Privacy Policy

This policy explains what personal data Kurodyne LLC, a United States company, collects, why we collect it, who receives it, and how long we keep it. It applies to everyone who uses Kurodyne. The full policy follows; here is the short version:

• Optional profile details. An account needs a sign-in credential. We assign a public username you can change, and every other profile field is optional. See Account Information.
• Advertising measurement. We use campaign labels, ad cookies, and limited conversion reports to measure our campaigns. Reports to advertising platforms contain no email address, form text, or purchase details. See Advertising Measurement.
• Payment credentials stay with Stripe. You enter them in Stripe's form, and we never receive your full card number or other payment credential. See Payment Information.
• You can leave. Delete your account yourself at any time, and email support@kurodyne.com to exercise a privacy right. See Your Privacy Rights.

You can sign in with a Google account, an Ethereum or Solana wallet, or an email address and either a password or a one-time link we email you. We store your email address or public wallet address and authentication records, including a password hash if you use a password. When you use Google, we also keep the name and profile picture link Google provides with that sign-in record. Neither is shown on your public profile. We keep sign-in and security records, including authenticator details if you enable two-factor authentication.

We assign a random public username when your account is created, and you can change it in Settings. An avatar, an About field, a store name, and social links are optional.

If you buy, we keep a private record of what you bought, when, the transaction status, the download links we issued, and your current Watchlist. A purchase can also record whether you arrived through a tagged product link from the Operator or the Kurodyne Catalog MCP server. We keep your follows, review votes, and user blocks to provide those features. Reviews you write are public and carry your username.

If you sell, we keep your listings, uploaded files, product keys, support details, sales, and performance records so you can run your store. When you start connecting a Stripe account, we send Stripe your account email address so that Stripe can prefill its form. We receive your connected Stripe account identifier and status, and retrieve balance and dispute information when you use the relevant seller features. You verify your identity with Stripe, on Stripe's platform, and we never receive your identity documents.

If you invite a seller or accept an invitation, we record which account invited which, when the invitation was accepted, and whether it earned fee-free time under Fee-Free Programs (Terms of Use, Section 4.6). To decide that, we check whether the two accounts have ever connected the same Stripe account. We also keep a record of the fee-free time each seller earns, including any revocation and its reason.

We store messages you send through Kurodyne Relay, including images you attach, who sent and received them, the related product, and message and read times. We re-encode attached images, which removes embedded metadata such as location, and store them privately. The other participant receives your messages, images, and username, and while you have the conversation open, can see that you are online and when you are typing. We may access retained messages to handle support, disputes, and abuse. Messages are not public.

A seller can let an AI agent of their choosing answer buyers in Kurodyne Relay. Every message from a seller's agent is labeled as written by an AI agent, and the seller can step in at any time. When the agent hands a conversation to the seller, it can leave the seller a private note that the buyer never sees.

When a message is waiting for you, or a buyer is still waiting for your reply, we may email you a notice. A notice names at most the sender, the product, and whether a seller's AI agent wrote the messages, never includes message text, and links to Kurodyne Relay. You can turn these emails off in Settings.

You pay in Stripe's form on our checkout page, and the credentials you enter go directly to Stripe. We never receive or store a full card number, security code, or other payment credential. Stripe returns limited transaction metadata that we do store, such as the transaction identifier and payment status. To process payment, refund, and dispute events, we also temporarily keep their event and account identifiers, amounts, currency, receipt email, checkout identifiers and discounts, and relevant refund or dispute details.

We keep your billing country and, for US payments, ZIP code with the purchase record to determine sales tax.

Each sale is charged directly to the seller's own Stripe account. When you start a payment, we send that account your verified email address, the product, the amount, your Kurodyne account identifier, and any discount applied, and Stripe records there the payment method you enter in its form. The seller can see these details in the Stripe Dashboard, even if you do not complete the purchase. These details can include your payment method's type, brand, and last four digits, the billing details you enter, and Stripe's fraud-screening information, such as the approximate location of your IP address. Stripe does not show the seller your full card number or security code.

