Privacy Notice
This notice explains how CYANKIWI LTD handles your personal data when you use cyankiwi or contact us: what we collect, why, for how long, who receives it, and your rights. We are the controller for the data described here. Data protection questions, rights requests and complaints go to privacy@cyan.kiwi.
When personal data is included in content you send to the Service, we process it on your behalf under the Data Processing Addendum.
Inference content
Prompts and responses from the shared inference API and your Deployments are not stored, except that an error message, which can contain limited request data, is kept in our logs for 180 days. We do not use your content to train models.
Workspace agent conversations
Conversations with the workspace agent are kept until you delete the conversation from your history or close your account, and leave our backups within the backup cycle, which is 7 days. They are protected by automated safeguards, and may be reviewed by our staff to prevent abuse.
What we store
| Data | Purpose | Retention |
|---|---|---|
| Account data: email address, account identifier, sign-in method, and for Google sign-in the display name and profile photo | Sign-in and account management | Until you close your account |
| API key records: key hashes, names and limits | Authentication and rate limiting | Until you delete the key or close your account |
| Workspace conversations | Conversation history; preventing abuse | Until you delete the conversation or close your account |
| Deployment records: the settings you chose and their status | Running your Deployments | Until you close your account |
| Per-request usage metadata: usage, cost, timing and status of each request | Billing, service metrics, abuse prevention | 180 days |
| Infrastructure logs: IP address, browser details, requests and errors, with no request or response bodies | Operations, debugging and security | 180 days |
| Billing and tax records: purchases, charges, refunds, balance, billing name and address, tax ID and location, and tax charged | Billing, accounting and tax | As long as required for accounting, tax and legal purposes |
| Saved payment method: a reference to it, its card brand and last four digits, and your auto-reload settings | Refunds and auto-reload | Until you remove it or close your account |
| Correspondence: messages you send us and our replies | Answering you, handling requests, complaints and legal matters | Until the matter is closed, then as long as required for legal purposes |
Why we process it
- Contract: running your account, API keys, Deployments, conversation history, billing and support.
- Legitimate interests: security, abuse prevention, service metrics, answering questions and establishing or defending legal claims. You can object at any time.
- Legal obligation: accounting and tax records, and responding to rights requests and lawful demands.
An email address is needed to open an account; payment details are needed only to buy Credits.
Who we share it with
- Companies that help us run the Service, such as IT, email and payment services, listed on the sub-processor register. Some are outside the UK; transfers to them are protected by adequacy regulations or standard data protection clauses, a copy of which you can request from privacy@cyan.kiwi.
- Authorities, where the law requires it or where necessary to prevent serious harm.
We do not sell personal data or use it for advertising.
Your rights
You can ask for access to, correction or deletion of your personal data, a portable copy of it, or restriction of its processing, and you can object to processing based on legitimate interests. Email privacy@cyan.kiwi from the address your account uses. We respond within one month, or up to three months for complex requests, in which case we tell you within the first month.
To close your account, email us from its address. We then delete your account data, including conversations and Deployment records, within one month, except records we must keep for accounting, tax or legal purposes.
If you are unhappy with how we handle your data, email privacy@cyan.kiwi. You can also complain to the Information Commissioner’s Office (ico.org.uk) or your local data protection authority.
Cookies and local storage
We use no advertising, analytics or third-party tracking cookies. We store only your sign-in state, the email address for a sign-in link until the sign-in completes, and cached public data so pages load faster.
Children
You must be at least 18 to hold an account, and we do not knowingly collect personal data from children.