Privacy Choices

Last updated 24 October 2026 · Version 2.6

These are your privacy controls. Each one says exactly what it does, when, and how you reach it: a control in Settings where one exists, and a direct line to us where the control isn't a button yet. The Privacy Policy is the full picture; this page is the controls and what they do.

These controls are the same for everyone, everywhere. Kaldune is used all over the world; wherever you are, the controls below are yours, and where your local privacy law gives you further rights, we honor them (see the Privacy Policy → Where you are).

Memory

Memory is off for every account today. The studio keeps no notes about you between briefs: each brief starts from your words, your files, and the work already in that room, and nothing about you is remembered from one brief to the next. The only things that travel between your own briefs are the ones you set up and can see: your brand, any shared facts you confirmed, and any file you attach yourself, each yours to change or remove.

The studio is built to keep a small memory of you as a client, the way a good account team would: plain facts and preferences you've stated, written in the studio's own words, dated, and announced in the conversation whenever a note is made. It is not switched on, and if it ever is for your account, this is the promise it arrives with, and this page changes first:

• Read it. Every note the studio holds about you, dated, in plain words, in Settings.
• Edit or delete any note, or clear the whole file.
• Switch memory off entirely. One switch. Off means the studio neither reads nor writes memory anywhere.
• Memory never shapes the work. A remembered preference never narrows what the studio offers or makes; the words in your current brief always outrank anything remembered. The studio never notes passwords or credentials, confidential or unannounced material, or sensitive personal details.
• One file per client, if you run briefs for different clients of your own; deleting your account deletes the file with it, and Export data includes it.

Until then, there is nothing to read, and nothing to switch off.

Export your work

Any file the studio has delivered is yours to download the moment it exists: open the brief and take it from its workbench, singly or as a kit. That's how you take your work with you, and it's always available while your account is open, never tied to your payment status; a low or empty credit balance doesn't hold it back.

Export data, in Settings under Privacy, is the other half: one file holding the record we keep about your account, your list of briefs, your wallet history, and your invoices. It's the paper trail, not the work itself; the work downloads from each brief as above. Both controls live in the product, without emailing anyone. If anything about a download or an export needs a person, write to privacy@kaldune.ai from your account email and we handle it.

Delete a brief

Delete any brief from your studio. Here's exactly what happens:

• Everything in the brief is deleted, including the delivered work. The chat, the working materials, and every file the room delivered to you are wiped together. Nothing in a deleted brief survives. If you want to keep the work, download it before you delete, and the studio asks you to type DELETE to confirm before it acts.
• It leaves your studio right away.
• It stays recoverable for 30 days (if you deleted it by mistake, write to support@kaldune.ai within that window), and is then permanently deleted from our systems.
• It sits in our encrypted backups until they cycle out, no longer than 40 days after it leaves our active systems, and then it's gone for good.

Each provider that helped with the work handles what it processed under its own data terms, listed on our Sub-processors page.

Delete your account and your data

Close your account and remove your data yourself, from Settings, in the product, without emailing anyone. Here's exactly what happens:

• Your account closes and you are signed out everywhere right away.
• For 30 days you can change your mind: sign in again and choose Keep my account. After that, your account and your work are permanently deleted from our systems, including your credit and receipt history. Invoices and payment records stay with our payment processor for as long as tax and accounting law requires.
• To stop a second welcome credit going to the same person or company, we keep keyed hashes of the email address, card, phone and device that received it, and the email address's domain, until 3 years after your account is deleted. That record never holds the email address, card, phone or device themselves, and we use it for nothing else.
• Deleted data sits in our encrypted backups until those backups cycle out, no longer than 40 days after leaving our active systems, after which it's overwritten and can't be recovered.
• We may need to keep a little longer only where the law requires it, to resolve a dispute, or to deal with misuse, and only what's needed for that.

Once the 30 days have passed, deleting your account can't be undone. If you're not sure, download your work first.

Published pages

Nothing you make is public unless you publish it. If you have published a piece of work as a public page, that page is the one part of your work the world can see, and it stays in your control:

• Take it down anytime, instantly. Taking a page offline removes the public page the moment you act. The work itself stays in your studio, untouched.
• Hide it from search. A published page can appear in search results. Switch on Hide from search engines and the page stops being offered to them.
• A published page stays up until you take it down. There is no date on it and nothing to renew.
• With a subscription, you can hold a custom address.

The binding rules, including our right to take down a page that breaks the Usage Policy, are in the Terms of Service, Section 3.9.

A note on the backup window, kept honest. The "no longer than 40 days" above is the longest any copy of deleted data lasts, read from how our backups and copies are set up today. If that setup changes, we publish the new number here, and the Privacy Policy changes with it.

Marketing preferences

We email you about your account and your work: receipts, security notices, sign-in codes, your delivered work, a question from the room you asked us to relay, a confirmation when you ask to delete your account, and a monthly note on any page you have published. Laura also writes to you now and then when a brief of yours has something open. Each email about your work has a one-click stop, and Settings has the switch. Marketing email is opt-in: we don't send it unless you've said yes, every marketing message carries an unsubscribe link so you can change your mind in one click, and you can set or withdraw your consent anytime by writing to privacy@kaldune.ai. We don't sell your contact details.

Cookie preferences

Kaldune uses only the cookies it needs to keep you signed in and the service working, including security cookies. When you sign in and use the studio, a device-recognition service reads signals from your browser and may store an identifier there, used only to keep the welcome credit to one per person; the Privacy Policy says exactly what we keep. We don't set advertising, analytics, or cross-site tracking cookies, so there's no consent banner to manage here.

A note, kept honest. If we ever add a non-essential cookie, a real cookie control appears here and you'll be asked before it is set.

Exercising a right that isn't a button

Most of what you'd want to do is a control in the product: downloading your work, deleting a brief, exporting your account record, and closing your account. For the rest, correcting data we hold, objecting to certain processing, or asking exactly what we hold and why, write to privacy@kaldune.ai and we handle it. Wherever you are, and whatever right your law gives you, you reach us the same way; we don't make you clear a higher bar because of where you live. (You can also contact us through the Privacy Policy's channel; both reach the same team.)

Two things worth repeating

We don't read your work in the normal course. The only time someone at the studio can open a specific brief or piece of work is when you ask us to help with it, for the purpose you asked and nothing more. Every read of our database and every change made to your stored data outside the service is logged, and you can ask us about any access to your work. The full version of this is in the Privacy Policy and on the Getting help page, worded the same way in all three places.

The one other time your work could leave the normal course is a court order, and even then, we tell you. If the law compels us to disclose your data (a valid subpoena, court order, or warrant, or a genuine emergency), we disclose only what the law actually compels, we push back on anything overbroad, and wherever we're allowed to, we tell you before we do it. We never volunteer your work to anyone. The full version is in the Privacy Policy.