Privacy Policy

01Who we are

afliz.com, Koy IDE and Koy Agents are run by Anh Luu Service Company Limited, enterprise code 3603693952, 9F4, Quarter 6, Trấn Biên Ward, Đồng Nai Province, Vietnam (registered as 9F4, Quarter 6, Trung Dũng Ward, Biên Hoà City — before the 2025 administrative merger) · phone +84 251 220 8248 · support@afliz.com. We decide how your personal information is used (we are the "controller").

Privacy contact: support@afliz.com. We have not appointed an EU or UK representative yet, because our processing of information about people there is occasional and low-risk (GDPR Art. 27(2)). We will appoint one if that changes.

02What we collect, why, and for how long

We do not sell your personal information, we do not use it for advertising, and we make no decisions about you by automated means alone.

03Data in Koy IDE and Koy Agents

Koy IDE and Koy Agents run on your own computer. We do not collect your data: your code, files, emails, prompts and anything you type are not sent to AFLIZ.

What Koy Agents reads stays off our servers. Koy Agents works on your computer. What your agents read (mail, notes, calendar, files, spreadsheets, the names of apps in Screen time, VAT invoices) is not sent to AFLIZ.

The AI model you choose. To do a task, Koy Agents sends what the task needs only to the AI provider you choose, with your own key, after personal details are masked. With a local model on your computer it stays on your computer. AI providers may process data in other countries; their own privacy policies apply, so pick the provider that fits your rules. Koy IDE also sends each request only to the provider you configure, and asks for your consent before it sends data to a provider for the first time.

The chat service you connect for alerts. If you turn on alerts or chat, those messages go through the chat service you connect, to your own bot or chat, so that service processes them under its own terms and privacy policy.

What Koy Agents sends to us. Your KOY account and licence, so you can sign in and use KOY Pro. Usage events are optional and off until you say yes to Share usage events (asked once, and changeable any time in the app's settings): the apps then send events such as "app opened" or "workflow created" to Google Analytics, with a random ID for your install, and Koy Agents also links them to your KOY account while you are signed in. Say no and nothing is sent. Nothing else is sent to AFLIZ.

04Google user data (Google Drive)

What Koy Agents accesses. If you choose to connect Google Drive in Koy Agents, you sign in with Google and allow read-only access to your Drive (the drive.readonly scope). Koy Agents uses it to search your Drive by file name so you can pick files for an agent, to read the files you picked (Google Docs and Slides as text, Sheets as CSV, and plain-text files) each time that agent runs, and to show which Google account is connected. It never creates, changes, moves, shares or deletes anything in your Drive.

Where it goes. All of this happens on your computer. The text of the files you picked is sent only to the AI model you set up in Koy Agents, so the agent can do the task you gave it; with a local model it never leaves your computer. Your Google sign-in goes straight from Google to the app on your computer: AFLIZ servers never receive your Drive files or your Google tokens. The sign-in token is kept only in your operating system's keychain.

What we never do. We use Google user data only to do the task you gave the agent. We do not sell Google user data, use it for advertising, let people read it, or use it to develop, improve or train AI or machine-learning models. AFLIZ's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting. Disconnect any time in Koy Agents › Settings › Apps, which deletes the token from your computer, or revoke Koy Agents' access at any time in your Google Account › Security › Third-party access (myaccount.google.com/permissions). Reports your agents wrote stay on your computer until you delete them.

05Cookies and similar storage

Google Analytics loads only if you choose Accept all (or turn Analytics on in Settings) in the cookie banner. Choose Reject all and it never loads. You can change your choice any time from Cookie settings at the bottom of every page. afliz.com and the KOY apps report to the same Google Analytics property. Advertising features and Google signals are off, and fonts are served from our own servers.

Paddle's checkout loads only when you click a button to buy a plan, and it opens Paddle's secure checkout window. Paddle may use its own cookies there to process your payment and prevent fraud — see Paddle's privacy notice.

06Who else handles your information

The last two rows are services you pick and set up yourself; AFLIZ does not receive what you send them. Each provider gets only what it needs for its task. We may also disclose information if the law requires it.

07International transfers

Our team works from Vietnam and Australia, and the providers above process information in the countries listed. For people in the EU and UK we rely on the EU–US Data Privacy Framework where the provider is certified, and on the European Commission's standard contractual clauses otherwise. For Vietnam, we keep the cross-border transfer impact assessment that the Law on Personal Data Protection requires.

08Your rights

You can ask us to show you, correct or delete the personal information we hold about you; to restrict or object to how we use it; to give you a copy in a common format; and to withdraw your consent at any time (this does not affect what we did before). Every update email has an unsubscribe link.

Email support@afliz.com. We reply within 30 days, or sooner where the law requires.

09Laws we follow

Vietnam's Law on Personal Data Protection (No. 91/2025/QH15) and Decree 356/2025/ND-CP; for people in the EU and UK, the GDPR and UK GDPR; for people in Australia, the Privacy Act 1988 and the Australian Privacy Principles.

10Complaints

Tell us first at support@afliz.com; we will look into it and answer within 30 days. If you are not satisfied, you can complain to your regulator: in Vietnam, the Department of Cybersecurity and High-Tech Crime Prevention (A05, Ministry of Public Security); in Australia, the Office of the Australian Information Commissioner (oaic.gov.au); in the EU or UK, your local data protection authority.

11Security

Information is encrypted in transit (HTTPS), and access is limited to the people who need it. If a breach puts your information at risk, we will tell you and the regulator as the law requires.

12Children

Our products are not meant for children under 16, and we do not knowingly collect their information.

13Changes to this policy

We post every new version here with its date. For important changes we tell you by email, and the cookie banner asks you again.