Privacy policy
What data Kiibo collects, why, for how long and how you control it, in line with Brazil's LGPD and the GDPR.
Last updated: November 9, 2026
Who is responsible
Kiibo is the controller of the data processed on this site and the platform. To reach our data protection officer: privacidade@kiibo.dev.
Waitlist
We collect the email you provide and, if you choose, what you want to test first and the kind of test. We use it only to tell you when your spot opens and to prioritise what we build.
Legal basis: your consent. You can leave the list at any time by replying to any of our emails or writing to privacidade@kiibo.dev.
Account and platform use
Name, email and profile picture from Google or GitHub, or the email used for the sign-in link; usage data needed to run and bill the service; and technical security logs.
Legal basis: performance of the contract and our legitimate interest in keeping the service secure.
Test data
During tests, the agents see your targets' screens and responses. Sensitive data (tax IDs, cards, emails, phone numbers, passwords and tokens) is always masked on the device itself, on every plan, before any screenshot, video, log or code leaves it.
Test account credentials are encrypted and never appear in videos, logs or generated code.
Model training
Kiibo does not train models on your data by default. If you turn the option on, only already-masked data may be used. On the Organization plan the option is always off.
Who we share with
Providers that help us operate (cloud, email, payments), under contract and only as needed; and authorities when the law requires it. We do not sell personal data.
International transfers
Some providers are located outside Brazil. In those cases we rely on contractual clauses and the safeguards set out in the LGPD and the GDPR.
How long we keep it
Waitlist: until you leave or until launch, plus 12 months. Account: for as long as it exists. Run recordings and logs: 30 days by default, configurable. After that we delete or anonymise.
Your rights
You can ask for confirmation, access, correction, portability, anonymisation or deletion of your data, and withdraw consent, by writing to privacidade@kiibo.dev. We reply within 15 days. You can also contact your data protection authority.
Security
Encryption in transit and at rest, a vault for credentials, devices wiped after every run and restricted, logged internal access.
Changes to this policy
If we change something important, we'll email you before it takes effect.