Skip to main content

Legal

Privacy Policy

Last updated: May 2026

Overview

Kabori is built with privacy as a core value, not an afterthought. We collect only what is necessary to operate and improve the product, we do not sell your data, and self-hosted deployments keep your code entirely on your infrastructure.

Data we collect

When you interact with the Kabori website, we may collect:

  • Email address (when you join the waitlist)
  • Basic analytics data such as page views and session duration (privacy-preserving, no cross-site tracking)
  • Technical metadata required to serve the site

How we use your data

  • To communicate product updates and private beta invitations
  • To understand how users discover and interact with the site
  • To improve the product and website experience

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Analytics

This website uses Matomo Cloud, operated by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Matomo is hosted on EU infrastructure and processes data under a Data Processing Agreement (AVV/DPA) with Kabori.

We use Matomo in cookieless mode: no cookies or local storage identifiers are set, and no data is written to your device. Each request is processed with 2-byte IP anonymisation (last two octets removed) before storage. Matomo respects the browser’s Do Not Track signal.

Tracking requests are sent to analytics.kabori.ai. All data sharing features inside Matomo are disabled; data is not forwarded to any third party.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) in measuring website traffic and evaluating marketing effectiveness. No consent banner is required under § 25 TTDSG because cookieless tracking does not access or store information on your device.

Processor: InnoCraft Ltd — Data Processing Agreement on file.

Live chat

This website may load Crisp (Crisp IM S.A.S., France) as a live-chat widget. Crisp sets first-party cookies to maintain the chat session and may process your IP address and messages you send.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) in providing live support. Because Crisp accesses your device via cookies, § 25 TTDSG applies; a cookie consent mechanism for Crisp is being evaluated as a follow-up to this policy update.

Self-hosted mode

When running Kabori in self-hosted mode, no code, prompts, or responses leave your infrastructure. We receive no telemetry from self-hosted instances unless you explicitly opt in.

Contact

If you have questions about this policy or how we handle your data, please reach out at info@megatherium.eu.