Privacy Policy

Koskamo (“we”, “us”) operates the knowledge plane for AI agents at koskamo.com. This policy explains what we collect when you use it, why, and how long we keep it. We aim to collect only what we need to run and protect the service.

Information we collect

What you submit. Koskamo stores the datasets, documents, corrections, disputed-passage reports, and MCP server listings you publish or propose, together with the account that submitted them, so reviewers can approve them and the version history can attribute them.

Agent and API lookups. When an AI agent or program searches the public catalog through the retrieval API or a search link on /explore/knowledge, Koskamo stores the search text, the dataset, the number of passages returned, the tool or client name, its user agent, and the country derived from the request. MCP tool calls store the same record without the search text. IP addresses are not stored with lookups. AI crawler visits are counted per site section and day. These records tell the service owner how agents use the service, including questions the catalog could not answer, and are deleted after 90 days. MCP records created before October 30, 2026 may include search text until they reach that limit. Each public dataset page shows one aggregate number: how many lookups named that dataset in that window. It never shows search text, clients, or locations.

Automatically collected. When you visit, our servers log your IP address, approximate location (country, region, and city derived from your IP by our hosting provider), your browser and device type (user agent), the referring page, timestamps, and request timing.

How lookups are processed

Lookups are answered by searching reviewed datasets on Koskamo’s own servers. We do not send your lookup text to third-party AI providers.

How we use information

We use the information above to operate and secure the service, to diagnose and fix problems, to understand how the app is used, and to detect and prevent abuse. We do not sell your personal information, and we do not use it for advertising.

Analytics

koskamo.com uses Google Tag Manager to load Google Analytics. Google then receives the pages you view, the referring page, your browser and device type, an approximate location derived from your IP address, and a random visitor identifier, and sets first-party cookies (_ga and _ga_*) that last up to two years. Google Analytics does not see your lookup text or submissions. Koskamo runs no advertising tags. Analytics never loads on sign-in, account, console, or admin pages.

If you are in the European Union, the European Economic Area, the United Kingdom, or Switzerland, nothing loads until you choose “Accept” in the cookie prompt. Elsewhere, analytics loads by default and you can turn it off. If your browser sends a Global Privacy Control signal, we treat it as a refusal everywhere and show no prompt.

You can change your choice at any time. Rejecting deletes the Google Analytics cookies on koskamo.com and stops further reporting immediately.

Cookie preferences

Cookies

The app does not set advertising or cross-site tracking cookies. Signing in sets a session cookie. An analytics_consent cookie remembers your cookie choice for one year. Google Analytics cookies are set as described above. The app keeps your theme choice and, if you create one, your API key in your browser’s local storage so they persist across reloads.

Service providers

We host the application and the PostgreSQL database that holds datasets and lookup records on our own servers. We use SendGrid so Koskamo can send the owner daily digest from a koskamo.com address; SendGrid processes that mail on our behalf. If you allow analytics, Google processes the analytics data described above under its own terms; see Google’s how Google uses information from sites that use its services.

Retention

Server logs, stored lookup records, and owner digest emails are retained for operational, usage, debugging, and security purposes and may then be deleted or aggregated. We do not maintain long-term per-user profiles.

Security

Credentials for our database and mail provider are held server-side and are never exposed to your browser. We take reasonable measures to protect information, but no method of transmission or storage is completely secure.

Your rights

Depending on where you live, you may have rights to access, correct, or delete information we hold about you. To make a request, contact us at the address below.

Children

The service is not directed to children under 13, and we do not knowingly collect information from them.

Changes

We may update this policy from time to time. When we do, we will revise the “Last updated” date above.

Contact

Questions or requests? Email privacy@koskamo.com.