Skip to content
KitchenSink4AI

THE RECORD · PRIVACY

Privacy

Your work stays yours. Running the business takes some records. Here is exactly which.

Our tools work on your machine. Selling and supporting them means keeping a few records about you. This page says what we keep, why, for how long, and who else touches it.

Effective: 2026-09-16

This policy covers KitchenSink4AI products, our websites, our licensing service, and support. KitchenSink4AI is a product of Alvut Consulting, LLC, a United States company. Privacy questions: [email protected].

Our site and our products are intended for business use. They are not directed to children.


01

When you use the tools


Our Community and Business editions send no usage telemetry to KitchenSink4AI. Business licenses are checked on your machine, without contacting a license server. We do not receive your documents because you use the tools.

Your AI app is a separate service. It may send prompts, file contents, and tool results to its provider. Your app's settings, its provider's agreement, and the actions you ask for determine what leaves your machine. The Web tool also connects to the websites you ask it to use.

Two other network requests are worth knowing about:

  • Community editions run a documented update check that contacts PyPI for version information. It can be turned off as described in each product's documentation. It sends no document contents. Like any web request, it exposes your network address and request details to the receiving service.
  • The Web tool may download a public tokenizer table when one is not already cached. It uses the table to measure text size. The download does not send the text being measured.

Files and local logs stay wherever you or your software keep them. Cloud folders, backups, and your AI app have their own privacy settings.

02

When you visit the website


Our public pages are static, and we serve the fonts they use from our own site.

Our website is served by Cloudflare Pages. To serve and protect the site, Cloudflare processes connection details, including your IP address, the page you requested, and the time of your request. Cloudflare keeps its own service logs under its own privacy and retention policies.

We count visits with Cloudflare Web Analytics. It sets no cookies, and the reports it gives us contain no visitor IP addresses. We keep no IP addresses from ordinary page visits in our own records. These analytics reports are separate from the connection details that Cloudflare processes, described above, in order to serve and protect the site.

Product pages load a visitor-count badge from visitor-badge.laobi.icu. That service receives a request from your browser, including connection details, to display the count. It is a third-party service even though it looks like part of our page.

On our website, our checkout counts its steps without identifying the visitor. When a purchase follows a campaign or referral link, the link's tag is stored with that order. The website also keeps the security and rate-limit records and the portal sign-in cookie described below. The software you install sends us nothing about your documents; the only requests it makes to us are the once-a-day update check, which carries the product name and version and no identifier, and a scripted bundle download by your IT staff, which presents your receipt. Like any request over the internet, these reach our hosting provider, whose logs are described in its own policy.

03

When you contact us


The contact form collects your message, its category, and any name or email address you give. We use them to answer you. Cloudflare Turnstile checks the submission for spam. Resend delivers the message to our company mailbox at Zoho.

To limit repeat submissions, we keep a rate-limit record for up to two hours. That record holds a keyed hash of your network address, not the address itself.

We keep correspondence so we can answer you and follow up on the same issue. There is no automatic deletion date for our mailbox. Please do not send confidential documents unless we have agreed they are needed for support.

04

When you buy a Business license


The checkout asks for your organization's legal name, the license administrator's first and last name, work email, and phone number, an optional job title, the plan you chose, your confirmation that the user count fits your organization, and your acceptance of the license terms.

We use these details to issue the right license, deliver it, reach the administrator, and support the organization. An organization's legal name can identify a person, for a sole proprietor for example, so we treat it as part of this record too.

Paddle handles checkout as the merchant of record. Card details go to Paddle, never to our licensing service. Paddle sends us the transaction and customer details it holds: the buyer's name and email, customer and business identifiers, business name and tax identifier when given, billing country and postcode, purchase-order details, items, amounts, currency, and dates. Paddle has its own privacy policy.

We store orders, signed license receipts, download-link records, email delivery status, and an audit history on Cloudflare. These records let us deliver downloads, replace links, and investigate problems. License emails go through Resend. Operational notices go to our company mailbox at Zoho.

Download links expire after 30 days. An expired link does not delete the order or end the license; reply to your license email for a new one.

05

How long we keep records


License and sales records, including orders, receipts, and delivery records, are kept while the license is active and for seven years after it ends, as records of what we supplied, for accounting, and for disputes. A license ends on the later of the date its update coverage stops and the date it is terminated. Audit history of staff actions is kept for up to two years. Download links stop working after 30 days. Contact-form messages live in our mailbox, not in the licensing system.

Some records must be kept longer to meet a legal obligation or resolve a dispute. If you ask for deletion, we will say what we can remove and what we have to keep. Our providers keep information under their own terms.

06

Who else handles information


We do not sell personal information, and we do not give it to other companies for their own advertising. We do share it with the services that run the business:

  • Cloudflare delivers and protects the sites, stores licensing records, and controls staff sign-in.
  • GitHub hosts our open-source code and the documentation sites for the Community editions.
  • Paddle handles checkout, payment records, and its duties as merchant of record.
  • Resend sends contact and license emails.
  • Zoho hosts our company mailboxes.

The visitor-badge service and the product network requests are described above. Services you choose to connect, including your AI app, have their own policies. Providers may process information outside your country; a United States company address does not mean every record is stored only in the United States.

07

Cookies


We set no advertising cookies. Checkout and security services may use their own cookies or browser storage: Paddle's checkout has its own practices, and Cloudflare's security features may set cookies.

08

Ask about your information


Email [email protected] to ask what personal information we hold about you, or to have it corrected or deleted. Include enough for us to find the record, such as the contact email or license number. Do not send a password, card details, or a download link.

We may need to confirm your identity before showing or changing a record. We will explain any limit on a request, including records we must keep. Your rights may depend on where you live.

09

Changes to this page


We update the effective date when this policy changes. Questions about a change, or about anything here, go to [email protected].