1. Information We Collect
When you use KYA Labs, we collect:
- Account information: Email address, name, and hashed password (bcrypt)
- Agent metadata: Agent names, domains, allowed/denied actions, monetary limits, trust scores
- Verification logs: Action name, verification outcome (pass/fail), error codes, latency, timestamp
- API key metadata: Key name, usage count, plan tier (we never store full API keys)
- Technical data: IP addresses for rate limiting (not persisted), request timestamps
2. What We Do NOT Collect
- The content or payload of your AI agent's actions
- Prompts, responses, or any LLM input/output
- End-user data processed by your agents
- Full API keys (only a SHA-256 hash is stored)
3. How We Use Your Data
- To authenticate your identity and authorize API access
- To compute trust scores from verification history
- To display analytics and audit trails in your dashboard
- To enforce rate limits and prevent abuse
- To improve the Service and fix bugs
4. Data Storage & Security
All data is stored in encrypted-at-rest databases. Passwords are hashed using bcrypt. Agent private keys are stored as encrypted blobs. API communication is encrypted via TLS 1.3 (HTTPS only, enforced by Caddy with automatic certificate renewal).
5. Data Sharing
We do not sell, rent, or share your data with third parties. We may share data only:
- When required by law or legal process
- To protect the security of the Service
- With your explicit consent
6. Data Retention
Verification logs are retained for 90 days by default. Account data is retained as long as your account is active. You may request deletion of your data by contacting us.
7. Your Rights
You have the right to:
- Access your stored data via the dashboard and API
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Export your verification logs
8. Cookies
We use localStorage to persist your authentication token. We do not use tracking cookies or third-party analytics.
9. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated revision date.