Privacy Policy

Effective date: July 24, 2026 · Kilo Spark LLC ("Turnset", "we", "us")

This Privacy Policy describes how Kilo Spark LLC, operator of Turnset (turnset.ai), handles information when you visit our website, join the waitlist, or use Turnset products during the pilot program.

1. Who we are

Turnset is operated by Kilo Spark LLC. Contact: [email protected].

2. Information we collect

Waitlist

We aim to hold the minimum that lets the product work. On the waitlist that is four things:

• Your email address, your country as you selected it, how you joined (email, GitHub, or Google), and the date
• If you joined through GitHub, your GitHub handle, so we can recognise you. If you joined through Google, nothing beyond the verified address
• We do not store your IP address or browser user agent with your signup, and we do not infer your country from the network. To stop the form being abused we count submissions against a salted, truncated hash of your IP address; that counter expires within the hour and is never linked to your record

The website itself

• No analytics, no advertising or tracking scripts, and no third-party embeds. Fonts are served from our own domain, so loading a page does not disclose your IP address to a font provider
• Cloudflare, our host, processes your IP address in transit to deliver and protect the site, as any host must
• The only cookies we set are strictly necessary ones: a short-lived cookie that protects the sign-in handshake, and a session cookie once accounts open
• If we enable Cloudflare Turnstile on the form, it runs a bot check without cookies or behavioural profiling

Identity providers

• From GitHub we request the narrowest scope that yields a verified email address, and we read your handle. We do not read your repositories or the rest of your profile
• From Google we request openid email only, so we receive a verified address and nothing else - no name, no profile picture

Contributor accounts (when the pilot opens)

• The above, plus the version of the Terms you accepted and when, your cohort, your traces, and our payout ledger

Turnset PTY wrapper and platform (pilot)

When you opt in and use capture sessions, we may process:

• Account and device identifiers
• AI workflow interaction data you choose to capture during an active session
• Metadata needed for provenance, scrubbing, the exclusion window, and finalization
• Trace status (capturing, in the exclusion window, excluded, finalized) and payout status
• Payout records: what we paid you, when, and your Stripe account reference. Identity documents, taxpayer identification numbers, and bank details are collected and held by Stripe, not by us - we receive verification status only

We do not position Turnset as ambient whole-machine monitoring. Capture is scoped to sessions you start and tools in scope for your attach mode.

3. How we use information

• Operate the waitlist and pilot onboarding
• Provide capture, the dashboard where you review and exclude traces, finalization, and contributor compensation
• Scrub, normalize, and package finalized traces into privacy-preserved datasets
• License packaged datasets to organizations under separate agreements
• Improve product reliability, security, and data quality
• Comply with law and enforce our terms

4. Scrubbing and privacy-preserving processing

We apply automated and manual processes to reduce sensitive content before upload and before licensing. Scrubbing reduces risk but cannot guarantee removal of all secrets or identifiers from rich workflow traces. We describe outputs as privacy-preserved or scrubbed, not "fully anonymized."

5. Sharing

We do not sell your identity as a product. We may share information with:

• Service providers (hosting, email, payment processors) under contract
• Organizations that license finalized, packaged datasets - subject to the exclusion window and applicable terms
• Authorities when required by law

6. Retention

Waitlist signups expire automatically 18 months after you join, whether or not you ask us to remove them. Trace retention depends on state (in the exclusion window, excluded, finalized, packaged, licensed) and is described in our Terms and pilot program materials.

7. California: opt-out and financial incentive

The CPRA opt-out and the notice of financial incentive for paying contributors are on a separate page: Your privacy choices. It also explains how to exercise access, deletion, and correction rights, and our commitment not to retaliate for it.

8. Your choices

• Participation is opt-in
• You may review traces in your dashboard and exclude any of them during the 24-hour exclusion window, before they finalize
• You may pause or stop using Turnset
• Waitlist: remove your signup yourself at /unsubscribe, or write to us
• Contributor account: write to [email protected]. We handle these by hand so we can tell you plainly what a deletion reaches and what it cannot - a trace that has already finalized and been licensed cannot be recalled from a licensee, and we keep payout records as long as tax law requires

9. Security

We use encryption in transit, access controls, and other measures appropriate to the pilot stage. No system is perfectly secure.

10. Children

Turnset is not directed to children under 18.

11. International users

We process data in the United States. The pilot is open to contributors in the United States only. We will update this policy as availability changes.

12. Changes

We may update this policy. Material changes will be posted here with a revised effective date.

13. Contact

Kilo Spark LLC · [email protected]

← Back to Turnset