Privacy

kie for Claude is a service run by PandaMode.io for the people it approves, at kie-dev.pandamode.io. PandaMode.io is responsible for your data here (the data controller). Questions and requests: info@pandamode.io.

What is kept, and why

• Your Google account: its ID, your email address and your name, to know it is you. Nothing else from Google: no password, no contacts, no files.
• Your kie.ai API key, encrypted (AES-256-GCM). It is used only to run kie.ai models for you and is never shown again, not even to you. You can remove it on the kie.ai key page.
• What Claude makes for you: the pictures, videos and sounds, kept 30 days and up to 5 GB per account (your account may have its own limits), then deleted automatically. You can delete any of them on the Files page.
• Task records: model, prompt and settings (with the links in them, never your key), status, credits and times, for the Log page and so Claude can pick up a result later. Kept as long as the task's results; failed and unfinished ones for 14 days.
• Files you upload through an upload link go straight on to kie.ai; this server keeps their names and kie.ai's links for a day.
• Your defaults on the Models page, your API tokens and your connected Claude apps (tokens are stored only as hashes).
• Sign-in details: cookies that only keep you signed in (listed under Cookies below; no tracking or advertising cookies), and with each sign-in your IP address and browser name. The server's log keeps addresses and pages visited, never what you sent; it is rotated and keeps at most the last 50 MB.
• PandaMode.io's log of decisions about your account (approved, limits changed, sign-ins ended) keeps your account's random id, not your email, for a year.

Why this is allowed

Running the service you asked for (GDPR article 6(1)(b)): your account, key, results, task records, defaults, API tokens and connected apps. Keeping it secure and recoverable (legitimate interest, article 6(1)(f)): the sign-in details, the server's log, PandaMode.io's log and the backups.

Who else sees it

• kie.ai (NEXUSAI SERVICES LLC, United States) runs the models: when you run one, your prompt, uploads and settings go there on your instruction, and your own kie.ai key tells it whose credits to use. kie.ai's own privacy policy applies there.
• Google (Google LLC, United States) only confirms your sign-in, under the EU–US Data Privacy Framework.
• No other company is asked for anything when you open these pages: the fonts, pictures and scripts all come from this server.
• Nothing is sold, shared for advertising, or analysed. This service's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

Only the cookies this service needs to work: no tracking, advertising or analytics cookies, and nothing else is stored in your browser. They are set by this server, sent only to it, and hidden from the page's scripts.

• __Host-kie_session: keeps you signed in. Set when you sign in, it lasts 30 days or until you sign out.
• __Host-kie_oidc: links a Google sign-in to the browser that started it, for 10 minutes.
• __Host-kie_admin and __Host-kie_admin_pre: the administrator's sign-in only (8 hours at most, ended after 30 minutes without activity; 30 minutes for the step between password and code).

Your rights

Ask info@pandamode.io for a copy of your data (in a machine-readable form), or to have it corrected, deleted or restricted, or object to its use. You can also complain to the Swedish Authority for Privacy Protection (IMY, imy.se).

Deleting

Remove files, your key, API tokens or connected apps yourself at any time. Ask info@pandamode.io to remove your account: everything above except PandaMode.io's log is deleted at once (its lines then read "removed user"). Daily copies of the database are kept for 7 days, and backups of the server's disk for at most 30 days, so a removed account, and results past their time, disappear from every copy within 37 days.