Kin Privacy Policy
This Policy explains how ThinkingDBx Private Limited ("we") handles personal data in Kin. It adds to the ThinkingLanguage Privacy Policy, which covers your account and billing. We act as the data controller for account data and as a processor for the content you bring to Kin.
1. What Kin processes
- Agent setup: each kin's name, goal, instructions, schedule, triggers and permissions.
- Task data: the instructions you give, the steps a kin takes, the results of its tools (including rows from your data sources and text from web pages), its answers, and your approvals and feedback.
- Files: files you upload or a kin creates, and screenshots of web pages it opens.
- Memory: short notes a kin keeps between tasks, from your feedback or its own work. You can view, edit and delete them.
- Incoming messages: emails sent to a kin's address (including sender address and attachments) and webhook payloads.
- Usage and security data: task counts, AI token usage, timestamps, IP addresses and logs needed to run, bill and secure the Service.
2. Why we process it
To perform tasks you ask for (performance of our contract with you), to secure and improve the reliability of the Service and prevent abuse (legitimate interests), to bill you, and to meet legal obligations. We do not sell personal data and we do not use your data to train AI models.
3. Who receives it
- AI model provider: task content is sent to the model that powers the kin. For the included model this is currently Groq, Inc. (United States). If you connect your own AI key, content goes to that provider instead.
- Search engines and websites: when a kin searches the web, its query is sent to search engines through our search service; pages it opens receive a normal web request.
- Destinations you set up: Slack channels, email recipients, webhooks and apps you connect, when a kin sends to them (with your approval unless you allow it).
- Infrastructure providers: our cloud server and email hosting providers, under contract.
- Paddle.com Market Ltd: for payments (see the ThinkingLanguage Privacy Policy).
Some of these providers are outside India, so your data may be transferred internationally. We use contractual and technical safeguards for these transfers.
4. How long we keep it
Kin, tasks, files and memory are kept until you delete them or delete your account. Deleting your account deletes them. Encrypted-at-rest backups are kept for up to 14 days and then overwritten. Security logs are kept for a limited period.
5. Security
We use TLS, encryption of stored credentials, optional two-factor sign-in, sandboxed execution of code, network controls that stop kin from reaching internal systems, and approval before actions that change things. No system is perfectly secure; tell us at contact@thinkingdbx.com if you find a vulnerability.
6. Cookies
Kin uses one essential cookie to keep you signed in. It does not use advertising or analytics cookies.
7. Your rights
Depending on where you live (including under India's Digital Personal Data Protection Act, 2023 and the EU/UK GDPR), you may have the right to access, correct, delete or export your personal data, to withdraw consent, and to complain to a regulator. You can delete kin, tasks, files, memory and your account in the app. For anything else, or to reach our grievance officer, email contact@thinkingdbx.com.
8. Children
Kin is not intended for people under 18.
9. Changes and contact
We'll post updates here and notify you of material changes. Data controller: ThinkingDBx Private Limited (CIN U62011TS2025PTC206211), Hyderabad, India. Contact: contact@thinkingdbx.com.