Privacy Policy

Last updated 26 October 2026

This policy explains what personal data Kiwi collects when you use kiwiflow.io, including its web app, MCP server and HTTP API, and how it's handled. Glorium Technologies Corp. operates Kiwi and is the controller of this data.

What Kiwi collects

• Account data, through Clerk: your name and email address, and your Google profile when you sign in with Google. Clerk also processes your IP address and device information to manage sessions and prevent abuse.
• Your organization and project memberships and roles.
• Content reported to Kiwi by agents, people and CI, such as workflows, runs, updates and check results.
• Metadata about MCP keys and CI checker keys. Clerk issues and verifies the key secrets; Kiwi doesn't store them.

How it's used

Kiwi uses this data to sign you in, provide and secure the service, show your organizations, projects and runs to the people allowed to see them, and reply when you contact us.

Cookies and browser storage

• Clerk's session cookies keep you signed in.
• The kiwi_referral cookie is set only when you open a referral link, and lasts 30 days.
• Browser storage keeps the last project you opened.

Kiwi uses no analytics or advertising cookies.

Service providers

• Clerk: authentication and account data, in the United States.
• DigitalOcean: hosting and database, in London, United Kingdom.
• Mintlify: the documentation site at docs.kiwiflow.io, including its anonymous usage analytics.
• AgentMail: mail sent to [email protected], in the United States.
• Google: only when you sign in with Google.

International transfers

Account data is processed by Clerk, and support mail by AgentMail, in the United States.

Retention

Kiwi keeps your data while your account or organization is active, and deletes it when you ask. Database backups expire within 7 days.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict how it's used. To make a request, email us. You can also complain to your local data protection authority.

Contact

Email [email protected].