Privacy policy

Last updated: 26 July 2026

This policy explains what KoshHQ collects, why, and what you can ask us to do about it. If anything here is unclear, email hello@koshhq.com.

Who we are

KoshHQ is a library of AI prompts operated by the KoshHQ team. For any privacy question or request, contact hello@koshhq.com.

What we collect

Information you give us

Name — so we can address you.
Email address — your login, plus service messages such as password resets and payment receipts.
Phone number — used for account security and support. We do not send marketing messages to it, and we do not sell or share it with advertisers. If we ever want to use it for promotional messages, we will ask for your consent first.
Password — stored only as a cryptographic hash. Nobody at KoshHQ can read it.

Information created as you use the site

Prompts you bookmark and versions you save.
Whether you marked a prompt as working or not, and any reason you selected.
Counts of how often prompts are copied (aggregated, not per person).
Your subscription status, if you buy Premium.

Technical information

Our web server records standard log data such as IP address, browser type and pages requested. This is used to keep the service running and secure.

Why we use it

To create and run your account, and to log you in.
To provide the features you use — bookmarks, saved versions, Premium access.
To answer support requests.
To protect the service against abuse and fraud.
To improve the library — for example, feedback votes tell us which prompts to rewrite.

We rely on your consent when you create an account, and on our legitimate interest in operating and securing the service.

Who we share it with

We do not sell your personal information. We share it only with the service providers that make the site work:

Supabase — stores our database and handles authentication.
Oracle Cloud — hosts the website itself.
Our email provider — sends account emails such as password resets.
Our payment provider — processes subscriptions if you buy Premium. Card details go directly to them; we never see or store them.

These providers may process data outside your country. We may also disclose information where the law requires it.

How long we keep it

We keep your account data for as long as your account exists. If you ask us to delete your account, we remove your personal data within 30 days, except where we must keep records for legal or accounting reasons — for example, payment records.

Your rights

You can ask us to:

Tell you what data we hold about you.
Correct anything inaccurate.
Delete your account and its data.
Withdraw a consent you previously gave.

Email hello@koshhq.com and we will respond within 30 days. If you are unhappy with our response, you may complain to your local data protection authority — in India, the Data Protection Board.

Cookies

We use cookies only to keep you signed in. There are no advertising or third-party tracking cookies on this site. Blocking cookies will prevent you from logging in.

Children

KoshHQ is not intended for people under 18, and we do not knowingly collect their data. If you believe a child has created an account, tell us and we will remove it.

Security

Passwords are hashed, traffic is encrypted in transit, and our database enforces access rules so one member cannot read another member's data. No system is perfectly secure, but we take reasonable steps to protect your information.

Changes

If we make a significant change, we will update the date at the top and, where appropriate, tell you by email.