Privacy Policy

Overview

K2 Connect is a hosted secure-tunnel service operated by Alakazam Labs. You sign up for it online at k2.dev; by creating an account you agree to this policy. K2 Connect lets a K2 client — the K2 Companion app or the desktop app — reach your own machine from anywhere. This policy covers the K2 Connect service; the app itself has its own privacy policy.

Our Role

K2 Connect carries traffic between you and your own machine. We are the data controller for the limited account, billing, and operational information we collect to run the service. For the contents of your sessions we act only as a conduit — that data flows between you and your own server, and we commit not to read it (see “Your sessions” below).

What We Collect

• Account.Your email and login credentials, used to authenticate you and route your tunnel. Your password is stored only as a secure cryptographic hash — never in plaintext, and we never see it.
• Billing. For paid features (purchased subdomains and the Pro tier), billing is handled by Stripe, our payment processor. Stripe processes your card details directly; we do not store full payment-card numbers.
• Routing metadata. The subdomain you use, connection timestamps, byte volume, and the credential used to authorize routing — the minimum needed to operate and secure the tunnel.

We do not collect the contents of your sessions.

Your Sessions

When you use the tunnel, your connection is routed through a relay we operate on infrastructure we control, hosted in the European Union. To be fully transparent: today the relay terminates the encrypted connection at our server before forwarding it to your machine, which means your traffic is briefly decrypted in transit on our relay.

We do not access, read, log, store, use, sell, or share the contents of your sessions — and we commit never to. The relay exists solely to route your connection to your machine; we process only the metadata above to operate and secure it. This is our binding pledge for as long as the relay can technically see your traffic — and we are closing that window with end-to-end encryption, so that even we cannot read it in transit.

End-to-end encryption is rolling out and is carried by default on our Pro tier. As it reaches a connection, the relay carries only encrypted traffic for that connection.

Third-Party Services

K2 Connect uses Stripe for payment processing, and the infrastructure we operate to run the relay. We use no analytics providers, ad networks, or tracking. Custom or partner deployments arranged under a separate commercial license may involve additional services in whatever shape that agreement specifies.

Account Suspension

We may suspend or revoke an account or a subdomain for abuse — based on routing metadata, reports, or valid legal process — without ever reading your session contents. Acceptable use is governed by our Terms.

Data Retention

We keep account and billing information while your account is active and as required for legal and tax purposes. Routing metadata is retained only as needed to operate and secure the service.

Children's Privacy

K2 Connect is not directed at children under 13. We do not knowingly collect information from children.

Changes to This Policy

If we update this policy — for example, when end-to-end encryption becomes the default for all tiers — we will post the revised version at this URL.

Contact

Questions about this policy can be directed to support@lztek.io