email you asked for, or a notification you enabled.
• To keep the service secure and working, and to investigate abuse.
• To bill you, if you are on a paid plan.
• To contact you about the service itself.

We do not use your content for advertising, and we do not sell it.

AI processing

Komodo is built on large language models. When you use an assistant, the relevant parts of your conversation and your stored content are sent to a model provider to produce a response. We currently route model requests to Google (Gemini) and Anthropic (Claude) through Cloudflare's AI Gateway. These providers process the request to return an answer; under our agreements with them, your content is not used to train their models.

Who we share it with

We use a small set of processors, each for a specific job:

Processor	What it does
Cloudflare	Hosting, compute, storage, and AI request routing
Clerk	Sign-in and account management
Google (Gemini) / Anthropic (Claude)	Model inference for assistant responses
Neon	Database hosting for some products
Stripe	Subscription payments
Resend / Postmark	Transactional and product email

We also disclose information if the law requires it, or to protect our rights or someone's safety. If Komodo Agents Inc is ever acquired, information may transfer as part of that transaction; you would be told first.

Retention

We keep your content for as long as your account exists, because the product's job is to remember it for you. Request logs are kept for up to 90 days. When you delete your account we delete your content and your identity record; backups and billing records required for tax and accounting purposes may persist for a limited period.

Your choices

• Delete your account. Every Komodo mobile app has Settings → Delete account, which removes your data and your sign-in identity. It cannot be undone.
• Access, correction and export. Email ryan@komodoagents.ai and we will help.
• Notifications. Turn them off in the app or in your device settings.
• Connected accounts. Disconnect at any time from inside the app.

If you are in the EEA or UK, our legal bases are contract (to provide the service you asked for), legitimate interests (security, product improvement), and consent where required. If you are in California, we do not sell or share personal information as those terms are defined by the CCPA, and we do not discriminate against you for exercising your rights.

Security

Data is encrypted in transit and at rest. Credentials and third-party tokens are held in a dedicated secret store, never in application code. Access to production systems is limited to the people who need it.

International transfers

We operate from the United States, and our processors may handle data in the United States and other countries. Where required, transfers rely on Standard Contractual Clauses.

Children

Komodo products are not directed to children under 13, and we do not knowingly collect their information. If you believe a child has given us data, email us and we will delete it.

Changes

If we change this policy materially we will update the date above and, for significant changes, notify you in the product or by email.

Contact

Komodo Agents Inc — ryan@komodoagents.ai. See also our Terms of Service and Support page.