Beta privacy notice
KitAxis is operated by ProductSeal. This notice explains what the beta collects, why, where it is stored, and how to get it or delete it. Questions: support@kitaxis.com.
What we collect and why
- Account data: your email address, email-verification status, and a sign-in identifier. Your password is handled by our sign-in provider and stored only as a hash. We use this to let you sign in and to keep the beta invite-only.
- Access records: the invitation issued to your email and when it was redeemed, which version of the beta terms you accepted and when, and your access status.
- Your content: workspaces, projects, plans and every plan revision, evidence recorded by you or your AI assistant, readiness checks, approvals and cancellations. This is the service you use.
- Usage counters: request and write counts used to enforce fair-use limits.
- Assistant connections: which AI assistant you approved, when, and the token records that let it act for you until you disconnect it.
- Technical data: IP address, request path and timestamps, used for security, abuse prevention and troubleshooting.
We do not sell personal data, and we do not use your content to train AI models. KitAxis itself makes no AI model calls with your content. Your AI assistant does that, under its provider's terms.
Service providers
- Google (Firebase Authentication): accounts, password handling, and verification and password-reset emails.
- Cloudflare: DNS, network edge and encryption in transit, the secure tunnel to our server, email routing for our support address, and uptime monitoring.
- Oracle Cloud Infrastructure: hosts the KitAxis server and database in the United States (San Jose region) during the beta.
- Microsoft OneDrive: stores encrypted off-site copies of database backups. The decryption key is not stored there.
How long we keep data
- Your account and content are kept while you have beta access, or until you delete your account.
- Deleting your account from "Your data" in the app removes your access immediately. Your workspaces are then permanently deleted after a 30-day recovery window, during which you can cancel. We keep only a minimal record that a deletion happened: a keyed hash of your email, dates and row counts.
- Backups are encrypted and kept for 14 days on our server and 30 days off-site, then removed. Deleted data can remain in a backup until that backup expires.
- Server logs roll over at about 50 MB.
- Beta resets: we may need to reset beta data. We will warn you first where we can.
Your choices
- Download a copy of your content at any time from "Your data" in the app.
- Delete your account from the same place, or ask us to correct your data.
- Disconnect an AI assistant from "Connected assistants" in the app.
- Depending on where you live, you may have further rights (for example under the GDPR or CCPA). Contact us to use them.
Security
Traffic is encrypted in transit (HTTPS), backups are encrypted, and access to the server is restricted. The app is invite-only and checks your access on every request. No system is perfectly secure. If a breach affects your data, we will tell you as the law requires.
Children
The KitAxis beta is not for anyone under 18.
Changes
We will post changes here and tell beta testers by email about material ones.