Trust
Trust is not a badge we can put on a page. It comes from saying what we do, what we do not do, and what we cannot promise.
Honest limits
- We are a small Australian business. We will not invent an uptime figure, a team size or an award we cannot stand behind.
- This is not an emergency service. Do not rely on the assistant for anything urgent or safety-critical.
- AI can be wrong. The assistant's output is generated by AI models. Check anything important before you act on it.
- It is not a web host. Your box runs the assistant, not apps or sites that serve other people.
- When we do not know something, we say so. A few questions to the AI model providers are still open, and the Privacy note marks them unresolved rather than pretending otherwise.
Who can access what
Your data sits on your own server. Our job is to stay as far away from it as we reasonably can.
The honest part, said plainly: the box is rented and managed by us, in our own hosting account, and we hold support access to it, including root. We do not go inside your box on our own initiative.
| We can see | We do not look at |
|---|---|
| The health of your server: disk, memory, whether the assistant is up. | Your files or your conversations with the assistant. They live on your box, and we leave them alone. |
| Your plan, credit balance and top-ups. | Your card number. Our payment provider holds that; we never see it. |
| That your service exists and whether it is running. | Your work. We do not use it for any purpose of ours. |
- Support access happens when you ask. If a problem needs someone to look at your box, we do it with your request in front of us. Not quietly, and not on a whim.
- Keys stay with us and off your box. The AI provider keys live in our own secret store. They never go onto your server and are never shown to you.
- Access is logged, as far as it goes today. Every request we make, every approval you give, every pass we issue and every pass we withdraw is written to a record we cannot edit, and that record is what a summary to you would be built from. The part that is not finished is the machine's own side: the session log, and the lock that would make your approval the only way in, are installed on our own template machine and not yet on a machine built automatically. [to be confirmed: what the access log shows and how a customer can ask to see it]
- We still hold a key that works without asking you. A standing support key is on the machine, it is in Tal's secret store, and until the switch to approval-only passes has been made and recorded we will not pretend your box can refuse us. What stops us using it is our own rule, written above, and the record we keep, not the machine.
Getting your data out
Your data is yours. Email [email protected] any time and ask for a copy, or ask us to delete it, or both. You do not have to give a reason.
- We get your export to you as quickly as we can. [to be set by a lawyer: the number of business days we commit to here]
- We send it the way you ask, and never through an unencrypted public link.
- A copy of your data, and closing your account, are both done by a person here. Ask the assistant and it will tell you to email us, or email us directly. There is no form to fill in either way.
Leaving, and what happens to your data
Cancel whenever you like: email [email protected] and we stop it. Cancelling stops the next charge. No lock-in, no minimum term, no exit fee. The assistant cannot close an account itself, so a person here does it and writes back to confirm.
- When your account ends we keep your data for 30 days, in case you come back or need a copy.
- After those 30 days we delete it, including the backups. Gone, not just switched off.
- Want a copy during those 30 days? Ask and we will get it to you.
- Afterwards we keep only billing and tax records, because Australian tax law requires it, plus a plain record that a deletion happened. No content, no keys. [to be set by a lawyer: how many years those billing and tax records are kept]
We will give you honest dates rather than say “instantly”, and we will tell you in writing when a deletion is done.
Backups and restores
Your server is backed up, encrypted, so it can be brought back if something goes wrong. By default we hold the backup key, which is what lets us restore your box for you.
If you would rather hold the key yourself, you can. Then the key is yours and not ours. The trade-off is real: if that key is lost, the box cannot be restored, not even by us. We will not pretend there is a way around that.
What a real launch still needs
We would rather launch late and honest than early and vague. These are still to be settled, and we are not hiding them:
- the business name, entity, ABN and address;
- the support email address and the domain;
- a lawyer's read of the Terms and Privacy note;
- written answers from the AI model providers about how they handle the content of a request;
- a written answer on whether the KJ assistant may be run commercially for paying customers.