Cette politique explique les données traitées par Kashira, ce qui reste sur votre appareil et ce qui est transmis lorsque vous choisissez une fonction cloud.
Last updated September 22, 2026This Privacy Policy applies to the Kashira website, account dashboard, desktop application, Kashira Cloud, support channels, and collaboration services (together, the “Services”). “Kashira,” “we,” and “us” refer to the operator of those Services. This policy does not govern third-party websites, model providers, local model software, repositories, or services that you choose to connect.
We collect information you submit to operate an account or communicate with us.
Kashira creates limited operational records needed to deliver and protect the Services. Cloud-model usage records contain the selected model, token counts, estimated or provider-reported cost, billed credits, pricing version, and timestamp. They are not designed to contain prompt or response bodies. We may also receive ordinary server information such as request time, IP address, device or browser information, and error details through infrastructure logs.
Project files, editor state, local conversation history, Permanent Engineer journals, local model configuration, local crash reports, and many workspace preferences are stored on your device. Kashira does not receive that material merely because you open a project. Local crash reports are saved locally and are not uploaded automatically. Local data leaves your device only when you choose a feature that requires transmission, share it with another person, or send it to support.
When you choose Kashira Cloud, Kashira sends the prompt, selected project context, tool definitions, and any attachments required for the request through Kashira’s servers to OpenRouter and the selected model provider. Those parties process the content to return a result and apply their own terms and privacy practices. Kashira requests privacy-conscious routing where supported, but provider availability and retention controls vary. If you invoke web search or page-reading tools, the query or requested URL may also be sent to the configured search or website provider. Do not include secrets or personal data that are unnecessary for the task.
Permanent Engineer memory is stored in the project’s local Kashira data directory. Creating or refreshing a memory entry with a cloud model sends the evidence selected for that model request through the cloud path described above; using a local model keeps model inference local. Kashira Cloud collaboration stores room membership, roles, contracts, messages, and related project labels so invited teammates can see and act on them. Nearby Share and local-WLAN rooms may exchange material directly with devices you approve on the local network.
We use personal information only for legitimate product and business purposes.
We disclose information only as needed to operate the Services, at your direction, or when law requires it. Service providers include hosting and database vendors; Dodo Payments for billing; Resend for email delivery; Google for optional sign-in; OpenRouter and downstream model providers for cloud inference; and search providers when you invoke web tools. Collaboration content is visible to the room members you invite. We may also disclose information to professional advisers, in a corporate transaction, to protect users and the Services, or in response to valid legal process.
Kashira does not sell personal information and does not share it for cross-context behavioral advertising. The Services do not currently use third-party advertising trackers. We use device storage and similar technologies for authentication, security, preferences, and essential product operation. If those practices materially change, we will update this policy and provide any legally required controls.
Where data-protection law requires a legal basis, we process information to perform our contract with you, pursue legitimate interests such as security and service improvement, comply with legal obligations, and act on your consent where requested. You may withdraw consent for future processing, but that does not affect processing already completed or processing supported by another lawful basis.
We retain account and collaboration records while your account is active and for a reasonable period afterward when needed for security, disputes, or service recovery. Usage and billing records may be kept for accounting, fraud prevention, tax, and legal obligations. Verification and reset credentials expire by design. Local workspace data remains on your device until you delete it. When information is no longer needed, we delete, aggregate, or de-identify it where practicable. Backups and provider systems may take additional time to cycle out data.
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information, and to appeal or complain to a regulator. You may manage marketing consent, disconnect Google sign-in through Google, choose local instead of cloud models, adjust cloud privacy routing, delete local project memory, and leave collaboration rooms. To make a verified privacy request, contact kashira.ai.dev@gmail.com with the subject “Privacy request.” We will not discriminate against you for exercising an applicable right.
We use administrative, technical, and organizational safeguards appropriate to the nature of the information, including hashed passwords, expiring authentication and recovery credentials, access controls, and validation of billing webhooks. No system is completely secure. The Services and their providers may process information in countries other than your own; where required, we use legally recognized transfer mechanisms and safeguards.
The Services are designed for developers and professional work and are not directed to children under 13. We do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it where required.
We may update this policy as the product, providers, or law changes. We will update the date above and provide additional notice when a change is material. Questions and privacy requests may be sent to kashira.ai.dev@gmail.com or through the Contact page. Security vulnerabilities should be reported to kashira.ai.dev@gmail.com without including live credentials or private source code in the initial message.
