Privacy Policy

This Privacy Policy describes how Kourier AI Inc, a Texas corporation doing business as Kourier (“Kourier,” “we,” “us,” or “our”), collects, uses, and protects your personal data when you use kourier.sh, our inference endpoint, and the Cloud dashboard at app.kourier.sh (collectively, the “Service”).

1. Information we collect

Account data

When you create an account, we collect your email address and a password. Passwords are never stored in plaintext — they are hashed using a one-way function before being written to our database. We also store the display name you choose for your profile.

Social sign-in data

If you sign in with Google or GitHub, we receive the profile information those providers share with us — typically your name, email address, and a provider account identifier. We use this information to create and authenticate your account.

API keys

We store a hash and identifying metadata for each API key in our application database. Our inference gateway also manages the credential needed to authenticate requests. Treat API keys as secrets and revoke them in the dashboard if they are exposed.

Usage data

To operate the Service and enforce plan limits, we record request counts, token usage (including reported cache and reasoning counts), model selection, request timings, and rate-limit events against your account. This data supports your usage dashboard, troubleshooting, and capacity planning. Public performance reports contain aggregated measurements, not account or request identifiers.

Technical data

Our servers log standard request metadata such as IP addresses, timestamps, and user-agent strings. This information is used for security, abuse prevention, and troubleshooting.

Abuse-prevention records use keyed network and client pseudonyms, software categories derived from the user-agent, and network category and country derived from IP locally at request time, rather than raw IP addresses or user-agent strings. Our Data use & retention policy describes request-settings metadata, content-free hourly counts, daily account usage profiles, enforcement audit records, and their retention. These records are used to protect shared capacity and prevent abuse; they do not contain prompt or response content.

IP geolocation by DB-IP. We use locally loaded DB-IP Lite ASN and Country databases, licensed under Creative Commons Attribution 4.0 International (CC BY 4.0), to derive network categories and country. Categorization is our own processing of that data; DB-IP does not endorse it. These local lookups do not send request IP addresses or customer content to DB-IP.

Website analytics

If you accept analytics, we use Google Analytics across our website, Cloud dashboard, and documentation. We record your original landing path, referring website, campaign labels, and a random analytics identifier. After signup, we associate this with account creation, checkout, confirmed payments, and the first successful API request to understand which sources bring customers who use the Service. Google Analytics may also collect device, browser, and approximate location data. We do not send email addresses, API keys, prompts, completions, or full URL query strings as analytics event data, and we do not use analytics for targeted advertising.

2. How we use your data

We process your data to: provide and maintain the Service; authenticate your account and manage sessions; measure token usage and enforce plan rate limits; detect, prevent, and respond to fraud, abuse, and security incidents; communicate with you about your account; and comply with legal obligations. We do not use your personal data for advertising and we do not sell it.

Where applicable data-protection law requires a legal basis, we rely on performance of our contract to provide accounts, billing, and inference; legitimate interests to secure, troubleshoot, and operate the Service; legal obligations for required records and disclosures; and consent for optional analytics. You can withdraw analytics consent without losing access to the Service.

Kourier is the controller of account, billing, security, and consented analytics data. For personal data a business asks us to process in inference requests, Kourier acts as a processor or subprocessor according to the parties’ roles. The business is responsible for lawful instructions and any required controller authorization. A separately executed Data Processing Addendum governs that relationship where agreed.

3. Prompt and completion content

We do not use your API prompts or generated outputs to train or fine-tune models. Prompt and response content is excluded from inference gateway request logs. Requests are processed in memory, and serving infrastructure uses temporary inference caches. See our Data use & retention policy for details about inference content and operational records.

4. Data sharing

We do not sell your personal data. We share data only as needed to operate the Service, including with infrastructure providers, Google and GitHub when you choose social sign-in, Dodo Payments for subscription billing and payment processing, Resend for transactional email, Cloudflare for network and edge services, and Google Analytics for consented acquisition and usage analytics. Dodo Payments handles payment-card data directly; Kourier does not store complete card numbers.

We may disclose data to law enforcement or other third parties when required by a valid legal process, or to protect our rights, our users, or our infrastructure from harm.

5. Data retention

We keep your account data while your account is active. When you close your account, we delete personal data within a reasonable period, except for records we are required to retain, such as tax compliance records, and the security records described below. Retention periods for usage, security, support, and billing records depend on their purpose and applicable legal requirements. Backup copies are removed through the backup lifecycle rather than immediately on account deletion. Contact privacy@kourier.sh with questions about retention or deletion.

Request-level abuse-prevention telemetry is retained for 90 days. Hourly diversity counts are also retained for 90 days; daily account profiles are retained for up to 400 days. Account restrictions and their audit history are security records kept after an account closes, for as long as needed to handle disputes, prevent repeat abuse, and meet legal obligations. See the Data use & retention policy for the record categories and retention details.

6. Security

Passwords are hashed, never stored in plaintext. Traffic between your client and the Service is encrypted in transit. Access to production systems is restricted to authorized personnel. No method of transmission or storage is fully secure, but we apply safeguards appropriate to the sensitivity of the data and respond promptly to reported security incidents.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Receive a copy of your data in a portable format.
• Correct inaccurate or incomplete data.
• Delete your account and associated personal data.
• Restrict or object to certain processing.
• Withdraw consent for processing based on consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@kourier.sh. We may need to verify your identity and will respond within the period required by applicable law, explaining any permitted extension. We do not discriminate against users who exercise their privacy rights.

8. Cookies

The Cloud dashboard uses essential cookies to maintain your authenticated session. Your optional analytics choice is shared across our website, dashboard, and documentation for up to 180 days; the first-touch attribution cookie lasts up to 90 days. We also use an essential, signed cookie to honor analytics withdrawal after you log out. You can decline or change your choice through Cookie settings. Withdrawal stops collection in that browser and, once synchronized, removes the linked account attribution and local analytics events. Previously sent Google data is subject to its retention and our data-deletion process. Billing records remain where needed for accounting and payment reconciliation. We do not use advertising cookies or use analytics data for targeted advertising.

9. International data transfers

Kourier is a US company. Our infrastructure and service providers may process data outside your country. Standard subscriptions are not tied to a specific processing location. If you require particular locations or international-transfer terms, contact us before submitting the relevant data to discuss the applicable locations, safeguards, and contractual arrangements.

10. Children’s privacy

The Service is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe we have collected data from a minor, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy as the Service evolves. Material changes will be posted on this page with an updated “Last reviewed” date. For significant changes affecting how we process your data, we will notify you before the change takes effect.

12. Contact

For privacy questions, data requests, or to exercise your rights, contact privacy@kourier.sh. Kourier AI Inc, a Texas corporation, is responsible for the controller processing described above. For business processing terms, see our legal page.