Privacy Policy

Kyurations is a content-curation product built and operated by Krishna Kumar Soni at kyurations.in. It lets you save links, articles, videos, images, and notes you find worth keeping, and arrange them into collections you can keep private or publish. Where this policy says “we” or “us,” it means Kyurations. Questions can go to the contact below at any time.

We collect only what’s needed to run the service:

• Account identity. Your email address, used for sign-in, and the handle, name, bio and picture you add to your profile. Sign-in is handled by Supabase, with Google or a one-time link sent to your email. An account can also have a password; Supabase stores only a one-way hash of it, and we never see it.
• Content you choose to save. When you explicitly save an item, we store its URL, title, thumbnail image, and the extracted text or transcript of the page, link, or image you saved, plus any note or tags you add. We only ever capture the specific pages you deliberately save.
• Access keys. Long-lived keys that let the browser extension, and any AI assistant you connect, act on your library. We store only a SHA-256 hash of each key, with its label and when it was created and last used.
• Basic technical data. The minimum needed to operate reliably, such as request metadata and server logs used for security and debugging.

The extension saves items you pick, and nothing else. When you save something, it may fetch metadata or a transcript from your own browser connection to enrich that single save, then send the saved content to the Kyurations backend under your account.

To be explicit, the extension:

• does not track your browsing history or monitor pages you don’t save;
• does not inject ads or modify the pages you visit;
• does not run remote code; and
• only acts on the pages, links, or images you explicitly save.

You can connect an AI assistant, such as ChatGPT, Claude or Cursor, to your library through our MCP server. You approve each connection yourself, on a Kyurations consent screen or by pasting a key you generated. Once connected, the assistant can, when you ask it to, search and read your saved items and lists, save links and notes, edit, tag, organize and delete items, and publish or unpublish lists.

• What we receive from the assistant: only the inputs of the action it is performing, such as a search query, a link to save, or the id of a list to rename. We never receive your conversation history.
• What the assistant receives from us: the items, lists, tags and notes from your library that the action returns, such as search results or the address of a list you published.
• After that: what the assistant does with those results is governed by its provider’s own privacy policy (for ChatGPT, OpenAI’s).
• Disconnecting: every connection appears as a key in Settings. Revoking it cuts the assistant off immediately.

Your data is used to provide the service, specifically to:

• create, store, and organize the items you save;
• generate AI-assisted tags, notes, and list suggestions to help you arrange your collection;
• publish the lists you choose to make public;
• sign you in and keep your account secure.

Some AI features are performed by third-party AI providers acting as processors strictly on the content you saved: Anthropic for generation (tags, notes, suggestions), Google for deciding which of your lists a new save belongs in, and OpenAI for embeddings (search and organization). These providers process the saved content only to return a result to us. They are not permitted to use it to train their models or for their own purposes.

We do not sell your data. We do not share it for advertising. We do not use it to build profiles about you.

We share data only with the subprocessors that make the service work, and only to that end:

• Supabase: database, file storage, and authentication;
• Vercel: hosting and delivery of the app;
• Anthropic, Google and OpenAI: AI processing of the content you saved, as described above.

Lists you publish are visible to anyone with the link and may appear on your public profile and in search engines. Lists you keep private are visible only to you and the people you share them with.

Kyurations’ use and transfer of information received from Google APIs, and any data obtained through the browser extension, adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. Saved content is used solely to provide and improve the user-facing features you save it for, and is never sold or used for advertising.

• Your account, items and lists are kept for as long as your account exists, so your library is there when you come back.
• Items you delete move to the trash, where you can restore them. They are removed for good when your account is deleted.
• Access keys work until you revoke them. A revoked key stops working immediately.
• Server logs are kept only as long as needed for security and debugging, then discarded.
• When you delete your account, we delete your profile, items, lists and keys within 30 days of your request.

• Your items and account data are stored in Supabase (a Postgres database with object storage for thumbnails and uploads).
• Access keys are hashed with SHA-256 server-side. We store the hash, not the raw key.
• All traffic between your browser, the extension, connected assistants and our backend travels over HTTPS.

You stay in control of your data:

• Revoke the extension or a connected assistant at any time from Settings, which immediately stops it from reading or saving.
• Export your library from the app whenever you like.
• Delete saved items individually whenever you like.
• Delete your account and all associated data: contact us at the address below and we’ll take care of it.

Questions about this policy, a data request, or account deletion? Reach us at krishnakumarconnects@gmail.com, or see Support.