Privacy Policy

This Privacy Policy ('Policy') explains how Kiteum ('Kiteum', 'we', 'our') collects, uses, shares, and protects information in connection with Kiteum Agent (the 'Platform'), operated at agent.kiteum.com and related subdomains.

This Policy applies to two kinds of people: businesses that register for and manage an account on the Platform ('Business', 'you'), and the customers or visitors who interact with a Business's AI Agent through a QR code, hosted business page, or website chat widget ('Visitors'). Where relevant, this Policy distinguishes between the two.

This Policy should be read together with our Terms of Service. If you do not agree with this Policy, you must not use the Platform.

Account information: when a Business registers, we collect business name, contact details, email address, and billing information where a paid plan is selected.

Content you upload: business details, menus, brochures, pricing, FAQs, and other documents that a Business provides to configure its Agent. This content is used to power the Agent's responses and, as explained in our Terms of Service, is surfaced to Visitors who interact with the Agent.

Conversation data: messages exchanged between a Visitor and an Agent, including timestamps and metadata, are stored so that a Business can review conversations, and so Kiteum can operate, monitor credit usage, and improve the Platform.

Lead and enquiry details: when a Visitor voluntarily submits information through the Agent, such as name, phone number, or email address, this is collected and stored so it can be shared with the Business that owns the Agent.

Usage and device data: we automatically collect limited technical information such as IP address, browser type, device type, and general usage patterns (for example, pages visited or features used) to operate and secure the Platform.

To provide, maintain, and improve the Platform, including generating AI Agent responses, tracking AI credit usage, and enabling features such as appointment booking and lead collection.

To communicate with a Business about its account, billing, plan usage, and material changes to the Platform or these policies.

To detect, prevent, and address fraud, abuse, security incidents, or violations of our Terms of Service.

To analyse aggregated, non-identifying usage trends so we can improve the Platform's performance and features. Kiteum does not sell personal information to third parties.

To generate Agent responses, the content a Business uploads and the messages exchanged in a conversation are processed by artificial intelligence models, which may include third-party AI model providers operating under their own data processing terms.

As set out in our Terms of Service, any content a Business uploads for use by its Agent should be treated as public-facing, since it may be surfaced in whole or in part to any Visitor who interacts with the Agent. Businesses should not upload confidential, sensitive, or proprietary information they do not want disclosed.

Kiteum does not use a Business's uploaded content or conversation data to train AI models for the benefit of other businesses.

Lead and enquiry details submitted by a Visitor are shared only with the Business that owns the Agent through which they were submitted. Kiteum does not sell or rent this information to unrelated third parties.

We share information with service providers who help us operate the Platform, such as hosting providers, payment processors, email delivery services, and AI model providers, solely to the extent needed to provide the Platform.

We may disclose information where required by law, regulation, legal process, or a valid governmental request, or where necessary to protect the rights, property, or safety of Kiteum, our users, or the public.

If Kiteum is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy or a policy offering at least equivalent protection.

We retain account information, uploaded content, and conversation data for as long as the account remains active, and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements.

On termination of an account, as described in our Terms of Service, a Business's access to the Platform ends and associated data is deleted or anonymised within a reasonable period, except where retention is required by law.

A Business may request deletion of specific uploaded content or Visitor lead data at any time by contacting us, subject to any legal or operational retention requirements.

We use reasonable administrative, technical, and physical safeguards designed to protect information from unauthorised access, disclosure, alteration, or destruction.

No method of transmission or storage is completely secure. While we work to protect information, we cannot guarantee absolute security, and a Business is responsible for maintaining the confidentiality of its own account credentials as described in our Terms of Service.

A Business may access, correct, or update its account information at any time through its dashboard, or by contacting us directly.

A Visitor who has submitted information through an Agent and wishes to access, correct, or request deletion of that information may contact the Business that owns the Agent, or contact Kiteum directly, and we will coordinate with the relevant Business as needed.

Depending on applicable law, individuals may have additional rights regarding their personal information, including the right to object to certain processing or to request a copy of their data. Requests can be sent to the contact details below.

The Platform and Agent-hosted pages use cookies and similar technologies to keep users signed in, remember preferences, and understand how the Platform and Agents are used.

A Business or Visitor can control cookies through their browser settings; disabling cookies may affect certain features of the Platform or the Agent experience.

The Platform is intended for use by businesses and their staff, and is not directed at children. We do not knowingly collect personal information from children. If we become aware that a child's information has been collected without appropriate consent, we will take steps to delete it.

Kiteum is based in India, and information collected through the Platform may be stored and processed in India or other countries where our service providers operate.

This Policy is governed by the laws of India, consistent with the governing law provision in our Terms of Service.

Kiteum may update this Policy from time to time. When changes are made, the updated Policy will be posted at agent.kiteum.com/privacy-policy with a revised 'Last Updated' date. For material changes, we will notify registered businesses by email or in-Platform notice at least 14 days before the changes take effect. Continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.