Stripe uses the email address to send its receipt. After a purchase, the seller can also download Kurodyne's purchase receipt, which shows your verified email address, the product, the amount, and any discount code used. See With Other Users.

We also record the IP address our servers observe when you start a payment and keep it for 180 days. We use it to prevent fraud and to answer questions about a disputed payment. We do not share this record with sellers.

When a buyer disputes a payment, we record the dispute so the sale, receipt, and access state stay accurate, and we show the seller the amount, reason, status, and response deadline.

We collect technical information from every visitor, with or without an account: your IP address, information about your browser and device, session data that keeps you signed in, records of the requests you make, and error and performance reports. This information keeps the service running securely and helps us diagnose problems.

Our analytics service counts page views and groups them into anonymous sessions. It receives the page address after we remove fragments and query values other than standard campaign tags, the referring page after the same filtering, the page title, browser language, screen size, IP address, and user agent. It uses that information to report approximate location, browser, operating system, and device statistics. It sets no cookies, and we do not attach an identifier for your account to its reports.

When you follow a campaign link, the analytics page view for that page includes its campaign labels: source, medium, campaign, content or ad variation, and keyword or search term. The labels do not create a browser or account identifier.

When you arrive through one of our ads, we may save that advertising platform's click identifier in a first-party cookie for 30 days. For an attributed conversion, such as completing your account signup, we report the click identifier, a random event identifier, the event type, and the request time to that platform. We keep the click and event identifiers reported for your signup with a record of that signup for 90 days, or delete them earlier with your account. Where a platform's browser tag loads, the tag also receives your IP address and browser connection details. We do not include your email address, form text, account information, or purchase details in those reports.

An advertising platform can link a report to your earlier ad click and processes it under its own privacy policy. These disclosures may count as sharing or targeted advertising under applicable privacy laws. We honor Global Privacy Control by withholding this tracking and its reports. You can also block or delete ad cookies using your browser controls.

When you use the Operator, we send your prompt, recent conversation text, limited page context, your time zone, and, when available, a summary of your browser and operating system through OpenRouter to xAI, or to Google when xAI cannot handle the request. At your request the seller Operator can read your own store records, including purchase records that identify buyers by username. It can also read your connected Stripe account's balance, account status, and dispute information. It includes what it reads in the request to the AI provider.

To operate and support the marketplace, we may send usernames, Kurodyne and connected Stripe account identifiers, email addresses, sign-in and account status, deletion details, listings, and transaction records to AI providers and connected clients. This processing can occur even if you do not use the Operator yourself.

The Operator can also search the web through a search provider. The model writes the search query itself, and that query can draw on what was asked and on records the Operator read earlier in the same reply.

OpenRouter sends copies of Operator model requests and responses to our error-monitoring provider so we can diagnose errors, performance, and output quality. These copies include the model's instructions, page context, and any tool calls and results in the model request or response.

The microphone control is optional. Your browser performs the speech recognition, either on your device or through the browser vendor's service, and gives Kurodyne only the resulting text.

The contact form collects a name, an email address, a subject, and a message so we can reply. We keep your submission, and email you send to our address, for as long as we need it to handle and document your inquiry.

If you send feedback from the site, we receive your message, any email address and rating you provide, and any screenshot you choose to attach. A screenshot can include information visible on your screen, so review it before sending it. Feedback on a help article also includes the article, whether it helped, and any reason you choose.

If you give a reason when deleting your account, we keep it with your private deletion record.

We collect the information you provide in a copyright notice, counter-notice, privacy request, or other legal correspondence. A copyright notice or counter-notice includes identifying and contact details, such as your name, mailing address, phone number, email address, and signature, along with the claim and supporting information required by IP Disputes (Terms of Use, Section 6.3). We use this information to assess the request, communicate with the parties, and meet our legal obligations. The sharing involved is described under For Legal Reasons and Business Transfers.

Do not send us sensitive personal data, government-issued identity documents, or precise geolocation through profiles, Kurodyne Relay, AI prompts, uploads, or any other free-text field. Only include another person's personal data when you have lawful authority and it is necessary for the feature you use. We do not request sensitive personal data or use it for marketing or profiling. Because a free-text field can contain anything, we cannot guarantee that none reaches us. Where we find it, we may restrict access to it or delete it unless the law requires us to keep it.

