Legal
Privacy Policy
Last updated: July 18, 2026
This policy explains what personal data Command+K (“we”, “us”) collects when you use commandplusk.com and the CMD+K products, how we use it, and the choices you have. We keep it short on purpose: we collect what we need to run the service, and not more.
Data we collect
Account data. When you sign up we receive your email address and, if you sign in with Google or Microsoft, your name and profile picture from that provider. We never see your password for those providers.
Workspace content. Content you add to your workspace — knowledge sources, MCP server configurations, assistant settings, and conversations held with your assistants — is stored so the product can work. It belongs to you.
Usage data. With your consent (the cookie banner), we collect product analytics — pages visited and features used — to understand what to improve. If you decline, we don’t. Basic server logs (IP address, request time) are kept for security and debugging.
Billing data. Payments are processed by our payment providers. We store your plan, invoices, and billing country; we never store your card number.
How we use it
To provide and improve the service, generate AI responses, process payments, prevent abuse, and answer your support requests. AI responses are generated by sending the relevant conversation and workspace context to our AI model providers; we do not use your content to train our own models, and we do not sell personal data to anyone.
Widget visitors
If you chat with a CMD+K widget embedded in another company’s product, that company is the controller of your data and we process it on their behalf to deliver the conversation. Questions about how that company uses your data should go to them.
Service providers
We rely on a small set of infrastructure providers to run the service — including cloud hosting and databases, authentication, AI model providers, payment processors, and consent-gated analytics. Each processes data only as needed to provide their service to us.
Cookies
We use essential cookies (session, theme, cookie-consent choice) that are required for the site to function, and analytics cookies only if you accept them. You can change your choice by clearing cookies for this site.
Retention and deletion
We keep your data while your account is active. If you delete your workspace or ask us to delete your account, we remove your data from production systems within 30 days, except where we must keep records (such as invoices) for legal reasons.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Email support@commandplusk.com and we’ll handle it — no forms, no runaround.
Security
Data is encrypted in transit, access is limited to what operating the service requires, and workspace data is isolated per tenant. No system is perfectly secure, but we treat your data the way we’d want ours treated.
Children
The service is not directed at children under 16, and we do not knowingly collect their data.
Changes
If we change this policy in a meaningful way, we’ll update this page and the date above, and for significant changes we’ll notify you in the product or by email.
Contact
Anything unclear, or a request to make? support@commandplusk.com.