Privacy notice
Short version: the website keeps only what you type into the signup form, stored encrypted, and uses no cookies, analytics or ad trackers. The kmand Everywhere extension works only on sites you allow, sends what a task needs to our AI provider, Anthropic, and keeps what it learns about a site in your own browser.
Who we are
kmand Everywhere is made by kmand (kmand.ai). Legal entity name and type, and its registered business address.
Questions or requests about your information: privacy contact email at kmand.ai.
The website
The signup form
When you pick a plan and sign up, we collect what you type: the plan you picked, your name, work email and, if you choose, what you would hand off first. We also record that you ticked the consent box and which version of its wording you saw. (People who signed up through an earlier version of the form also told us the CRM they use most and what describes their role.) The form takes no payment details.
We use this only to contact you about your plan, including when checkout opens, and to plan what kmand supports first. We do not sell it, and we do not use it for advertising.
How we keep it
- Your name, email and answer are encrypted (AES-256) before they are stored. The email is also kept as a keyed fingerprint, so a second signup with the same address is recognised without reading the list.
- We do not store your IP address, browser details or any cookie with your signup.
- The list sits in its own database, separate from any kmand product data, and only the people at kmand who run signups can read it.
- We keep it until you ask us to delete it, or until 24 months after you signed up (proposed), whichever comes first.
What every visit involves
The site sets no cookies and runs no analytics, advertising or session-recording tools. Its fonts and images are served from the site itself, so your browser does not contact a font or analytics company. Our hosting provider handles your IP address to deliver the pages and to protect them from abuse. To slow down automated signups, our service keeps a keyed fingerprint of your IP address in memory for ten minutes and never writes it to storage.
The kmand Everywhere extension
kmand Everywhere is a browser extension. Here is what the current build does with information.
- Only where you allow it. It works only on a website you have allowed in its side panel, one site at a time. If a step leads to another website, the task stops.
- What it reads. To do a task, it reads the page you are on in your browser: its buttons, fields, labels, tables and visible text.
- Where that goes. It sends your request and the parts of the page the task needs to our AI provider, Anthropic, whose Claude models plan each step. In the current build the extension has no kmand server: requests go from your browser straight to Anthropic, and kmand does not receive your requests or page content. Anthropic handles them under its own terms and privacy policy. Before kmand provides AI access itself, update this with whose Anthropic account is used and how long requests are kept.
- Passwords and payment details. It does not type into fields it recognises as password, card number or one-time code fields.
- Looking at the screen. Off unless you turn it on. When it is on, it can send a picture of the tab to the AI provider, with password, card and code fields painted over in your browser before the picture leaves it.
- What it remembers. It keeps a map of each site’s pages and the steps that worked, only in your browser’s extension storage. It never keeps what you typed, names, messages or other page content. The parts that fit a request are sent with that request. The side panel shows what it remembers, with Forget this site and Forget everything.
- Learning an app. Off by default. When you turn it on and say yes, it reads an app’s pages in a background tab for a few minutes; it clicks and types nothing, and every request from that tab that is not a read is blocked.
- Your API key. If you give the extension an Anthropic API key, it is kept in extension storage that web pages cannot read.
It asks for your approval before it deletes, sends, publishes or pays for anything, and you can stop it at any time.
Who else handles information
- Anthropic, our AI provider, for the extension as described above.
- DigitalOcean, which will host this website and the signup database. Confirm the data center region at deployment.
- The payment provider, once checkout is chosen.
We will add any email service to this list before we use one. We share information with authorities only when the law requires it.
Your choices
You can ask us to show you, correct or delete the signup details you gave us, or to stop emailing you, at the contact address above. We will answer within 30 days (proposed). Depending on where you live, for example in the EU, the UK or California, you may have further rights, including complaining to a data protection authority. Lawyer to confirm which laws apply and add the required wording.
Where information is processed
kmand is based in the United States, and the services above process information in the United States. Confirm the transfer basis if we accept signups from the EU or UK.
Children
kmand is for businesses and is not meant for anyone under 16.
Changes
We will update this notice when the product or the law changes and put the new date at the top. If a change affects how we use details you already gave us, we will tell you first.
Still needed before this takes effect
- The legal entity’s name and type, and its registered business address (not a home address).
- A privacy contact email at kmand.ai.
- How long to keep signup details (24 months proposed) and the response time for requests (30 days proposed).
- The DigitalOcean region, set at deployment.
- Whether we accept signups from the EU and UK, and the wording that needs.
- The payment provider and what it receives, once checkout is chosen.
- Review by a lawyer.