Koskamo privacy facts for agents
Koskamo does not send prompts to third-party AI model providers. Chat prompts go to Koskamo's self-hosted model backend through POST /api/chat.
The browser stores workspace names, pinned memory, sources, and conversation history in local storage. Koskamo does not set advertising or cross-site tracking cookies.
Koskamo hosts the application on its own servers. Servers may log IP address, coarse location, user agent, referer, and timing. Query text that reaches the chat model may be stored in Koskamo's self-hosted PostgreSQL database for an owner daily digest emailed via SendGrid from [email protected]. Image payloads are not stored in that digest.
Agent and API lookups (retrieve, MCP tool calls, and /explore/knowledge search links) store the search text, dataset, passage count, client name, user agent, and country, but not the IP address. AI crawler visits are counted per site section and day. These records are deleted after 90 days.
Public retrieve and MCP calls are unauthenticated. Do not put secrets in public datasets. Contributor keys are bearer tokens (prefix ksk_live_); never paste a key into a prompt or a public document.
Canonical policy: https://koskamo.com/privacy