Privacy notice
Who we are and what this covers
Knylab Pte Ltd, 160 Robinson Road, #14-04 SBF Center, Singapore 068914 ("we") runs Kenhold Cloud at account.kenhold.app and cloud.kenhold.app. This notice says what personal data we hold about you there, why, where it lives, and what you can ask of us. kenhold.app, our website, has its own notice.
For what's inside a workspace, its owner's organization decides what goes in and who sees it. We handle that content only on their behalf and as they instruct.
What we collect and why
| What | Where it comes from | Why we need it | How long we keep it |
|---|---|---|---|
| Your email address and sign-in codes | You, on the start page and when signing in | To let you in and contact you about your account | Codes for 10 minutes. Your email until you close your account |
| Your place on the early-access or waiting list, and our notes about your request | You, and us | To decide who gets a workspace and when | Until you close your account |
| Facts about your workspace: its name, owner, creation date, counts of members and items, storage used | Your workspace | To run the service and plan its size | While the workspace exists |
| Your profile in Kenhold: name, email, preferences | You | To show who did what in your workspace | While you're a member |
| Your workspace's record of who did what | Kenhold, as you and your agents work | So your admins can see every change, as the product promises | While the workspace exists |
| Technical logs: your network address, your browser, request times and errors, never content | Our servers | Security, abuse prevention and fixing problems | 30 days |
| Anonymous crash and usage reports, if we turn them on | Kenhold, under an id that can't be traced back to you | To find what's broken or slow | 90 days. You can turn them off in your settings |
We use only the cookies Kenhold Cloud needs to keep you signed in. There's no advertising and no tracking across sites, and we never sell personal data.
Your workspace's content
- We don't read it. Our team has no way into a workspace through the app unless its people invite us, and we never read it through the database.
- Support needs your written OK. If you ask us to look at something, we do so only with the workspace owner's written OK, signed in as ourselves through the app. That visit shows in your workspace's record like anyone else's.
- No training, no selling. We never use your content to train AI models, and never sell or share it.
- AI features you turn on: if you connect an AI model provider, your content goes to that provider only for the request you made, under your agreement with them. Kenhold Cloud sends nothing to a model unless a feature you turned on says it does.
- Backups: your content is in our encrypted backups for up to 7 days after you change or delete it.
Where it lives and who helps us
Kenhold Cloud runs in Amazon Web Services' Singapore region. Your data is stored there, encrypted at rest, and backed up there.
| Who | What they do for us | What they see |
|---|---|---|
| Amazon Web Services | Runs our servers, databases, file storage and backups, in Singapore | Encrypted data at rest. They don't read it |
| Cloudflare | Our domain names, protection of our network, and the emails we send, such as sign-in codes and invitations | Your network address and request details as traffic passes through, and the email address and text of messages we send you |
We'll update this list before we add anyone, and tell you by email if the change matters.
Deleting: when a workspace is deleted, its content is gone from our servers at once and from our backups within 7 days. When you close your account, we remove your email from our lists. We keep a record that the account was closed, with your email replaced by a one-way code.
Your rights
You can ask us to:
- show you the personal data we hold about you;
- correct it;
- delete it, by closing your account;
- give it to you in a file you can take elsewhere. Your workspace's admins can also export the workspace from Kenhold at any time.
Write to [email protected] and we'll answer within 30 days. Depending on where you live, you may also complain to your data protection authority.
Security
Data is encrypted in transit and at rest. Every sign-in is checked by our server, and sessions can't be read by the page. Our admin tools sit behind several locks and only one person can use them. Every act in a workspace is recorded where nobody can change it. If a breach affects your personal data, we'll tell you without undue delay.
Changes and contact
We'll email you at least 30 days before a change that matters to you. Questions go to [email protected].