Who processes the data
KimiShip’s operator is responsible for the KimiShip service. Privacy and data-subject requests can be sent to the contact address above.
Google and Keycloak authentication
Sign-in is Google-only during the invite beta and is brokered by self-hosted Keycloak. Google supplies a stable account identifier, name, email, and email-verification status using the basic scopes openid profile email. Google also receives normal login connection data such as IP address and time. KimiShip does not store Google access or refresh tokens.
Workspace and MCP data
KimiShip stores account identifiers, drafts, brand configuration, schedules, media, audit metadata, integration configuration, and the structured results deliberately saved through the Web or MCP workspace. Data is used to provide, secure, and operate the service.
Hosting and recipients
Application, identity, database, and media systems run on Hetzner infrastructure in Germany. Encrypted backups are stored with Hetzner Storage Box. Google processes authentication data. Optional BYOK image or quality providers receive data only when the user explicitly activates and invokes them.
Retention
Workspace data is retained while the account is active. Operational security events are retained for a bounded period. Encrypted backups rotate under the operational retention schedule. A deletion request blocks access immediately; final account deletion is targeted within 30 days unless legal retention obligations require a limited hold.
Export, deletion, and rights
Users can export structured account data from the account page and request deletion there. Requests for access, correction, restriction, objection, portability, or complaints can be sent to the privacy contact. EU users may also contact their competent supervisory authority.
International transfer
Google authentication can involve processing by Google LLC in the United States. KimiShip minimizes this transfer to basic identity scopes. Any applicable transfer mechanism and Google’s own privacy terms govern Google’s processing.