> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kombify.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Security and privacy at kombify

> How kombify handles sign-in, your data and your choices, with links to the legal texts

This page summarizes how kombify products treat security and privacy, in plain
words. It points to the pages that describe each product in detail. The legal
texts are the [privacy policy](https://kombify.io/privacy) and the
[terms](https://kombify.io/terms); if this page and a legal text differ, the
legal text applies.

## The principles

* **You stay in control.** A StackKit on your own server works without a kombify
  account. Hosted sign-in is optional and never replaces your local access.
* **Missing information means no access.** Unclear or missing identity
  information denies access instead of guessing.
* **Short-lived, narrow access.** Tokens expire quickly and are limited to the
  service they are meant for.
* **Assistants never get more than you.** An assistant acting for you cannot
  receive more authority than you have.
* **Sensitive actions are checked.** Actions that change things pass policy
  checks, and some need your approval first.

## Signing in

Hosted sign-in for kombify runs on the official domain `login.kombify.io`. Check
the address before you enter anything, and never send a password by e-mail. See
[How sign-in and your identity work](/identity/overview) and
[Sign-in problems and account basics](/apps/cloud/sign-in-and-account).

## Your data, by product

| Product | What to know | Details |
| - | - | - |
| StackKits on your server | Local identity and credentials stay under your control, on your own environment. | [Identity in StackKits](/identity/overview) |
| kombify Cloud | Your account data is deleted on request, at the latest within 30 days. Invoices and accounting records are kept for the periods the law requires. | [Delete your account and your data](/apps/cloud/delete-your-account) |
| AI Guide, Companion Studio and Companion | The AI Guide has no access to your account. Signed-in products process your account, sessions and prompts. | [What happens to your data in kombify AI](/apps/ai/your-data-and-privacy) |
| SpeechKit | You choose where your voice may go and what is kept. | [Choose your privacy settings](/speechkit/privacy-settings) |

## Your choices

* Ask for your data to be deleted, or ask for a copy of it, by writing to
  [info@kombify.io](mailto:info@kombify.io) from your account address. A
  self-service export is not built into the dashboard today.
* Choose how far your voice may travel and whether it is kept in SpeechKit.
* Sign out on shared devices, and do not type secrets into any chat.

## Reporting a problem

If you think you shared something by mistake, or you found a security problem,
write to [info@kombify.io](mailto:info@kombify.io) and say what you saw, where
and when. Security reports are acknowledged within 3 working days. Never include
a password.

<Note>
  This page describes public behavior. Internal architecture, operations and
  runbooks are intentionally not part of the public documentation.
</Note>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.