Kazn privacy notice

Who we are

Quactor Inc. (“Quactor”, “we”) is a software and AI company based in Ottawa, Ontario, Canada. Our founder, Ahmad Shrif, is responsible for privacy. Contact us at contact@quactor.com.

What this notice covers

The Kazn service at kazn.quactor.com, its apps, and the AI agents you connect to it. Our website and the early access list are covered by the quactor.com privacy policy.

What Kazn stores

• Your account: your email address, your name, a short handle made from it, and when you signed in.
• Your workspaces: the projects, pages, tasks and decisions you and your agents write, every earlier version of them, a record of who changed what, and the changes agents propose with your approvals.
• Agents you connect: their names, settings, which projects each may see, and when each was last used. An agent’s key is kept only as a one-way hash, so even we can’t read it.
• Tools you add: the addresses of MCP servers you configure, and their credentials, encrypted.
• Your AI provider: if you connect one for the assistant, its name, the model you chose, and your key, encrypted.
• Assistant chats: kept until you delete them, or for the number of days you set in the workspace.
• A search index: made from your workspace content so Kazn can find things by meaning. It is computed on Kazn’s own server; no outside service sees it.
• Sign-in: sign-in codes and saved sign-ins are kept only as one-way hashes.
• Technical records: server logs (errors, and sign-in requests refused for being too many, with the network address they came from), kept 30 days. Network addresses are otherwise counted only in memory to limit sign-in attempts, and not stored.
• Cookies: the web app sets only the cookies it needs to keep you signed in and remember your workspace. No analytics or advertising cookies.

Why we use it

We don’t use your information for advertising, and we don’t sell it. We don’t use your content to train AI models, and we don’t allow our service providers to.

• To run Kazn for you: store your work, show it to the people and agents you allow, and search it.
• To sign you in, including emailing you sign-in codes.
• To keep Kazn secure and working, and to fix problems.
• To answer you when you ask for help.

Who else handles it

• Amazon Web Services hosts Kazn in Canada (Montréal): the server, the database, backups and logs. Amazon also sends Kazn’s sign-in emails.
• The AI provider you choose for the assistant (for example Anthropic, OpenAI, Google Gemini, OpenRouter, or another service you set up). When you use the assistant, your question and the workspace content needed to answer it are sent to that provider, under your own account with them, and their terms apply. Kazn has no AI provider of its own. These providers may process data outside Canada, including in the United States.
• Your agents and tools. What an agent reads through Kazn goes to the agent tool you run (for example Claude Code or Codex) and to its provider. You choose which projects each agent can see, and you can pause or revoke it at any time. The same applies to MCP servers you add.
• Google Workspace handles our email when you write to us.

Where it is kept

Kazn’s data is stored in Canada. Information you send to an AI provider, agent or tool of your choice is handled where that service runs.

How long we keep it

• Your account and workspace content: until you delete them.
• When you delete your account (Account, then Delete account), Kazn removes at once your account, your sign-ins, and every workspace where you are the only member, with all its content and history. Workspaces you share with others stay for their other members.
• Database backups are kept 7 days, so deleted data is gone from them within 7 days.
• Server logs: 30 days.

Your rights

You can see and correct your information in Kazn, and delete your account yourself. You can also ask us for a copy of your information, or ask any privacy question, at contact@quactor.com. We reply within 30 days. If you are not satisfied, you can contact the Office of the Privacy Commissioner of Canada.

Security

• Kazn is served only over encrypted connections (HTTPS).
• The database, backups and server disks are encrypted.
• Keys and credentials you give Kazn are encrypted; agent keys, sign-in codes and saved sign-ins are kept only as hashes.
• Sign-in attempts are limited, and a saved sign-in is replaced each time it is used, so a copied one stops working.
• Only Quactor’s founder can reach Kazn’s servers, through Amazon’s own access controls, to run and fix the service. We look at workspace content only when you ask us to help with it, or when the law requires it.

Children

Kazn is not intended for children under 16, and we don’t knowingly collect their information.

Changes

If we change this notice, we update the date at the top. If a change affects how we use your information, we tell you by email before it takes effect.