Privacy Policy

Optimal Access (“we,” “us,” “our”) recognizes the importance of privacy.

This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have. It applies to our software products - Kurator and KChat - and to the Optimal Access website.

Our mission is to provide a better online experience for consumers, and we do not track your general browsing history - only the pages you choose to save to your account on our servers, which are located in the United States.

Information We Collect

  • Account information. When you register for a Kurator or KBucket account, we collect your email address. If you sign in with Google, we receive basic profile information (such as your email) from Google to create your account.
  • Content you save. When you bookmark, comment on, or save a page, we store the URL and the associated information you submit through the Kurator popup (such as title, description, tags, and your notes), tied to your account.
  • Payment information. If you purchase a paid plan, payment is processed by PayPal. We receive limited transaction and subscription details (such as confirmation and status) but do not collect or store your full payment-card details.
  • Automatically collected log data. Our servers automatically record certain information when you use our products or visit our website, including the URL requested, IP address, browser type and language, and the date and time of the request. This is generally treated as log information, not personal information.

Chrome Permissions Explained

When you install Kurator, Chrome shows standard permission warnings based on the features Kurator needs. Here is what they mean:

  • Read and change all your data on all websites - When you click the Kurator button to save a page, Kurator reads (“scrapes”) information from that page so you can review and edit the details of the link you’re saving. We do not change the website itself; we only let you edit the information about the link you save.
  • Read and change your bookmarks - Each link you curate is, in essence, a bookmark. Kurator lets you read and organize these bookmarks.
  • Manage your downloads — Information scraped from saved pages is downloaded into your Kurator Bookmark Manager; the download permission supports this feature.

How We Use Your Information

  • To provide and operate the service — create your account, save and sync your content, process subscriptions, and send transactional emails (e.g., account confirmation and password reset).
  •  For usage analysis (e.g., how many users use a feature) and for auditing, research, and analysis to operate and improve our technologies and services.
  •  Any use beyond the above is performed on aggregated, de-identified data with personal identifiers removed.We do not sell your personal information.

How We Protect Your Information

We use a combination of technical and organizational measures to protect your information:

  • Encryption in transit. All communication between your browser/extension and our servers is encrypted using industry-standard TLS (HTTPS).
  • Password protection. Passwords are never stored in plain text — we store only a one-way cryptographic bcrypt hash, so passwords cannot be read or recovered by anyone, including us. If you use Google Sign-In, we never handle your Google password.
  • Account isolation. Your bookmarks, folders, and saved content are tied to your account, and our application enforces that one user cannot access another user’s private data.
  • Network protection. Our databases run on secured infrastructure (Amazon Web Services, United States) and are not directly accessible from the public internet; application traffic is served behind a TLS-terminating reverse proxy.
  • Limited internal access & logging. Access to member information is restricted to personnel who need it to operate and support the service, and we minimize what we log — for example, we do not record authentication or password-reset tokens in our application logs.
  • No card data on our servers. Payments are handled by PayPal; we do not store your full card details.
  • Ongoing review. We periodically review and improve our security practices, including dependency updates, access controls, and log hygiene.

Despite these measures, no method of transmission or storage is 100% secure.

Unauthorized entry or use, hardware or software failure, or other factors may compromise the security of member information at any time, and we cannot guarantee absolute security.

We encourage you to use a strong, unique password and keep it confidential.

Third Party Service Providers

We rely on a small number of trusted providers to operate Optimal Access. They process limited data on our behalf and are not permitted to use it for their own purposes:

  • Amazon Web Services (AWS) — hosting and storage (US)
  • PayPal — payment and subscription processing
  • SendGrid (Twilio) — transactional email (confirmation, password reset)
  • Google Analytics and Mixpanel — usage analytics
  • Content enrichment — when you save a link, we may retrieve publicly available page metadata (title, description, media info) via third-party services

Data Retention

We retain your account and saved content for as long as your account is active or as needed to provide the service. Log information is retained for a limited period for analytics and security. When you delete your account or request deletion, we remove or anonymize your personal information within a reasonable period, except where retention is required by law.

Your Rights and Choices

  • Access & correction — You can view and edit your saved content in the product, and request a copy of the personal data we hold about you.
  • Deletion — You may request deletion of your account and associated personal data by contacting us. We will delete or anonymize it except where we must retain it for legal, accounting, or security reasons.
  • Data export — You can export your saved bookmarks and curated content; contact us if you need help.
  • Analytics opt-out — You can opt out of Google Analytics using Google’s browser add-on.

If you are in the EU/UK (GDPR) or California (CCPA/CPRA), you may have additional rights, including objecting to or restricting processing and lodging a complaint with a supervisory authority. To exercise any right, contact us at the address below.

Disclosure of Information

Except as described in this policy, we will not disclose information you store on our servers to any third party unless we believe disclosure is necessary:

(1) to comply with legal requirements or respond to a subpoena, search warrant, or other legal process;

(2) to enforce the Optimal Access Terms of Use Agreement or protect our rights; or

(3) to protect the safety of the public or users of the service. We may transfer personal information to a successor in interest in connection with a sale of Optimal Access or substantially all of its assets.

Children's Privacy

Our products are not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information.

Changes to This Policy

From time to time we may update this policy. We will post changes on our site so you are always aware of what we collect, how we use it, and when we may disclose it. If we intend to use personally identifiable information in a materially different way than stated at the time of collection, we will post a notice on our website for 30 days.

Contact Us

If you have any questions about this Privacy Policy, please contact us.

Optimal Access is a software company focused on solving the problem of context management - we build tools that make it easy for anyone to organize and share links.