Kochi is a composable AI workspace for prompts, skills, tools, structured outputs, MCP server configs, eval and test data, traces and logs, files, variable sets, and API payloads. This policy applies to our public website, self-serve accounts, and business customers. If you have a negotiated enterprise agreement with data processing terms, those terms control contractual processing obligations for the covered services.
Questions can be sent to support@kochi.so, including requests that require postal contact.
Information We Collect
- Account and contact data: name, email address, organization, role, login credentials, authentication data, and related profile details.
- Customer Content: prompts, skills, tools, structured outputs, MCP server configurations, eval and test data, traces, logs, files, variable sets, API payloads, messages, attachments, and any other content you upload, create, or process in Kochi.
- Billing, support, and marketing communications: purchase records, invoices, payment status, subscription history, support requests, product feedback, and optional email preferences.
- Usage and device data: IP address, browser and device information, pages viewed, feature usage, timestamps, crash data, diagnostics, and log data.
- Cookies and product analytics: information collected through essential cookies and analytics or performance tools that help us measure usage and keep the service reliable.
How We Use Information
- Provide, maintain, secure, and personalize Kochi.
- Authenticate users, process payments, and administer accounts.
- Operate support, send service notices, and answer product questions.
- Measure product performance, troubleshoot issues, and improve reliability.
- Send marketing communications when allowed by law and your preferences.
- Comply with legal obligations, enforce terms, and prevent abuse or fraud.
Service Providers and Subprocessors
We use service providers and subprocessors to run the service and support business operations. Depending on the feature you use, they may include Vercel, Neon, WorkOS, Mailmodo, Amplitude, Helicone, Braintrust, Sanity, OpenAI, Anthropic, and Google (including Gemini services).
These vendors may process personal information on our behalf only for the purposes we authorize, such as hosting, authentication, observability, analytics, support, content management, communications, and AI model access.
We do not sell personal information or share it for targeted advertising. Product analytics are used to understand and improve Kochi, not to run cross-site ad profiling.
Third-Party AI Providers
Kochi can send Customer Content to third-party AI providers when you select or configure them in the product. That may include providers such as OpenAI, Anthropic, or Google/Gemini, as well as other providers you connect through Kochi.
We do not use Customer Content to train, fine-tune, or improve AI or machine learning models, including third-party models, unless the customer gives explicit written opt-in. When a provider receives content on your instructions, it processes that content to provide the requested service, subject to the applicable provider terms and your configuration.
Retention and Security
We keep personal information for as long as needed to provide the service, comply with law, resolve disputes, enforce agreements, and maintain backups or audit records. Retention periods vary by data type, account status, and legal requirement.
We use administrative, technical, and organizational safeguards designed to protect personal information, but no system is perfectly secure. Please use strong passwords and keep your account credentials confidential.
Your Privacy Rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to object to or restrict certain processing. You may also have rights related to email marketing and cookie preferences.
To exercise privacy rights, email support@kochi.so. We may need to verify your identity before acting on a request.
Children
Kochi is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us and we will take appropriate steps.
International Transfers
Kochi is operated from the United States. If you use the service from outside the United States, your information may be transferred to and processed in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.
Updates and Contact
We may update this policy from time to time. If we make material changes, we will post the updated policy and revise the effective date.
Related documents: Terms, Cookie Policy, DPA, Subprocessors, Responsible Disclosure.