Privacy Policy

Kloud Konnect is operated by Bryan Tinsley ("we", "us", "our"). This policy explains what data we collect when you use konnect.klaudii.com (the "Service"), how we use it, and your rights.

1. What We Collect

When you sign in with Google:

• Your Google account ID, email address, and display name
• A session cookie to keep you signed in

When you pair a server:

• The server name you choose
• An Ed25519 public key generated on your machine (used to authenticate your server to the relay)
• A last-seen timestamp (updated each time your server connects)

What we never collect:

• Your Connection Key — it is generated on your machine, displayed only in your local Klaudii dashboard, stored only in your browser's localStorage, and never transmitted to our servers
• The content of any API requests or responses — all payloads are AES-256-GCM encrypted end-to-end before reaching the relay
• Browsing history, IP address logs, or usage analytics

2. How We Use Your Data

• Email and name — to identify your account and associate paired servers with you
• Public key — to verify your server's identity on each WebSocket connection (challenge-response authentication)
• Session cookie — to keep you signed in across page loads

We do not sell, share, or use your data for advertising or any purpose beyond operating the Service.

3. Data Retention

Your account and paired server records are retained until you delete them. You can unpair a server at any time from your local Klaudii dashboard, which removes the server record from our database. To request full account deletion, email privacy@klaudii.com.

4. Third-Party Services

• Google OAuth 2.0 — used for sign-in only. We receive your basic profile (email, name, Google ID). Google's use of your data during sign-in is governed by Google's Privacy Policy.
• Fly.io — the relay server is hosted on Fly.io infrastructure in the US. Fly.io may retain server access logs for operational purposes. See Fly.io's Privacy Policy.

5. Security

All traffic to konnect.klaudii.com is encrypted in transit via TLS. API payloads are additionally encrypted end-to-end using AES-256-GCM with HKDF key derivation — the relay cannot read them even if compelled to. Session cookies are httpOnly and secure.

6. California Residents (CCPA)

California residents have the right to know what personal information we collect, request deletion of their data, and opt out of sale of personal information. We do not sell personal information. To exercise your rights, contact privacy@klaudii.com.

7. EU and UK Residents (GDPR / UK GDPR)

If you are in the EU or UK, we process your personal data on the legal basis of contract (providing the Service you signed up for) and legitimate interest (security and abuse prevention). You have the right to access, correct, export, or erase your personal data, and to object to or restrict processing. To exercise these rights, contact privacy@klaudii.com. If you believe your rights have not been respected, you may lodge a complaint with your local supervisory authority.

8. Children

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top will reflect any changes. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For privacy questions or data requests: privacy@klaudii.com