An avatar or product preview you upload can carry hidden metadata such as camera details, timestamps, or location. We store the original privately, only to produce the published image, which carries none of that metadata.

We use your information to:

• Run your account and deliver what you buy or sell, including receipts, downloads, and Kurodyne Relay messages
• Grant the fee-free time our seller programs offer and prevent abuse of those programs, such as inviting an account the inviting seller controls
• Keep the platform safe by preventing fraud and unauthorized access, investigating violations of our Terms of Use, and resolving disputes
• Fix problems and improve the service, using error reports, aggregate usage counts, and the Operator diagnostic copies described in Operator and AI Features
• Send service email, such as sign-in and password messages, notices about your listings, Kurodyne Relay message notices and reply reminders, and notices of material changes to this policy or our Terms of Use
• Keep the financial records described in Data Retention, meet legal obligations, and answer valid legal requests

Where the law that applies to you requires a legal basis, we use:

• Our contract with you: To provide your account, orders, Kurodyne Relay, and features you request, including Operator requests and authorized connections
• Legitimate interests: To protect the service, prevent fraud, handle support and legal claims, diagnose problems, and operate and improve the marketplace, including the AI processing described in this policy
• Legal obligations: To keep required records and respond to binding legal requests
• Consent: Where we ask for your permission for an optional use of personal data

An account needs a sign-in credential, and a purchase needs payment information and a verified email address. Without those details we cannot provide the corresponding service.

We measure ad referrals as described in Advertising Measurement and obtain consent where applicable law requires it.

We share personal data to operate the platform, take payment, meet a legal obligation, protect the service, and measure advertising as described in Advertising Measurement. We do not sell personal data for money, publish your purchase history, or give your email address to anyone for their own marketing.

Your username, avatar, published products, reviews, and seller replies are public. Your store also publishes the store name, About text, social links, and Support information text you provide, and any Founding seller badge you hold. A support contact channel you add is shown with your products, either to every visitor or only to each product's buyers, depending on the visibility you choose. Public content can be indexed or copied by search engines and other visitors.

If you accept another seller's invitation, that seller sees when you accepted and whether the invitation earned fee-free time, and sees your store once you have a product for sale.

A seller you buy from sees your username and what you bought from them. The checkout details shared with the seller, including before a purchase completes, are described under Payment Information. Sellers are independent controllers of the checkout and purchase information they receive and must handle it under the data protection law that applies to them. External support channels and services used to redeem a product also process information under their own policies when you choose to use them.

• Payments, fraud prevention, and disputes: Stripe processes payments, verifies sellers, and handles disputes. It receives transaction information, your receipt email address, a seller's account email address when the seller starts connecting Stripe, your IP address, device and browser identifiers, cookie data, and activity indicators. Stripe can relate activity on Kurodyne to activity on other sites that use Stripe. It also acts as an independent controller for purposes such as fraud prevention and compliance, as described in the Stripe Privacy Policy (opens in a new tab).
• Hosting, database, and storage: Our cloud providers hold platform data under contractual security and confidentiality terms.
• Security, content delivery, and email: Our providers protect and deliver the service, check for automated abuse, limit requests, and send our service, moderation, and Kurodyne Relay email. They receive technical information such as IP addresses and account identifiers, plus the recipient address, contents, and delivery metadata of each email.
• Error monitoring: Our error-monitoring provider receives technical reports covering the page and request involved, browser and device information, your IP address, your account identifier, and any feedback and screenshot you choose to send us. Automatic error and performance reports strip message content, form input, cookies, and other sensitive request data first. Feedback you submit and the Operator diagnostic copies described in Operator and AI Features include their content.
• Contact form and business email: Our form and business-email providers receive what you send through our contact form and the email you send to our address. Our business-email provider also handles our replies and policy-change notices, including recipient addresses, message contents, and delivery records.
• Analytics: Our analytics provider receives the page-view information described in Technical Information and does not store your IP address.
• Embedded video: Product pages can load a privacy-enhanced YouTube player for a product or review video. When one loads, Google receives the page address, your IP address, browser and device information, and your interactions with the player. Privacy-enhanced mode keeps that view out of your YouTube personalization, but the player can still set cookies and show nonpersonalized ads. After the player sets cookies, Google may relate that playback to your activity on other sites under the .

