kifork

Privacy policy

Last updated: 2026-09-29

kifork is a tool for small teams to plan their project as a visual map with the help of an AI agent. This policy explains what data we process, why, with whom, and what your rights are. It is written to be read in full in five minutes.

1. Who is responsible

The data controller is codiget. Contact for anything related to your data: contact@kifork.com.

2. What data we process

  • Account: your email address; your name and profile picture if you sign in with Google (or the name derived from your email if you sign in with a link). If you join a project, the roles you choose.
  • Your projects' content: project name and goal, tasks (titles, descriptions, statuses, owners, dates), connections between tasks, the project brief written by the agent, the conversation with the agent and its proposals, and who approved or rejected each one.
  • Agent usage: for each action, how many tokens it used, how long it took and whether it succeeded. We do not keep the text sent to the model beyond the project's own conversation.
  • Technical data: IP address, browser and time of each request in server logs (deleted automatically within days), and the cookies described below.
  • Payment (Pro plan only): handled by Lemon Squeezy as merchant of record. We never see or store card numbers; we receive the subscription status and an identifier from them.

3. What we use it for

  • Providing the service: identifying you, storing your projects, syncing them in real time with your team and sending the emails needed to sign in (sign-in link, code).
  • Making the agent work: the project's content is sent to the AI model provider so it can classify, ask, draw or review. Only the project you are working on is sent.
  • Enforcing plan limits and preventing abuse (agent quotas, task and member caps, request rate).
  • Charging for the Pro plan and handling support requests.
  • Complying with legal obligations.

The legal bases are the performance of our contract with you (providing the service), our legitimate interest in keeping it secure and available, and your consent when you sign in with Google.

4. Who sees your data inside kifork

Only the members of each project see its content: the map, the conversation with the agent and the other members' names, pictures and roles. Nobody outside the project can access it, and the system checks this in the database on every request. Your email address is not shown to other members.

5. Providers that process data on our behalf

We use third-party services under contract that process data only to provide their service to us:

  • Supabase (database, identity and real time; servers in the United States): stores everything listed above.
  • Railway (application hosting): runs the server and keeps temporary technical logs.
  • Groq (AI model): receives the project's content when you use the agent. Under its terms, it does not use that data to train models.
  • Resend (email delivery): sends sign-in emails to your address.
  • Google (only if you sign in with Google): shares your email, name and picture with us.
  • Lemon Squeezy (Pro plan payments): acts as merchant of record and authorized reseller, and processes your billing data under its own policy.

Some of these providers are located outside your country. Where the GDPR applies, transfers rely on standard contractual clauses or equivalent mechanisms offered by those providers.

6. How long we keep it

As long as you have an account. If you delete your account or ask us to, we erase your personal data within 30 days at most. A project's content belongs to the project: if you leave, your tasks become unassigned but stay for your team; if the project is deleted, all its content is deleted. Technical logs are deleted within days; billing records are kept as long as the law requires.

7. Cookies

Only strictly necessary cookies: the session cookie (to know it's you) and the language cookie. No advertising or third-party tracking cookies. That is why there is no cookie banner: there is nothing to consent to.

8. Your rights

You can ask us for access to your data, to correct it, delete it, receive it in a readable format, restrict or object to its processing, and withdraw consent. Write to contact@kifork.com from your account's email and we will answer within 30 days at most. If you are in the European Union, you may also lodge a complaint with your data protection authority.

9. Security

Encryption in transit (HTTPS), database access restricted by row-level rules, secrets kept out of the code, and a documented security review. No system is infallible: if we detect a breach that affects you, we will notify you.

10. Children

kifork is for people aged 16 or older. We do not knowingly collect data from children; if you believe this has happened, write to us and we will delete it.

11. Changes

If we change this policy in a meaningful way, we will say so on the website and, if you have an account, by email. The date of the last revision is at the top.

← Back to home