Trust
Trust is not a badge we can put on a page. It comes from saying what we do, what we do not do, and what we cannot promise.
Honest limits
- We are a small Australian business. We will not invent an uptime figure, a team size or an award we cannot stand behind.
- This is not an emergency service. Do not rely on the assistant for anything urgent or safety-critical.
- AI can be wrong. The assistant's output is generated by AI models. Check anything important before you act on it.
- It is not a web host. Your box runs the assistant, not apps or sites that serve other people.
- When we do not know something, we say so. A few questions to the AI model providers are still open, and the Privacy note marks them unresolved rather than pretending otherwise.
Who can access what
Your data sits on your own server. Our job is to stay as far away from it as we reasonably can.
The honest part, said plainly: the box is rented and managed by us, in our own hosting account, and we hold support access to it, including root. We do not go inside your box on our own initiative.
| We can see | We do not look at |
|---|---|
| The health of your server: disk, memory, whether the assistant is up. | Your files or your conversations with the assistant. They live on your box, and we leave them alone. |
| Your plan, credit balance and top-ups. | Your card number. Our payment provider holds that; we never see it. |
| That your service exists and whether it is running. | Your work. We do not use it for any purpose of ours. |
- Support access happens when you ask. If a problem needs someone to look at your box, we do it with your request in front of us. Not quietly, and not on a whim.
- Keys stay with us and off your box. The AI provider keys live in our own secret store. They never go onto your server and are never shown to you.
- Access is logged. When we act on a box there is a record of it. [to be confirmed: what the access log shows and how a customer can ask to see it]
Getting your data out
Your data is yours. Email [SUPPORT EMAIL] any time and ask for a copy, or ask us to delete it, or both. You do not have to give a reason.
- We get your export to you within [EXPORT DELIVERY DAYS] business days of your request.
- We send it the way you ask, and never through an unencrypted public link.
- You can also export your data and delete your account yourself from inside the service. [to be confirmed: when the self-serve export and deletion exist]
Leaving, and what happens to your data
Cancel whenever you like, from inside the service or by emailing us. Cancelling stops the next charge. No lock-in, no minimum term, no exit fee.
- When your account ends we keep your data for 30 days, in case you come back or need a copy.
- After those 30 days we delete it, including the backups. Gone, not just switched off.
- Want a copy during those 30 days? Ask and we will get it to you.
- Afterwards we keep only billing and tax records, because Australian tax law requires it, plus a plain record that a deletion happened. No content, no keys. [ACCOUNTING RECORDS YEARS]
We will give you honest dates rather than say “instantly”, and we will tell you in writing when a deletion is done.
Backups and restores
Your server is backed up, encrypted, so it can be brought back if something goes wrong. By default we hold the backup key, which is what lets us restore your box for you.
If you would rather hold the key yourself, you can. Then the key is yours and not ours. The trade-off is real: if that key is lost, the box cannot be restored, not even by us. We will not pretend there is a way around that.
What a real launch still needs
We would rather launch late and honest than early and vague. These are still to be settled, and we are not hiding them:
- the business name, entity, ABN and address;
- the support email address and the domain;
- a lawyer's read of the Terms and Privacy note;
- written answers from the AI model providers about how they handle the content of a request;
- a written answer on whether the KJ assistant may be run commercially for paying customers.