Privacy Policy

Personal Information

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support:

• Name, email address, and contact information
• Company name and business information
• Account credentials and authentication data
• Payment and billing information
• Communications and support requests

Usage Information

We automatically collect certain information about your use of our services:

• Device information (IP address, browser type, operating system)
• Usage patterns and feature interactions
• Performance metrics and error logs
• Cookies and similar tracking technologies

AI Training Data

When you use our AI services, we may collect:

• Conversation transcripts and audio recordings (with consent)
• Chat logs and message content
• User interactions and feedback
• Performance and accuracy metrics

Data received through Google Workspace APIs is excluded from AI Training Data and is never used to train, fine- tune, or improve AI/ML models. See Section 3, Google Workspace Limited Use below.

We use the information we collect for the following purposes:

Service Provision

• Provide, maintain, and improve our AI services
• Process transactions and manage billing
• Authenticate users and prevent fraud
• Provide customer support and technical assistance

AI Improvement

• Train and improve our AI models, using only data customers have explicitly authorized for this purpose
• Analyze usage patterns to enhance features
• Develop new AI capabilities and services
• Ensure AI safety and reliability

Google Workspace API data is never used to train, fine-tune, or improve generalized AI/ML models.

Communication

• Send service updates and notifications
• Respond to inquiries and support requests
• Share product news and feature announcements
• Conduct surveys and gather feedback

Kipps AI's use and transfer of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Data obtained through Google Workspace APIs (such as Calendar, Gmail, and Drive) is used solely to provide and improve the functionality requested by the user.
• Google Workspace data is not used to develop, improve, or train generalized or foundational artificial intelligence or machine learning models.
• Google Workspace data is never sold, and is never shared with third-party AI providers for model training.
• Where any AI feature processes Google Workspace data to deliver the requested functionality (e.g. summarizing an event), that data is not retained by the AI provider or used to train its models.

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

We may share information with trusted third-party service providers who assist us in operating our business:

• Cloud hosting and infrastructure providers
• Payment processors and billing services
• Analytics and monitoring services
• Customer support platforms

Legal Requirements

We may disclose information when required by law or to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Enforce our terms of service

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to the same privacy protections.

We implement industry-standard security measures to protect your information:

Technical Safeguards

• End-to-end encryption for data in transit and at rest
• Multi-factor authentication and access controls
• Regular security audits and penetration testing
• Secure data centers with 24/7 monitoring

Organizational Measures

• Employee training on data protection practices
• Strict access controls and need-to-know basis
• Regular security awareness programs
• Incident response and breach notification procedures

Compliance Certifications

• SOC 2 Type II compliance
• ISO 27001 certification
• GDPR and CCPA compliance
• HIPAA-ready infrastructure

You have the following rights regarding your personal information:

Access and Portability

• Request access to your personal information
• Obtain a copy of your data in a portable format
• Review how your information is being used

Correction and Updates

• Update or correct inaccurate information
• Complete incomplete personal data
• Modify your account settings and preferences

Deletion and Restriction

• Request deletion of your personal information
• Restrict processing of your data
• Object to certain uses of your information
• Withdraw consent for data processing

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Account Information: Retained while your account is active and for 30 days after deletion
• Usage Data: Retained for up to 2 years for analytics and service improvement
• AI Training Data: May be retained longer for model training, but anonymized when possible. Google Workspace API data is excluded and is never retained for training purposes.
• Legal Requirements: Some data may be retained longer to comply with legal obligations

You can request earlier deletion of your data by contacting us, subject to legal and operational requirements.

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses for EU data transfers
• Adequacy decisions and approved transfer mechanisms
• Data processing agreements with all service providers
• Regular compliance monitoring and audits

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will:

• Post the updated policy on our website
• Update the "Last Modified" date
• Notify you of material changes via email or service notifications
• Provide a reasonable notice period before changes take effect

Your continued use of our services after the effective date constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days or as required by applicable law.