Under active development — prototyping only

This platform is still under development. We may recycle environments and purge stored data from time to time, without notice. Do not rely on KBworker for anything more than prototyping — otherwise you will have data loss. Keep your own copies of anything you can't afford to lose.

Scope

Covers KBworker — the web app at www.kbworker.com and the backend at api.kbworker.com. Read this before signing in or uploading data.

Sign-in

Authentication runs through Auth0 with Google as the identity provider. We receive only your name, email, and profile picture URL — never your password.

Your data

Files go to S3 under a per-user path. Workflows, models, credentials, and run traces sit in MongoDB filtered by your user ID. No cross-user sharing.

Where it lives

All data lives in infrastructure operated by the project maintainer. Provider credentials are encrypted at rest with AES-GCM; the master key never touches disk.

What we don't do

No ad tracking, no analytics SDKs, no reselling data, no training models on your prompts or files. Auth0 is the only third party at sign-in.

Third parties

Prompts and completions you send to an LLM provider traverse that vendor under their privacy policy. KBworker only forwards the request — review each vendor's terms.

Cookies

One session cookie from Auth0 keeps you signed in. No analytics or marketing cookies. Clearing it or signing out ends the session.

Deletion

Delete a workflow, run, or file from the UI and the rows + S3 objects go with it. Email contact@kbworker.com to wipe your full account.

Gmail access

With your consent, we read your Gmail (read-only, gmail.readonly) only to ingest messages for your own search/retrieval. Revoking access stops ingest; delete ingested data anytime.

Google API Services — Limited Use

KBworker requests the gmail.readonly scope only to ingest, with your explicit consent, the Gmail messages you choose to connect — so you can search and retrieve over them inside your own account. We request the minimum scope necessary and never modify or send mail.

KBworker's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, data obtained through Google APIs is used only to provide or improve the user-facing features that requested it; is never sold or transferred to third parties except as needed to provide those features, for security, or to comply with law; is never used for advertising; and is not read by humans unless you give consent, it is necessary for security or to comply with law, or the data is aggregated and anonymized for internal operations. Revoking access (via your Google Account permissions) stops further ingest, and you can delete already-ingested email data from the app at any time.