Legal
Last updated: March 27, 2026
When you create a kavachOS Cloud account, we collect your email address, name, and organization name. When you use the platform, we collect usage data including API call counts, agent activity metadata, and error logs.
We do not collect or store your end users' passwords. Authentication credentials are hashed using PBKDF2 with 600K iterations and never leave your tenant database.
We use your data to operate the kavachOS Cloud service, send you account notifications, and improve the platform. We do not sell your data to third parties. We do not use your data to train AI models.
We use essential cookies for authentication and session management. We use analytics cookies (Plausible) to understand how people use the marketing site. Plausible is privacy-focused and does not use personal data or cookies for tracking.
kavachOS Cloud runs on Cloudflare infrastructure. Payment processing is handled by Stripe. Transactional emails are sent through Resend. Each of these providers has their own privacy policy.
Account data is retained while your account is active. Audit logs are retained according to your plan tier (7 days to 1 year). You can request deletion of your account and all associated data at any time by emailing hello@kavachos.com.
Questions about this policy? Email us at hello@kavachos.com.