Privacy Policy
Last updated: July 2026
What we collect
Account data (name and email, via Google or email sign-in), the content you upload or shorten, basic usage events (page views, clicks), and technical data such as IP address for security and rate-limiting.
Why we use it
To run and secure the service, prevent abuse, understand usage, and measure which channels bring sign-ups (marketing attribution).
Cookies
A session cookie to keep you signed in, a first-party analytics cookie (koi_attr) to attribute your first visit, and — if ads are active — Google’s click id (gclid). No other third-party advertising cookies.
Where your data lives
On servers in the EU, run by us: the database and storage are our own, on machines we rent from European hosting providers in Germany, with an encrypted offsite copy at a European object-storage provider (EU region). The full list of sub-processors is available on request. Processors we use: Cloudflare (DNS, network protection and the sign-up anti-bot check), Google and GitHub (only if you sign in with them; Google Ads only if active), Stripe (payments, if you subscribe) and an email provider for codes and notifications.
Assistants you connect (ChatGPT, Claude, MCP)
If you connect an assistant to koigrid, it acts as you with only the permissions you approve, in the organization (and project) you choose. It receives what its tools return: names, status and URLs of your apps, databases and caches; your app logs; your usage and spend; and database host, port, database name and user — never your database password, API tokens or other secrets. We do not receive your conversations with the assistant. For each action we keep which tool was used, whether it worked and how long it took, without its arguments; the action also appears in your audit log. The assistant’s tokens are stored hashed and expire; you can disconnect it at any time in Settings → API tokens, which revokes it immediately. What the assistant does with that information is governed by its provider’s own privacy policy.
Your rights (GDPR)
You can access, correct, export or delete your data and object to processing. Email [email protected] and we’ll help.
Retention
Anonymous uploads and links expire automatically (hours to 90 days). Account content is kept until you delete it. Logs are kept for a limited period for security.
Contact
Data controller: koigrid ([email protected]), Spain (EU).