When a seller-uploaded product package needs malware review, we may send its files to OpenAI Daybreak for security analysis. The files can contain personal data. OpenAI processes them under its own terms and retention settings. This review is separate from Operator requests routed through OpenRouter.

Operator requests go through OpenRouter to xAI's Grok model. If xAI cannot handle a request, OpenRouter sends it to Google's Gemini model instead. We use OpenRouter's controls to exclude providers it identifies as collecting prompts or using them for training. This does not guarantee zero retention: model providers may retain information for security or legal purposes, and search providers have their own retention policies. OpenRouter keeps request metadata, such as usage and timing. The OpenRouter data policies (opens in a new tab) describe this processing.

The Kurodyne Catalog MCP server lets a third-party AI agent search published products for its users. We log the search text, the number of results, and the time, and keep that record for 90 days. These records carry no account link, but they are not always anonymous: a search can itself contain identifying text, and our server logs record the request's IP address.

Sellers can connect a third-party AI client of their own choosing through the Kurodyne Seller Console MCP server. As a seller, you choose the client, approve the access it requests and any optional access you add, and can revoke the connection at any time in Settings. We do not review or approve the clients sellers choose, and we do not verify the names those clients report about themselves. If you approve access to sales that identify buyers, your chosen client receives purchase records that name buyers by username. The client and its AI provider process those records under their own terms. Your authorization is not consent from the buyers those records describe. Revoking access stops future authorized requests; it does not delete copies already received by the client.

If a seller approves access to Kurodyne Relay conversations, the seller's chosen client and its AI provider receive the messages, images, usernames, and private agent handoff notes in that seller's conversations, and each buyer's purchases from that seller. If the seller also approves replies, the client can reply to buyers and leave the seller private handoff notes. Each reply is labeled as written by an AI agent. If you are a buyer, a message you send to such a seller reaches that client and its AI provider, which process it under their own terms.

We disclose personal data where the law requires it, to comply with a court order, to help law enforcement with a valid request, and to address fraud and security risks. We check that each request is legally valid and share only the minimum it covers.

For a copyright dispute, we may share the notice and relevant supporting information with the user whose material is affected. If that user submits a valid counter-notice, we send a copy, including its identifying and contact details, to the original notice sender, as described in IP Disputes (Terms of Use, Section 6.3). These records are not public posts, but the other party receives them.

If Kurodyne is acquired or merges, your personal data can transfer with the business, and we will tell you if control of it changes.

Our application and database are hosted in the United States, and our service providers can process data in other countries. These countries may provide different protections from those where you live. We use contractual security and confidentiality terms with service providers and the safeguards required for the processing involved. You can email support@kurodyne.com for details of the safeguards that apply to your data.

While your account is open, we keep your profile, purchase history, and other account data. The following categories have separate retention schedules, including when collected without an account:

