Privacy Policy

01 Scope and who controls the data #

This Privacy Policy explains how Uplift Security, LLC ("Uplift," "we," "us," or "our") collects, uses, discloses, and retains personal data in connection with Kansei, including the software, websites, accounts, licensing, billing, coordination and control-plane services, remote-access features, and support (the "Service").

This Policy does not govern AI providers, repositories, identity providers, payment processors, browsers, operating systems, or other third parties you select. Their own notices and terms apply. The Service is not currently offered to persons ordinarily resident in the European Economic Area or the United Kingdom. Uplift may make the Service available in those locations in the future under separate regional terms or notices.

02 Information we collect #

We may combine information collected from you, your device, your organization, identity and payment providers, service providers, and connected services where permitted by law.

03 Working Content and provider credentials #

"Working Content" includes source code, prompts, model responses, agent messages and transcripts, terminal content, files, paths, screenshots, audio, and similar runtime content.

In normal operation, Uplift's account and control-plane services are not designed to receive or store Working Content or provider credentials. Working Content generally remains in the runtime you control or is sent to providers and integrations you select. Provider credentials remain on your device and are managed by the provider tool, browser, command-line interface, integration, operating system, or configuration you choose; storage protections vary.

Uplift may receive Working Content when you intentionally submit it for support, security review, feedback, legal requests, or another feature that expressly requires it. You should redact secrets and unnecessary personal data before submitting materials.

04 Remote access and network providers #

Optional remote access uses network and relay infrastructure, including Cloudflare. During normal operation, content carried through Kansei's protected remote-session channel is encrypted before it enters that relay. Uplift and its providers may process connection, routing, security, performance, analytics, and diagnostic information needed to operate and protect the feature.

This protection does not apply after content reaches an authorized device or a provider or integration you select, and it does not eliminate risks from endpoint compromise, software modification, user configuration, or other circumstances outside the protected channel.

05 How we use information #

We may use personal data to:

• Provide, authenticate, bill, maintain, support, and secure the Service.
• Administer plans, trials, entitlements, renewals, cancellations, and account communications.
• Monitor reliability, investigate errors and incidents, prevent fraud and abuse, and enforce agreements.
• Analyze usage, improve existing features, develop new features, and conduct internal research and quality assurance.
• Comply with law, respond to valid legal process, establish or defend claims, and protect Uplift or others.
• Create aggregated or deidentified information and use or disclose it for any lawful purpose where it cannot reasonably be used to identify an individual. Where we create or maintain deidentified information, we will maintain and use it only in deidentified form and will not attempt to reidentify it, except as permitted by law to test whether our deidentification process is effective.

We do not sell personal data or share personal data for cross-context behavioral advertising, as those terms are defined by applicable law. We do not use Working Content to train or fine-tune general-purpose AI models unless you affirmatively opt in under separate terms.

06 How we disclose information #

We may disclose personal data to:

• Vendors, contractors, professional advisers, and infrastructure providers that support hosting, backup, security, billing, communications, analytics, notifications, support, and service operations.
• Identity, payment, AI, repository, browser, platform, and other providers you select or instruct us to interact with.
• An organization administrator or account owner where the account is provided or controlled by an organization.
• Government authorities or other parties when we believe disclosure is required by law, legal process, safety, security, fraud prevention, rights protection, or enforcement of agreements.
• Affiliates, financiers, buyers, advisers, and other participants in a merger, financing, reorganization, bankruptcy, sale, or transfer of all or part of the business or Service.
• Other parties with your direction or consent.

We may disclose aggregated or deidentified data without restriction where permitted by law.

07 Cookies, analytics, and browser signals #

We and our infrastructure providers may use cookies, local storage, session identifiers, first-party analytics, security telemetry, performance monitoring, and network-error reporting to authenticate users, maintain sessions, measure use, protect the Service, and troubleshoot problems. We do not use these technologies for cross-context behavioral advertising.

Because we do not sell or share personal data for cross-context behavioral advertising, browser "Do Not Track" or Global Privacy Control signals generally do not change the Service. We will honor legally recognized signals where required by applicable law.

08 International processing and data location #

Uplift and its providers may process and store personal data in the United States and other countries or regions where Uplift or its providers operate. Locations may change based on latency, availability, resilience, security, backup, cost, and operational needs.

Unless a signed agreement expressly states otherwise, Uplift does not commit to a particular country, cloud region, data center, or residency configuration. Where applicable law requires a cross-border transfer mechanism, we may use contractual or other lawful safeguards.

09 Retention #

We retain each category of personal data for as long as reasonably necessary for the purposes described in this Policy, taking into account the account lifecycle, the nature and sensitivity of the data, security and abuse-prevention needs, legal and accounting requirements, disputes, support needs, and backup rotation.

Account and subscription records may be retained while an account is active and for a reasonable period afterward. Billing, tax, consent, fraud, dispute, and legal records may be kept longer. Operational, security, analytics, pairing, and support records are retained under documented schedules and may be deleted, aggregated, or deidentified when no longer needed. Backup copies expire through normal rotation.

We may retain relevant information longer for an active incident, investigation, legal hold, claim, or legal obligation. Deidentified information may be retained indefinitely. Deleting a Kansei account does not delete local runtime data or information held by third-party providers you selected.

10 Security #

We use administrative, technical, and organizational safeguards designed to protect the personal data we hold. Safeguards may include encryption in transit, access controls, authentication, logging, backup, vendor management, and security review, as appropriate to the information and risk.

No system, provider, endpoint, or transmission method is perfectly secure. You are responsible for protecting your devices, local data, credentials, provider accounts, permissions, and backups. Security statements in this Policy describe practices and intended boundaries; they are not guarantees or warranties.

11 Your choices and legal rights #

Depending on where you live and whether applicable law applies to Uplift, you may have rights to request access, correction, deletion, portability, restriction, objection, or information about our practices. You may submit a request to privacy@kansei.sh.

We may verify your identity and authority, request additional information, use an account channel for verification, charge a fee where permitted, or deny or limit a request where an exception applies. We may retain information needed to document the request and our response. Authorized-agent requests require proof of authority.

Account deletion and subscription cancellation are separate. You must cancel recurring billing through the available billing method even if you request account deletion. Rights relating to data held by a third party must be exercised with that third party.

12 Children and service eligibility #

The Service is intended for adults and is not directed to persons under 18. We do not knowingly collect personal data from a child through the Service. Contact us if you believe a child has provided personal data.

The Service is not currently offered to persons ordinarily resident in the European Economic Area or the United Kingdom. Uplift may make the Service available there in the future under separate regional terms or notices.

13 Changes to this Policy #

We may update this Policy to reflect changes in the Service, providers, practices, or law. We will post the revised version and effective date. We will provide additional notice or request consent only where required by law.

14 Contact #

Privacy questions and requests may be sent to privacy@kansei.sh. Legal notices concerning this Policy may also be sent to legal@kansei.sh.

Version 1.0 · effective August 16, 2026