Privacy Policy

Last updated: January 2026

KB Labs ("we", "us", "our") operates the KB Labs platform and website. This Privacy Policy explains what data we collect, why we collect it, and how you can control it.

What we collect

We collect the following categories of data:

Account data — name, email address, and password (hashed) when you register.
Usage data — workflow runs, API calls, plugin invocations, and feature usage, aggregated and used to improve the platform.
Billing data — payment information is processed by our payment provider (Stripe) and never stored on our servers.
Log data — IP addresses, browser type, and request logs, retained for up to 30 days for security and debugging.
Cookies — session cookies required for authentication and optional analytics cookies. See our Cookie Policy.

How we use your data

To provide, operate, and improve the KB Labs platform
To send transactional emails (account activity, billing receipts)
To send product updates, if you have opted in
To detect, prevent, and investigate security incidents
To comply with legal obligations

We do not sell your data. We do not use your workflow content to train machine learning models.

Data sharing

We share data only with:

Infrastructure providers — cloud hosting and storage (under DPA)
Payment processor — Stripe (PCI DSS compliant)
Analytics — aggregated, anonymised usage data only
Legal requirements — when required by applicable law

Data retention

We retain account data for the duration of your subscription plus 30 days after deletion. Workflow run logs are retained according to your plan (7 days on Hobby, 30 days on Pro, configurable on Enterprise). Anonymised usage analytics may be retained indefinitely.

Your rights

Under GDPR and applicable law, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion ("right to be forgotten")
Export your data in a portable format
Object to or restrict processing
Withdraw consent at any time

To exercise any of these rights, email privacy@kblabs.ru. We respond within 30 days.

Security

We use encryption at rest (AES-256) and in transit (TLS 1.3), access controls, and regular security reviews. For details, see our Security page.

Changes to this policy

We'll notify you by email and update the "last updated" date before making material changes. Continued use of the platform after changes constitutes acceptance.

Contact

Questions? Email privacy@kblabs.ru or write to KB Labs, Remote-first, Russia.