The principles
- You stay in control. A StackKit on your own server works without a kombify account. Hosted sign-in is optional and never replaces your local access.
- Missing information means no access. Unclear or missing identity information denies access instead of guessing.
- Short-lived, narrow access. Tokens expire quickly and are limited to the service they are meant for.
- Assistants never get more than you. An assistant acting for you cannot receive more authority than you have.
- Sensitive actions are checked. Actions that change things pass policy checks, and some need your approval first.
Signing in
Hosted sign-in for kombify runs on the official domainlogin.kombify.io. Check
the address before you enter anything, and never send a password by e-mail. See
How sign-in and your identity work and
Sign-in problems and account basics.
Your data, by product
Your choices
- Ask for your data to be deleted, or ask for a copy of it, by writing to info@kombify.io from your account address. A self-service export is not built into the dashboard today.
- Choose how far your voice may travel and whether it is kept in SpeechKit.
- Sign out on shared devices, and do not type secrets into any chat.
Reporting a problem
If you think you shared something by mistake, or you found a security problem, write to info@kombify.io and say what you saw, where and when. Security reports are acknowledged within 3 working days. Never include a password.This page describes public behavior. Internal architecture, operations and
runbooks are intentionally not part of the public documentation.