Version 1.0 · Effective October 27, 2026
Who is responsible
InfiniBot Cloud (cloud.infinibotos.com), infinibotos.com and the InfiniBot commercial-license store are operated by Kingly Intelligence Systems LLC, a Delaware limited liability company, which is responsible for your personal data under this policy. Privacy requests: tharealyoungceo@gmail.com.
Self-hosted InfiniBot
If you run InfiniBot yourself, your conversations, memory, files and settings stay on your machines and we do not receive them. InfiniBot has no third-party analytics or telemetry; the only outbound calls it makes on its own (update checks, optional voice packs, web fonts and KinglyVault sign-in when you use it) are listed in the PRIVACY.md file that ships with it, and each can be turned off.
What we collect in the cloud and store
- Account: email, Clerk account identifier, plan and billing status.
- Your hosted workspace: the agents, conversations, memory, files, settings and connected-service credentials you store in your InfiniBot Cloud machine, kept to run the service for you.
- Commercial licenses: licensee name, buyer email, tier, Whop membership and payment identifiers, license key and status, and the agreement version you accepted.
- Payments: Whop processes card details; we receive transaction and subscription status, not your full card number.
- Operational data: IP address, device and browser type, logs, errors and usage counters needed to secure, meter and debug the service.
- Affiliate program: referral attribution, commissions and payout details you provide.
How we use it
To provide, secure and bill the service; issue and verify licenses; provide support; send service emails; prevent fraud and abuse; improve the product; and meet legal, tax and accounting duties. Where the GDPR or UK GDPR applies, our legal bases are our contract with you, our legitimate interests, your consent where we ask for it, and legal obligations.
Service providers
- Clerk: sign-in and account identity.
- Netlify: website hosting and server functions (including license checkout and webhooks).
- Neon: the cloud account, plan and commercial-license database.
- Fly.io: the private machine that runs your hosted InfiniBot gateway and its data.
- Whop: checkout, subscriptions, receipts and tax collection.
- Resend: license and account emails, where enabled.
- AI model, voice and channel providers you connect (for example OpenAI, Anthropic, OpenRouter, Google, ElevenLabs, Telegram, Discord, Slack): processing the prompts, audio and messages you send through them, under their own policies.
They process data only to provide their service. We also disclose data when the law requires it, to protect rights and safety, or to a successor if our business is sold or merged.
No sale of personal data
We do not sell your personal data or share it for cross-context behavioral advertising, and we do not use advertising trackers. We do not use your workspace content to train AI models.
Cookies
We use strictly necessary cookies and browser storage for sign-in, security and preferences. Web fonts may be loaded from Google Fonts, which can log your IP address.
Retention
We keep account and workspace data while your account is active. When you delete your account or your plan ends, we delete your hosted machine and workspace data within 30 days, except records we must keep: payment, tax, license and accounting records (up to 7 years) and security logs (up to 1 year).
Your rights
You can ask to access, correct, export or delete your personal data, or object to or restrict some uses, by emailing tharealyoungceo@gmail.com. We will verify the request through your account email and reply within 30 days (45 days where California law applies), and we will not discriminate against you for using these rights. In the EEA or UK you may also complain to your data-protection authority.
Children
The service is not directed to children under 13, and paid plans and licenses are for adults 18+. If a child under 13 has given us data, email us and we will delete it.
Security and transfers
We use encryption in transit, per-tenant machines, access controls and reputable providers, but no system is perfectly secure. Data may be processed in the United States and other countries where our providers operate, with safeguards such as standard contractual clauses where required.
Changes
We will post updates here with a new date and email account holders about material changes.