Privacy policy
The short version. Klio keeps what you and your agents put on the board so it can show it back to you. It never stores secret values or your code, has no ads or tracking scripts, and sells nothing. You can remove your data at any time.
What Klio stores
- Your account: your email address, and your name, avatar and GitHub user ID if you sign in with GitHub.
- Your board: workspaces, members and invites, projects, features, stories, acceptance criteria, comments, hand-offs, your “where I stopped” notes, and the skills you define.
- Your stack: service names, versions, plans, costs and renewal dates, deploy records, and the names of environment variables with the environments they're set in.
- Agent activity: what each token or connected app did and when, with the client name and model it reported, so the board can say who changed what.
- Access: personal tokens (only a hash of each, never the token itself), and the apps you connected by signing in, with the projects and access you chose and when they were last used.
- GitHub events, if you add the webhook: pull request titles and numbers, branch names and commit messages that mention a story ID.
- Your own AI key, if you add one: encrypted, and shown back only as its last four characters.
- Verification runs you start: the public result page shows the agent's name, client and model and which steps passed, never your workspace or projects.
What Klio never stores
- Secret values. If you paste
KEY=value, the value is dropped before anything is saved. - Your code. Your coding agent reads it on your machine; Klio only sees what the agent sends it.
- Passwords. Sign-in is by GitHub or a one-time email link.
- Your Claude, ChatGPT or other app account. A connected app gets a Klio token after you approve it; Klio never sees that app's login.
- Tracking. No analytics, advertising or third-party cookies.
Cookies
Three first-party cookies, all needed to use the app:
klio_session: keeps you signed in, for 30 days.klio_ws: remembers which workspace you last opened, for a year.klio_oauth: protects a GitHub sign-in in progress, for 10 minutes.
Who processes it
- Cloudflare hosts the app and its database.
- GitHub handles “Continue with GitHub” and sends the webhook events you set up.
- Resend delivers sign-in emails.
- OpenRouter, or the provider behind your own key, receives your request and the project's context when you ask Klio AI to draft stories. If your coding agent plans instead, nothing is sent to an AI provider by Klio.
How long it's kept
- Your board and account: until you delete them.
- Sign-in links: 15 minutes. Sessions: 30 days. OAuth approval codes: 60 seconds. Connected-app tokens: one hour each, renewed until you disconnect the app or it goes unused for 90 days.
- Disconnected apps stay listed in Settings for 30 days so you can see why they ended.
- Database backups kept by Cloudflare for disaster recovery roll over within 30 days.
Your choices
- Export a project as Markdown from the app, or ask your agent to call
export_markdown. - Delete stories, features and projects in the app; deleting a project deletes everything in it.
- Revoke a token or disconnect an app in Settings → Agents; it stops working on its next call.
- To delete your whole account and workspace, email founder@klio.dev from the address you sign in with. It's done within 30 days, and you'll get a reply when it is.
Changes
When this policy changes, the date at the top changes too. A change that affects what Klio collects or who processes it is announced in the app before it takes effect.