Draft — under legal review.

Privacy Policy

Effective [Effective date]

Kumo is a computer in the cloud for you, your team and your AI agents. This page says what we keep about you, where it lives, and who else handles it. “Kumo” and “we” mean [Company legal name], [Registered address].

What we keep

• Your account. Signing in and the waitlist run on Clerk, which holds your email address and your sign-in details. We keep your email address, the name and profile picture Clerk gives us, and a sign-in token for each device, which expires after 7 days.
• Your computers. Who owns each one, its name, whether it is running, which machine it runs on and which version of our software it runs.
• Who you share with. The email address of everyone you share a computer with. If they have no Kumo account, Clerk emails them an invitation.
• Your SSH keys. The public keys you add, so we can install them on the computers you own or are a member of. You can remove them in Settings.
• Support. The first time you open Help, we create a contact for you in Chatwoot with your name and email address. Your messages are stored there.

What stays on your computer

Everything you do on a computer is stored on that computer: files, sessions and their transcripts, terminals, the connectors you add yourself, and the AI credentials (API keys and subscription tokens) its owner adds in that computer's Settings. Our database does not store any of it. When you open a computer's desktop or one of its preview addresses, the traffic passes through a proxy we run on its way to the computer, and the proxy does not store it.

Your computers are virtual machines run by Agent37, so their disks are on Agent37's infrastructure. As the operator we have administrative access to them through Agent37. [Say when, if ever, staff use it to look inside a computer.] When our support team needs to work on your computer, we ask you to share it with them, like any other member.

Everyone you share a computer with gets the whole computer: the same files, terminals and agent.

Connected apps

The owner of a computer can connect Gmail, Google Drive, Google Calendar, Slack, Notion, GitHub, Linear, Sentry or Stripe to it. You sign in to those through Composio, and Composio, not Kumo, holds the access. Agents on that computer use it through Composio. Disconnecting an app, or deleting the computer, revokes the access.

AI providers

Kumo does not provide AI models. The agents on your computer (Claude Code, Codex, opencode) talk directly to the provider you choose, such as Anthropic, OpenAI, Google or OpenRouter, under your own key or subscription. What you send them is covered by that provider's terms and privacy policy.

Cookies and your browser

• Clerk sets the cookies that keep you signed in.
• A computer's desktop and preview addresses use one cookie, __Host-kumo_grant, which proves you may open them. It lasts up to 7 days for the desktop and an hour for a preview.
• The web app keeps your settings, window layout and unsaved drafts in your browser's local storage.
• We use no analytics, advertising or tracking, on this site or in the app.

Who handles your data

• Clerk: sign-in, the waitlist, and invitation emails.
• Fly.io: runs our servers, in the United States.
• Neon: hosts our database.
• Agent37: runs the virtual machines your computers live on.
• Composio: holds the access for connected apps.
• Chatwoot: support conversations.
• Cloudflare: DNS for our domains.

The AI providers you connect act for you, under your own account with them.

Keeping and deleting

• Deleting a computer deletes its virtual machine at Agent37, and its disk with it, and revokes its connected apps. We keep no backups of computers.
• Removing a share or an SSH key deletes it. Removing an AI credential in a computer's Settings deletes it from that computer.
• There is no button to delete your account yet. Email us at [Contact email] and we will delete it, along with your computers.

Your rights

Email [Contact email] to ask for a copy of what we hold about you, or to have it corrected or deleted.

Changes

When this policy changes we will post the new version here and update its effective date.