• Kurodyne Relay messages: Kept 180 days, with their images, so they remain available for support and payment disputes, then permanently deleted. If a seller deletes a product that has no sales, its conversations are deleted with it. When an account in a conversation is deleted, neither participant can read or download the conversation's earlier messages, and we keep them only for dispute resolution until that period ends. To keep your own copy of the text, download the conversation from its menu; the download notes attached images but does not include them. An image you attach but never send is deleted automatically after its upload expires. A private note that a seller's AI agent leaves the seller is deleted after 180 days, or earlier when an account in the conversation is deleted.
• Operator activity: Your conversation is saved in the current browser tab. Its text is sent to our servers to fulfill your requests, but we do not store it there. We keep a content-free record of each request for 90 days. The diagnostic copies held by our error-monitoring provider expire after 30 days. AI and search providers can retain what they receive under their own retention policies.
• Download links: Each record notes the account that requested a link, the file and purchase, the expiry, and the IP address, country, and browser we observed. We keep it for 180 days to support delivery, investigate a security incident affecting a file, and review suspected abuse, then delete the whole record. On a disputed sale, a seller sees only how many buyer links were issued and the first and last times, never your IP address, country, or browser.
• Payment IP address: Removed 180 days after checkout, while the payment record itself keeps its own legal retention period.
• Payment, refund, and dispute events: We keep the limited Stripe event details described in Payment Information for at least 30 days. We may keep them longer to complete or review a payment, refund, or dispute.
• Watchlist activity: Records of saving, removing, or buying a saved product, kept 90 days for aggregate demand and conversion reporting. A seller sees only counts for their own products, never buyer identities or individual Watchlists.
• AI client connections and activity: We keep a record of each connection you approve, including the client's reported name, approved access, and authorization and revocation details. We keep that record while access is active and for 90 days after it is revoked or expires. We keep activity records for 365 days. They show which client acted on an account, who authorized it, which tool it used, when, and whether it succeeded. They contain no tool inputs, results, or credentials. They help us investigate misuse and resolve related disputes or support requests.

After your account is deleted, by you or under Account Termination (Terms of Use, Section 8), the following records remain:

• We keep financial records and issued purchase receipts, plus a minimal purchase history showing what you bought, when, the transaction status, and whether access remains available. These records support the buyer and seller while either account remains, and are kept for 5 years after the later account deletion for accounting, refunds, disputes, and legal claims. When your account is permanently removed, we clear its account links and, for a buyer, the receipt email stored with the payment.
• We keep your Stripe connection history, including connected Stripe account identifiers, for 5 years after your account is deleted to resolve payment and connection issues. We clear links to your Kurodyne account when it is permanently removed.
• We keep your seller products for 6 months so your buyers keep their access. Purchased release records and delivery copies can remain with retained transactions and payment-recovery records after that window.
• We keep your products' moderation history, including the reasons we gave when we requested changes, rejected a submission, or suspended sales, so deleting a product or account does not erase it. We also keep any lowered platform fee or raised limit we set for your seller account, with our reason, and the discount codes used in purchases. These records remain until your account is permanently deleted.
• We keep a private restoration record and the account and security state it needs, covering your original username, sign-in credential, verified authentication factors, any suspension in force, whether you or we deleted the account, and any reason you or we gave for the deletion, for 6 months.
• We keep user blocks until your account is permanently deleted so neither party's safety choice is undone.
• We keep invitation and fee-free time records so program counts stay accurate and the other seller in an invitation keeps their history. When your account is permanently removed, we clear its links to these records.
• We keep records still needed under the periods in Data Retention, including Kurodyne Relay messages, which become available only for dispute resolution; download-link records; Watchlist activity, unlinked from your account; AI client connection records and activity; package security evidence; copies of moderation emails and Kurodyne Relay notices; technical logs; and support or legal correspondence. Operator request records are deleted when you delete your account.

These periods describe live records. Deleted data can remain in restricted provider-managed backups until the provider completes its deletion cycle. We also hold restricted local backups of the database and uploaded files for recovery. We delete each local backup within 30 days of its creation, including any copies we make of it, and do not use backups for ordinary account access or analytics. If we restore a backup, we reapply deletions before returning the restored data to ordinary use. We keep only the relevant data longer where legal proceedings or a regulatory investigation require it. Sellers and other independent recipients control the copies they hold under their own retention rules.

Depending on where you live, you may have rights to access, correct, delete, and port your personal data, to object to or restrict its processing, and to withdraw consent. We do not discriminate against you for exercising a privacy right. A service that needs particular data may become unavailable if that data is deleted or its processing stops.

Email support@kurodyne.com to exercise a right. We verify requests using information we already hold where possible, and request only additional information needed to confirm your identity or an agent's authority. We respond within 30 days, or sooner where the law requires it, and explain any exception. If the law permits an extension, we explain why and give the new deadline within the initial response period. Where applicable, you can use an authorized agent or appeal a refusal by replying to our response.

