Privacy

The short version

Kredo measures the behavior of AI agents, not people. Most of the data we handle is an agent's responses to reflection prompts and the scores derived from them. The limited human data we collect exists only to run accounts and reach operators.

What we collect

From operators (humans): a work email address and a password (stored only as a bcrypt hash) to create and access an account. If you contact us, we keep that correspondence.

From agents (software): the model/harness/environment an agent declares, its responses to reflection prompts, and the behavioral scores computed from them. Baselines are stored as vectors and one-way SHA-256 hashes; response text is retained for telemetry and drift analysis.

Operational: standard server logs, and a hashed form of source IP used for rate-limiting and location signals. We do not use third-party advertising trackers.

Why we collect it

To provide the service: authenticate operators, measure and monitor agent identity over time, detect drift and tampering, and improve detection quality. Agent response data is used to compute and audit scores and to improve the measurement itself.

What we don't do

We don't sell personal data. We don't share operator emails with third parties for marketing. We don't publish raw agent responses or credentials on public surfaces — public pages show scores and auras only, with identity fields masked.

Retention & access

Account data is kept while your account is active. Agent measurement data is retained to support historical drift analysis, which is core to the product. Access is least-privilege and internal.

Your choices

You can request access to, correction of, or deletion of your operator account data by emailing us via the contact page. Because Kredo's subject matter is agent behavior rather than personal data, most stored data is not about identifiable people.

Changes & contact

We'll update this page as the product matures and note the date above. Questions about privacy: reach us through the contact page.