Privacy Policy

Effective date: September 19, 2026 · Kilo Spark LLC ("Turnset", "we", "us")

This Privacy Policy describes how Kilo Spark LLC, operator of Turnset (turnset.ai), handles information when you visit our website, join the waitlist, or use Turnset products during the pilot program.

1. Who we are

Turnset is operated by Kilo Spark LLC. Contact: [email protected].

2. Information we collect

Waitlist

We aim to hold the minimum that lets the product work. On the waitlist that is three things:

• Your email address, how you joined (email, GitHub, or Google), and the date
• If you asked for access as a buyer, the organization and the note you typed, if you typed them. Both are optional and we read them ourselves; they are not used for anything else
• If you joined through GitHub, your GitHub handle, so we can recognise you. If you joined through Google, nothing beyond the verified address
• We do not ask where you live and we do not infer it from the network. We do not store your IP address or browser user agent with your signup either. To stop the form being abused we count submissions against a salted, truncated hash of your IP address; that counter expires within the hour and is never linked to your record

The website itself

• No analytics, no advertising or tracking scripts, and no third-party embeds. Fonts are served from our own domain, so a page view discloses your IP address to no third party other than our host
• Cloudflare, our host, processes your IP address in transit to deliver and protect the site, as any host must
• The only cookies we set are strictly necessary ones: a short-lived cookie that protects the sign-in handshake, and a session cookie once accounts open
• Cloudflare Turnstile runs a bot check on the join form. It sets no cookies and does no behavioural profiling, and we have verified that a page load stores nothing in your browser

Identity providers

• From GitHub we request the narrowest scope that yields a verified email address, and we read your handle. We do not read your repositories or the rest of your profile
• From Google we request openid email only, so we receive a verified address and nothing else: no name, no profile picture

Contributor accounts (when the pilot opens)

• The above, plus the version of the Terms you accepted and when, your cohort, your traces, and our payout ledger

The Turnset collector (pilot)

The collector has three modes, and the mode stamps every record it writes. In local mode, the default, sessions stay on your machine and nothing is sent to us. In store mode, sessions are held on your machine until you run a sync. In live mode, sessions upload as they are captured. Switching out of local mode asks before it uploads anything already held. When a session does reach us, we may process:

• Account and device identifiers
• AI workflow interaction data you choose to capture during an active session
• Metadata needed for provenance, scrubbing, the exclusion window, and finalization
• Trace status (capturing, in the exclusion window, excluded, finalized, withdrawn) and payout status
• Payout records: what we paid you, when, and your Stripe account reference. Identity documents, taxpayer identification numbers, and bank details are collected and held by Stripe, not by us - we receive verification status only

We do not position Turnset as ambient whole-machine monitoring. Capture is scoped to sessions you start and tools in scope for your attach mode.

3. How we use information

• Operate the waitlist and pilot onboarding
• Provide capture, the dashboard where you review and exclude traces, finalization, and contributor compensation
• Scrub, normalize, and package finalized traces into privacy-preserved datasets
• License packaged datasets to organizations under separate agreements
• Improve product reliability, security, and data quality
• Comply with law and enforce our terms

4. Scrubbing and privacy-preserving processing

We apply automated and manual processes to reduce sensitive content before upload and before licensing. Scrubbing reduces risk but cannot guarantee removal of all secrets or identifiers from rich workflow traces. We describe outputs as privacy-preserved or scrubbed, not "fully anonymized."

5. Sharing

We do not sell your identity as a product. We may share information with:

• Service providers under contract: our host (Cloudflare), our payout processor (currently Stripe), and a quality-assessment provider (currently TypeSafe) that may score de-identified excerpts of finalized traces and may not use them for anything else
• Organizations that license finalized, packaged datasets, subject to the exclusion window and applicable terms
• Authorities when required by law

What we do not collect

• Anything outside a session you started. There is no ambient or whole-machine capture
• Anything at all in local mode, which is the default
• Your IP address or browser user agent alongside a signup
• Keystrokes, screen contents, or the contents of files the agent did not touch
• Identity documents, taxpayer identification numbers, or bank details. Stripe holds those
• Analytics or advertising identifiers of any kind

6. Retention

Waitlist signups expire automatically 18 months after you join, whether or not you ask us to remove them. Trace retention depends on state (in the exclusion window, excluded, finalized, packaged, licensed, withdrawn) and is described in our Terms and pilot program materials. When a trace is withdrawn we drop its content but keep the provenance and payout records, because the rights of organizations that already licensed a copy depend on them.

7. California: opt-out and financial incentive

The CPRA opt-out and the notice of financial incentive for paying contributors are on a separate page: Your privacy choices. It also explains how to exercise access, deletion, and correction rights, and our commitment not to retaliate for it.

8. Your choices

• Participation is opt-in
• You may review traces in your dashboard and exclude any of them during the 24-hour exclusion window, before they finalize
• You may pause or stop using Turnset
• Waitlist, contributor or buyer: remove your signup yourself at /unsubscribe, or write to us
• We honor Global Privacy Control signals. There is no advertising or analytics on this site for the signal to switch off, and we treat it as a do-not-sell request for anything we hold about you
• Nevada residents may direct us not to sell covered information by emailing [email protected] with the subject "Nevada opt-out". We do not sell it today
• Residents of other US states with privacy laws (Virginia, Colorado, Connecticut, Texas, Oregon and others) have the access, correction, deletion and opt-out rights described on Your privacy choices, exercised the same way
• Contributor account: write to [email protected]. We handle these by hand so we can tell you plainly what a deletion reaches and what it cannot. A trace that has already finalized and been licensed cannot be recalled from a licensee, and we keep payout records as long as tax law requires
• Finalized traces: you may ask us to withdraw any of them at any time. We stop using the trace and exclude it from every future dataset, and we reverse the payment we made for it. Copies already delivered to organizations under a license stay with them. This is described in Terms section 17, and it does not apply to requests you make under privacy law

9. Security

We use encryption in transit, access controls, and other measures appropriate to the pilot stage. No system is perfectly secure.

10. Children

Turnset is not directed to children under 18.

11. International users

We process data in the United States. The pilot is open to contributors in the United States only. We will update this policy as availability changes.

12. Changes

We may update this policy. Material changes will be posted here with a revised effective date.

13. Contact

Kilo Spark LLC · [email protected]