Privacy, plainly.

• Your account: your email address, the name you give us (optional), and the products you tick when you sign up.
• Sign-ins: for each signed-in device, its IP address, browser and operating system, and when it was last active. You can see this list in the console under Settings.
• API keys: a one-way hash of each key (we can’t read the key back), its first characters so you can tell keys apart, its name, and when it was last used.
• Usage and billing: what you run, for how long and where, so we can bill you by the second; and your billing details, which our payment processor holds. We never see your full card number.
• This website: page views, counted without cookies and without building a profile of you.

We don’t look inside your machines, volumes, code, weights or datasets, and we never use them to train models. See Security for how that’s enforced.

• To run your account: signing you in, sending sign-in, confirmation and password emails, and showing you your devices and keys.
• To run and bill the GPUs, endpoints and storage you use.
• To keep Koi safe: stopping bots and abuse, and investigating security problems.
• To email you about your account and service changes. No marketing email unless you opt in.

The console sets a cookie that keeps you signed in, and a short-lived one while you sign in with GitHub or Google. Both are strictly necessary, so there’s no banner. This website sets none. The console’s sign-up and sign-in pages load Cloudflare Turnstile to tell people from bots; it runs in its own frame and looks at signals from your browser, under Cloudflare’s privacy policy.

We share data only with companies that help us run Koi, only what they need, under contract:

• Vercel: hosting for this website and the console, and cookieless page analytics.
• Neon: the database that holds accounts, sessions and keys.
• Resend: delivers sign-in and account emails.
• Cloudflare: bot protection on sign-up and sign-in.
• GitHub and Google: only if you sign in with them. They tell us your name, email address and profile picture. They also give us a token we never use, which we keep encrypted.
• Stripe: payments.
• Nebius: runs the GPU machines you launch, and so holds whatever you put on them.

We don’t sell personal data, and we don’t share it for advertising.

• Sign-in links work once and expire after 15 minutes. Links to choose a new password work once and expire after an hour. Links to confirm your email expire after 24 hours.
• A signed-in session ends after 7 days without use.
• When you delete your account, your account, sessions and API keys are deleted straight away. Billing records are kept for as long as tax law requires.

You can see and change your name in the console, sign out other devices, and delete your account under Settings. To get a copy of your data, correct anything else, or object to how we use it, email privacy@koicompute.co. We answer within 30 days.

If you’re in the EU or UK, you also have the right to complain to your data protection authority.

Our providers may process data outside your country, including in the United States. Where the law requires it, those transfers are covered by the European Commission’s standard contractual clauses or an equivalent safeguard.

Koi is for people 16 and older. We don’t knowingly collect data from anyone younger.

If this policy changes in a way that matters, we’ll email account holders before it takes effect. Koi Compute, Inc. is responsible for your data. Questions go to privacy@koicompute.co.