Privacy policy

Kudu (“we”) makes the Kudu Connect browser extension, the Kudu Desktop app and this website. This policy says what data each of them handles, why, where it goes, how long we keep it and how you can delete it. Short version: nothing leaves your device until you ask Kudu to do something, we never sell data, and you can delete everything by emailing us.

1. What we collect, and when

Account

When you sign in with Google we receive your name, email address and profile picture, and we create an account keyed to your Google ID. We store a session token in your browser (extension storage) or on your computer (Kudu Desktop) for 30 days so you stay signed in.

Content you send to the assistant

Only when you act: ask a question, run a check, capture an area, start an Act task, add a source, or start Kudu Pilot in a meeting. Depending on the feature this is the text you typed, the selected text, the current page's URL, title and visible text, a screenshot of the area or window you chose, documents or links you add, and, for Kudu Pilot, the audio of the call while it is on. The extension does not read pages in the background and does not record your browsing history.

Writing assistant

Grammar and spelling checks send the paragraph you changed to our server, cache the result for 15 minutes and do not write your text to a database. We keep counts (words checked, issues fixed) for your stats, not the words themselves. Words you add to your personal dictionary are stored with your account.

History, memories, skills and sources

Conversations, the memories the assistant extracts (facts you tell it that help later answers), the skills you save and the sources you add are stored with your account so they follow you across devices. All of them are visible and deletable in your dashboard.

Kudu Desktop

Kudu Desktop reads the screen, the window under your cursor and the apps it is asked to act in only during a task you started, and sends what the model needs for that step. Meeting transcripts and notes are saved on your computer in the app's data folder and, when you choose to, to your account. The app never uploads files from your computer unless a task you gave it requires reading them.

Technical data

Our server logs request metadata (time, endpoint, status, rough region, extension version) for reliability and abuse prevention, and keeps rate-limit counters per account and IP address for a few minutes. We use no advertising trackers anywhere.

Usage statistics (Google Analytics and PostHog)

To learn which features help and which break, Kudu counts feature use with Google Analytics 4 and PostHog: for example “the panel was opened”, “a chat was sent”, “an Act task finished after 7 steps”, the app version and operating system. The extension and Kudu Desktop send these counts through our server, which removes anything that looks like text, an address or a web link before passing them on, with a random install id and, when you are signed in, a one-way hash of your account id - never your name or email. Page content, what you type, answers, file names, your screen, audio and the sites you visit are never part of it. You can switch it off in the extension (Settings → Privacy) and in Kudu Desktop (Settings → Desktop). This website uses Google Analytics and PostHog for page views, clicks, page speed and errors on its public pages. PostHog also records anonymous session replays of those pages (every form field is masked; nothing is recorded when your browser sends Do Not Track). All of it is turned off on your dashboard and account pages.

2. Why we use it

• To produce the answer, check, rewrite, summary or action you asked for.
• To keep your history, memories, dictionary and preferences in sync across your devices.
• To enforce plan limits, bill paid plans and prevent abuse.
• To find and fix problems when something fails.

We do not use your content to train our own models, do not profile you for advertising, and do not use any data to decide creditworthiness or for lending.

3. Where it goes (service providers)

• Our server (Kudu Core) on Vercel (United States) receives every request and stores account data.
• Neon (PostgreSQL) stores accounts, sessions, conversations, memories, skills, sources, dictionary, preferences and stats.
• Google Gemini API generates the answers: the content of your request is sent to Google's models.
• Deepgram and Groq transcribe meeting audio for Kudu Pilot, only while a meeting session is on.
• Upstash (Redis) holds rate-limit counters and the 15-minute writing-check cache.
• Brave Search, DuckDuckGo and Wikipedia receive only the search query when a request needs web research.
• Stripe handles payment for paid plans. We never see your card number; Stripe sends us your plan status and a customer ID.
• Google Analytics and PostHog receive the anonymous usage counts described above, never content. PostHog also receives the masked session replays of this website's public pages.

We share data with no one else. We disclose data only when the law requires it or to protect against fraud or abuse of the service.

4. Chrome Web Store user data policy

Kudu Connect's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. The extension requests access to pages so it can read and act on the page you are on when you ask it to; it collects page content only for that purpose, does not transfer it to anyone except the providers listed above to produce your answer, and never sells it or uses it for advertising. Humans at Kudu do not read your content except with your consent to resolve a support request, or when required for security or by law.

5. Retention and deletion

• Conversations, memories, skills, sources and dictionary: until you delete them or your account.
• Screenshots, page text and audio sent for a request: processed in memory to produce the answer and not kept.
• Writing-check results: cached for 15 minutes.
• Sessions: 30 days, or until you sign out.
• Server logs: 30 days.
• Billing records: as long as tax law requires.

Delete history and memories from the dashboard at any time. To delete your account and everything attached to it, email kuduagents@gmail.com from the address you signed in with; we delete it within 7 days and confirm. Uninstalling the extension or the app stops all collection immediately; data already on your account stays until you ask us to delete it.

6. Security

Every request travels over HTTPS or WSS. Data at rest is encrypted by our providers (Neon, Upstash, Vercel). AI provider keys and all other secrets live on our server and are never bundled into the extension or the app. Sessions use opaque, revocable tokens. The extension's code sandbox, which the Act agent uses to reshape data it extracted, runs in an isolated page with no network and no access to your browser.

7. Your rights

Wherever you live you can ask for a copy of your data, correct it, delete it or object to a use of it, by email. If you are in the EU/EEA, the UK or Switzerland, you also have the right to complain to your data protection authority. We process your data to perform the service you asked for (contract) and to keep it secure (legitimate interest).

8. Children

Kudu is not directed to children under 13 and we do not knowingly collect their data.

9. Changes

We update this page when our practices change and show the date at the top. For material changes we notify you in the extension or by email before they take effect.

10. Contact

kuduagents@gmail.com. See also our terms of service.