Kravii

Privacy policy

Last updated: 22 October 2026

Kravii is a demo built for the FinTechathon 2026 competition. It runs on test money only and is not a licensed bank, e-money or payment service. Do not enter real ID numbers, real bank details or real card numbers.

This policy explains what personal data Kravii ("we") handles when you use the website www.kravii.com, the Kravii desktop app and its AI assistant, and what you can do about it. We follow the principles of Thailand's Personal Data Protection Act (PDPA).

1. What we collect

• Account: your name, email address and password (stored as a hash), and, if you choose to sign in with Google, your Google name and email.
• Identity check (KYC, simulated): the result of the check through the demo ID provider. We keep a one-way hash and a masked form of the ID number, never the full number.
• Wallet and deals: your test balance, deals, milestones, delivered files and their fingerprints (hashes), messages between the parties of a deal, group membership and votes.
• AI chat: what you type or attach in the chat, and the AI's replies, so you can see your history.
• Desktop app: the public address of your device key and the latest block of your device chain. The private key and the full chain stay on your computer; the backup we keep is encrypted with a key only your device can make.
• Technical data: session cookies needed to keep you signed in, and server logs (IP address, time, page) kept for security.

2. Why we use it

• To run your account, wallet and deals, and to show you their history (contract).
• To let the AI assistant draft deals and answer you (contract, at your request).
• To keep the service secure, prevent abuse and keep evidence of what was agreed (legitimate interest).

We do not sell personal data, and we do not use it for advertising.

3. Who receives it

• AI model providers: your chat messages and attachments are sent to the language model that answers (through the Anthropic API, OpenRouter or a university AI gateway, or the provider of your own key if you add one). Wallet addresses are hidden from the model, but other text is sent as you type it, so do not paste ID numbers or bank details.
• The other party of a deal: the deal terms, deliveries and messages of that deal. People without an account see it through a private link protected by a one-time code or password.
• Members of a group you join: group proposals, votes and the group chat.
• Infrastructure: Cloudflare (network and security), Stripe (card and PromptPay top-ups, test mode only), GitHub (desktop app downloads).

4. What is on the blockchain

Escrow locks, payments and hourly anchors are transactions on Kravii's permissioned chain (Hyperledger Besu) and can be viewed by anyone in the public explorer. They contain wallet addresses, amounts and hashes, never names, emails or files. Blockchain records cannot be deleted; they no longer point to you once your account is deleted.

5. How long we keep it

As long as your account exists. When you delete your account, your account, profile, sessions and sign-in links are deleted at once. Records needed as evidence of a deal with another person (its terms, hashes and transactions) may be kept for that deal. Server logs are kept only as long as needed for security.

6. Your rights

You can access, download (Profile → export), correct and delete your data (Profile → delete account), withdraw consent, and object to or ask us to restrict its use. You may also complain to Thailand's Personal Data Protection Committee. Contact us at github.com/sucsage/agentic-wallet/issues.

7. Security

Connections use HTTPS. Moves of money need your own signature and pass limits enforced by smart contracts. Delivered files are stored encrypted. No system is perfectly secure; this is a demo and should not hold real money or real personal documents.

8. Children

Kravii is not meant for anyone under 18.

9. Changes

We will update this page and its date when this policy changes.

Privacy policy · Terms of use · © 2026 Kravii