Security & privacy

A connection acts as you

• Every connection, whether made with Connect or with a key, acts as the admin who created it, inside the company they picked, with that admin’s permissions. Tools run under their session, so Kudosky’s normal access rules decide what they see.
• It stops working the moment it is disconnected, or when its owner is no longer an admin.
• Actions need read + actions access and the KAIA Agent plan.

Sign-in

Claude and ChatGPT connect with OAuth 2.1. You sign in on kudosky.app and approve the connection there; your password never goes to the AI tool. The AI tool gets a token that it refreshes on its own until you disconnect it.

Connections and keys

• Every connection and key is listed under Integrations → KAIA in your AI tools with its name, access and when it was last used. A Claude connection appears as Claude.
• Only a hash of a key is stored. Kudosky shows its prefix, never the whole key.
• Use one key per tool or person so you can revoke them separately.
• Revoke removes access immediately.

Privacy

The connector follows the same limits as KAIA:

• Mood only for teams and the company, in groups of at least 3. Never an individual’s mood, ratings or comments.
• Polls and questionnaires as totals and averages, never who answered what.
• Anonymous kudos, comments and pulse answers stay anonymous. The connector can’t reveal them.
• People can’t be deleted, only deactivated.

What your AI provider sees

Whatever a tool returns is sent to the AI tool you connected, and to its model provider, to write the answer. Use AI tools your company has approved for work data.