Privacy Policy

1. Introduction

Welcome to Koubou's Privacy Policy. At Koubou, a product of AtMyBase LLC ("we," "our," or "us"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what we collect, how we use it, and what we do not collect, when you visit koubou.tools and use Koubou.

Please read this Privacy Policy carefully. If you do not agree with it, please do not access our website or use our services.

2. The Short Version

This is a property of how Koubou is built rather than a policy commitment we could quietly change: the application has no server-side store for your content to go to. It also means some things are your responsibility, which section 7 covers.

3. Information We Collect

3.1 Account Data

Koubou accounts are created with Google authentication. From that sign-in we receive and store:

• Your name, as provided by your Google account.
• Your email address.
• The date and time of your last sign-in.

We do not create, receive, or store a Koubou password. Authentication is handled by Google.

3.2 License Data

We store the license fields associated with your account, such as whether a license is active and which purchase it relates to, so that Koubou can validate your access.

3.3 Encryption Key Material

If you save an AI provider API key in Koubou, that key is encrypted on your device. The encrypted key stays in your browser's local storage; only a wrapping key is held in our service. Neither half is useful on its own, and we never receive your provider API key in plaintext.

3.4 Payment Data

Purchases are processed by our reseller and merchant of record, Polar Software, Inc. ("Polar"). Polar collects the billing and payment details required to complete your purchase and to apply tax. We do not receive or store your card number or full billing details. Polar's handling of that data is governed by Polar's own privacy policy.

3.5 Website Usage Data

Our web host processes standard technical request information, such as IP address, browser type, and requested page, in the ordinary course of serving this website and keeping it secure.

3.6 Support Correspondence

If you email us, we hold that correspondence and the address you sent it from so we can reply and keep a record of the issue.

4. What We Do Not Collect

To be explicit, we do not collect, store, or have access to:

• The documents, projects, notes, sketches, or images you create or import in Koubou.
• Your prompts, roles, artifacts, blueprints, workflows, design systems, or any other tool you build.
• Your AI provider API keys in plaintext.
• The content of your AI requests or the responses you receive.
• The contents of your backups, including those written to your own folder or to your Google Drive.

5. Data That Leaves Your Device at Your Direction

Koubou is local-first, but it is not sealed off. Certain actions you choose to take send specific content to a third party. Those transfers go to that party rather than to us, and are governed by their terms and privacy policies:

• AI providers. When you run a prompt, the resolved prompt and the context you selected for it are sent to the provider you configured, such as OpenRouter. If you use a local Ollama instance, that request does not leave your machine.
• Google Drive. If you enable Drive backup, table snapshots of your workspace are written to a hidden application folder in your own Drive. That folder is not visible in your Drive interface and is not readable by us.
• Google Docs. If you import or export a document, that document's content passes between your browser and your Google account.

Koubou does not send your stored work anywhere automatically. Each of the above happens because you asked for it.

6. How We Use Your Information

We use the limited information described in section 3 to:

• Create and maintain your account and validate your license.
• Process your purchase and any refund, through Polar.
• Respond to your support requests.
• Send you administrative messages about your purchase or account.
• Keep our website and licensing service secure and working.
• Comply with legal obligations.

We do not sell your personal information, and we do not share it for advertising purposes.

7. Your Responsibility for Your Own Data

Because your workspace is stored in your browser, it is subject to your browser. Clearing your browser data, using private browsing, or moving to a new machine can leave your work behind, and we cannot recover it for you because we never had a copy.

Back up your workspace before clearing browser data or changing machines. Koubou provides a downloadable complete backup, an optional automatic backup to a folder on your machine where your browser supports it, and optional automatic backup to your Google Drive. Note that Drive backup covers table data but not browser-managed image files, so a Drive-only restore will not restore those images.

8. Disclosure of Your Information

We may disclose the information we hold to:

• Service providers who operate parts of our service on our behalf, such as our payment reseller, authentication provider, web host, and email provider.
• Legal authorities, where required to comply with a court order, law enforcement request, or applicable regulation.
• A successor entity, in connection with a merger, acquisition, restructuring, or sale of assets.

Because we do not hold your creative work, it is not ours to disclose in any of these situations.

9. Data Security

We implement appropriate technical and organizational measures to protect the personal information we hold. Provider API keys are encrypted on your device with a split-key arrangement, so a breach of our service would expose only one half of that pair. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Data Retention

We retain your account and license information for as long as your account exists, and afterwards only as long as needed to satisfy legal, accounting, or reporting requirements. Support correspondence is retained for as long as it is useful for handling your issue and our records.

11. Your Privacy Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate personal information.
• Delete your personal information.
• Restrict or object to our processing of it.
• Receive your personal information in a portable form.
• Withdraw consent where processing is based on consent.

To exercise any of these, contact us using the details in section 15. Your creative work is not covered by these requests because we do not hold it; it is already in your possession and Koubou can export it for you at any time.

12. Cookies and Similar Technologies

Koubou uses browser storage on your device for the application itself: to keep your workspace, your settings, and your signed-in session. This is functional storage, not tracking, and it is not transmitted to us.

Our sign-in and checkout providers set their own cookies as part of authenticating you and processing a purchase.

13. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have done so without verified parental consent, we will take steps to remove it.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date above. Where changes are material, we will make a more direct effort to notify you.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, contact us at [email protected].