Security
Last updated July 31, 2026
Security is the reason most of what Kalyvor does can happen without an account. Here's how it works.
Encryption in transit
Every connection to Kalyvor — the site, file uploads, and downloads — is encrypted with TLS. Nothing you send is transmitted in plain text.
File handling
Where a tool runs entirely in your browser, your file never reaches our servers at all. Where a tool needs a server-side step, the file is written to a temporary workspace that exists only for that request and is removed as soon as the job finishes — before the result is even sent back to you. Nothing is written to long-term storage, so there is no retention period to wait out.
Application security
We monitor for application errors and unexpected behavior with Sentry, so problems are caught quickly. Dependencies are kept up to date, and infrastructure runs on Vercel's managed platform rather than self-hosted servers we'd otherwise need to patch and monitor ourselves.
Reporting a vulnerability
If you believe you've found a security issue, please email privacy@kalyvor.com with details before disclosing it publicly. We'll acknowledge reports and work to address genuine issues promptly.
Still have a question?
We read every message — reach out and a real person will get back to you.
- No account required
- Files auto-deleted
- TLS everywhere
- Free to start