Privacy
Privacy Policy
Effective: July 22, 2026
KRAIVOS follows a local-first model. Projects, media, browser sessions, and Google/YouTube OAuth tokens used by the installed app remain on the user's computer by default and are not uploaded to KRAIVOS public servers.
1. Scope
This policy applies to kraivos.com and the KRAIVOS Lite/Full installed software. The public website currently has no user accounts, payments, advertising trackers, or first-party analytics cookies.
2. Website inquiries
If you email us, we may process the name, email address, and message you provide to respond, review a partnership, and maintain necessary security records. We retain this information only as needed.
3. Data kept on your device
Projects, source and generated media, renders, settings, channel metadata, diagnostic logs, and Chromium profiles are stored in user-specific application and Documents/KRAIVOS locations. KRAIVOS does not request or store Google passwords, recovery email addresses, or verification phone numbers. Local logs expire automatically and must not contain OAuth codes, states, PKCE verifiers, tokens, or cookies.
4. Google and YouTube data
Initial connection requests youtube.readonly. Upload, management, and analytics permissions are requested separately when you use those features. Access and refresh tokens are encrypted locally using an operating-system-bound secret. Disconnecting revokes access and immediately deletes local authorized data; full local deletion also removes the channel record and dedicated browser profile while preserving your projects and media.
5. User-selected third parties
When you invoke Suno, Google, YouTube, or another AI/publishing service, the prompt, file, or metadata required for that action may be sent directly from your computer to that provider. Their terms and privacy policies apply. KRAIVOS does not relay account passwords.
6. Infrastructure and international processing
Cloudflare may process technical connection information to deliver and protect this website. Google/YouTube and other providers you select may process data in other countries.
7. Your choices
Use the in-app disconnect and local deletion controls, or contact contact@kraivos.com to request access, correction, or deletion of website inquiry records. See the Data Deletion page for details.
8. Security and changes
We apply minimum scopes, local storage, token encryption, isolated browser profiles, and sensitive-log masking. We will update this policy and its effective date when processing changes.