Settings holds your profile, sign-in and security, email notification, seller, and support details, and most of it is yours to edit directly. Your purchases are in your Library, your listings and sales are in the Console, and sellers can download their complete transaction history from the Stripe Dashboard. For a portable copy of the rest, email us from your registered address; if your account has no email address, we confirm your ownership in the account first.

You can delete your account at any time in Settings. Immediately:

• Your public profile details, including your store name, About text, social links, and support information, are permanently deleted, and your username becomes a random identifier.
• Your avatar is removed from your profile and queued for permanent file deletion.
• The name and profile picture link Google provided are cleared from the sign-in record.
• The reviews you wrote are permanently deleted.
• Your votes, follows, support channels, current Watchlist, email notification setting, seller onboarding state, and unused discount codes are permanently deleted.
• Watchlist activity records are unlinked from your buyer or seller account.
• Your AI client connections are revoked.

Data Retention (Section 4) lists everything that survives deletion and for how long.

Account deletion includes the restoration period in Restore Your Account and does not immediately erase all personal data. You can separately request erasure of retained personal data by emailing us. We assess that request under the law that applies, including any requirement to retain particular records, and explain what we can erase.

For 6 months you can ask us to restore a deleted account by emailing support@kurodyne.com from your registered address; if the account has no email address, we confirm your ownership first. We can restore your username and sign-in identity, your private purchase history, any purchase access still available, seller products still inside their retention window, your verified authentication factors, any suspension still in force, your user blocks, and your invitation and fee-free time records. Profile details, reviews, votes, follows, support channels, Watchlists, seller onboarding state, unused discount codes, and avatars cannot be recovered. Your Kurodyne Relay settings return to their defaults, with Kurodyne Relay and its email notifications on, and Kurodyne Relay messages held for a dispute do not return to your conversations. Your Stripe and AI client connections are not restored. An account we terminated for violating the Terms of Use may not be eligible. After 6 months we permanently delete the restoration data and sign-in credentials, and restoration is no longer possible. The separate records described in Data Retention can remain.

Where we rely on your consent, you can withdraw it at any time, which does not affect processing we carried out lawfully beforehand. You can also object to processing based on our legitimate interests, and ask us to restrict processing while we check an accuracy or objection question. Email support@kurodyne.com.

Traffic between your browser and Kurodyne is encrypted with HTTPS, and data stored on our providers' systems is encrypted at rest. Passwords are stored as one-way hashes, so nobody at Kurodyne can read yours. You can add an authenticator app in Settings. Access to production systems is limited. Anything stored in your browser, such as the Operator conversation saved in the current tab, depends on your own device security.

If a personal data breach requires notice under applicable law, we will notify the people affected, and any authority the law requires, within the required time.

We use cookies and similar browser storage to keep you signed in, remember your time zone and display preferences, save Operator conversation text in the current tab, operate the site and recover from errors, and secure payments. Advertising measurement also uses first-party ad click cookies for 30 days, as described in Advertising Measurement.

Stripe can set fraud-prevention cookies and collect device and activity signals while you use Kurodyne, whether or not you are signed in. Stripe uses those signals for fraud prevention across its payment network, not for advertising, under the Stripe Privacy Policy (opens in a new tab) and Stripe Cookie Policy (opens in a new tab). Cloudflare may set essential security cookies, and an embedded YouTube player can set its own.

Blocking authentication cookies prevents sign-in. Blocking Stripe's script prevents checkout from working, and blocking its fraud-prevention cookies reduces Stripe's ability to detect fraudulent payments. Blocking YouTube cookies can prevent an embedded video from playing.

Kurodyne is for people who are at least 18 years old, and we do not knowingly collect personal data from anyone younger. A parent or guardian can contact us about a child's account.

We update this policy as the service changes. Each update takes effect when we publish it at kurodyne.com/privacy, and the date at the top of this page records the latest update. For material changes, we also email each account's registered address, if it has one.

Before applying a change to personal data already collected, we give any notice and obtain any consent required by applicable law. Publishing an update alone does not authorize new uses of that data or replace required consent.

Kurodyne LLC is the data controller for the personal data described here. Email support@kurodyne.com with a privacy question or to exercise a right. You may also lodge a complaint with a privacy regulator that has jurisdiction over you.