Privacy Policy

Privacy Policy for Kindship.ai

Last updated: 9/27/2025

1. Introduction

Kindship.ai (“we”, “our”, or “us”) is committed to protecting your privacy and maintaining transparency about our data practices. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI conversation and autonomous agent services. This policy complies with applicable privacy laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other relevant privacy regulations.

2. Data Controller Information

Kindship.ai serves as the data controller for personal information collected through our services. For EU users, our representative can be contacted at gdpr@kindship.ai.

3. Information We Collect

3.1 Personal Information

• Account Information: Name, email address, username, profile picture, billing information
• Contact Information: When you contact us for support or inquiries
• Authentication Data: Login credentials, multi-factor authentication settings

3.2 AI Interaction Data

• Conversation Data: Messages, prompts, and responses from AI interactions
• Agent Instructions: Commands, configurations, and parameters provided to autonomous agents
• Agent Performance Data: Success rates, error logs, and operational metrics
• User Preferences: Personalization settings, agent configurations, and usage patterns

3.3 Technical Information

• Device Information: Browser type, operating system, device identifiers
• Network Information: IP address, location data (with consent), connection details
• Usage Analytics: Feature usage, session duration, click patterns, performance metrics
• Log Data: Server logs, error reports, security events

3.4 Cookies and Tracking Technologies

We use necessary cookies for service functionality, analytics cookies (with consent) for service improvement, and preference cookies to remember your settings. You can manage cookie preferences through our cookie banner or browser settings.

4. Legal Basis for Processing (GDPR)

We process personal data based on:

• Contractual Necessity: To provide our AI services and fulfill our Terms of Service
• Legitimate Interests: For service improvement, security, and fraud prevention
• Consent: For analytics, marketing communications, and optional features
• Legal Obligations: To comply with applicable laws and regulations

5. How We Use Your Information

5.1 Service Provision

• Providing AI conversation and autonomous agent services
• Processing and responding to your queries and instructions
• Maintaining and improving service performance
• Personalizing your experience and agent interactions

5.2 AI Model Training and Improvement

• Training and fine-tuning AI models using anonymized data
• Improving response accuracy and agent capabilities
• Developing safety mechanisms and bias detection
• Enhancing natural language understanding

5.3 Security and Safety

• Monitoring for violations of our AI Safety Guidelines
• Detecting and preventing fraudulent or harmful activities
• Ensuring platform security and integrity
• Implementing safety measures for autonomous agents

5.4 Communication and Support

• Providing customer support and technical assistance
• Sending important service updates and security notifications
• Marketing communications (with your consent)

6. Data Storage and Security

6.1 Security Measures

We implement industry-standard security measures including:

• End-to-end encryption for sensitive communications
• Encrypted data storage using AES-256 encryption
• Regular security audits and penetration testing
• Multi-factor authentication for account access
• Secure data centers with physical security controls
• Employee security training and background checks

6.2 Data Location and Transfers

Your data may be processed in the United States and other countries where we operate. For EU users, we ensure adequate protection through appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Sharing and Disclosure

7.1 We Share Data With:

• Service Providers: Third-party vendors who help us operate our services (hosting, analytics, customer support)
• AI Model Providers: For processing your requests (data is anonymized where possible)
• Legal Authorities: When required by law or to protect safety and security
• Business Transfers: In the event of merger, acquisition, or asset sale

7.2 We Do NOT:

• Sell your personal data to third parties
• Share your conversations for marketing purposes
• Provide personal data to advertisers
• Use your data for discriminatory purposes

8. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy:

• Account Data: Until account deletion plus 30 days
• Conversation Data: Retained for service provision, anonymized after 2 years
• Agent Performance Data: Anonymized and retained for up to 5 years for safety research
• Security Logs: Retained for up to 1 year for security purposes
• Legal Obligations: Retained as required by applicable laws

9. Your Rights and Choices

9.1 Universal Rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Export: Download your data in a portable format

9.2 GDPR Rights (EU Users):

• Portability: Receive your data in a machine-readable format
• Restriction: Limit processing of your personal data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for optional processing
• Lodge Complaints: File complaints with your local data protection authority

9.3 CCPA Rights (California Users):

• Know: Information about data collection and sharing practices
• Delete: Request deletion of personal information
• Opt-Out: Opt out of sale of personal information (we don't sell data)
• Non-Discrimination: Equal service regardless of privacy choices

10. AI Training Data Practices

10.1 Data Processing for AI Training

• We use de-identified conversation data to improve AI models
• Personal identifiers are removed or pseudonymized before training
• Sensitive personal information is excluded from training datasets
• You can opt-out of AI training data usage through your account settings

10.2 Agent Learning and Adaptation

• Autonomous agents may learn from your interactions to improve performance
• Agent learning is confined to your account unless you consent to broader training
• You can disable agent learning in your privacy settings

11. Children's Privacy

Our services are not intended for children under 13 (or applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we learn we have collected a child's information, we will delete it promptly.

12. International Data Transfers

For international transfers of personal data, we use appropriate safeguards including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Other legally recognized transfer mechanisms

13. Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. We will provide notice of material changes through email or prominent notices on our service.

14. Contact Information

14.1 General Privacy Questions:

Email: privacy@kindship.ai

14.2 Data Protection Officer (EU):

Email: dpo@kindship.ai

14.3 GDPR Representative (EU):

Email: gdpr@kindship.ai

14.4 Exercise Your Rights:

To exercise your privacy rights, visit your account settings or contact us at rights@kindship.ai. We will respond to your request within the timeframes required by applicable law (typically 30 days for GDPR requests, 45 days for CCPA requests).

15. Legal Basis Summary