Privacy Policy
Effective date: [Effective Date]
[Legal Company Name] ("Kooi") explains here how it handles personal information. This policy does not claim compliance with any specific law; jurisdiction-specific review is required.
1. Two Roles
Kooi as service provider / processor: For lead/contact data, uploaded documents, call recordings, transcripts and AI analysis that Customers place in Kooi, the Customer decides why and how the data is used and Kooi processes it on the Customer's behalf under the DPA. The Customer's own privacy notice governs its relationship with those individuals.
Kooi as controller: For information we collect directly from users and website visitors (account, billing, usage, support and technical data), Kooi decides how it is used. [LEGAL REVIEW: confirm role classification per jurisdiction.]
2. Information We Collect
- Account information: name, work email, phone, role, credentials, authentication data.
- Workspace information: company name, settings, team members, plan, agent configurations, campaigns, scripts.
- Billing information: plan, credits/wallet balance, invoices, transaction records. Card data is handled by [Payment Provider, e.g. Razorpay].
- Lead/contact information: names, phone numbers, emails, company, custom fields, notes and other data Customers choose to upload.
- Uploaded documents: brochures and other business material.
- Call metadata: numbers, timestamps, duration, status, disposition, cost, telephony identifiers.
- Call recordings, transcripts and AI analysis: audio, text transcripts, summaries, extracted data, qualification results.
- Usage and technical information: IP address, device/browser, logs, feature usage, errors.
- Cookies: see the Cookie Policy.
3. How We Use Information
To provide and operate the service; run calls and analytics; authenticate users; process payments; provide support; secure and prevent abuse of the platform; monitor compliance with the AUP; comply with law; and improve the service. [DESCRIBE ONLY IF APPLICABLE; Customer Data use for improvement/training to be defined.]
4. AI and Automated Processing
Kooi uses AI services (speech-to-text, text-to-speech, language models) to process Customer Data, generate voice responses, transcribe, summarize, classify and extract information. Outputs may be inaccurate. [LEGAL REVIEW: automated decision-making rules.]
5. Third-Party Service Providers
We share data with providers that help us deliver the service, such as telephony, speech, language-model, cloud infrastructure, storage, analytics, payment and support providers. A list is available at [Sub-Processor List URL]. We do not sell personal information. [LEGAL REVIEW: confirm accuracy per jurisdiction.]
6. Data Storage and Location
Data is stored with [Hosting Provider / Regions].
7. Retention
We keep information only as long as needed for the purposes described, unless law requires longer. [Retention Periods by data type: account, leads, recordings, transcripts, logs, billing]. Customers may configure or request deletion where available.
8. Security
We use [ONLY VERIFIED MEASURES] designed to protect information. No system is fully secure. We make no certification claims in this policy.
9. International Transfers
Data may be processed in countries other than where it was collected, including by our providers. [Transfer Mechanism, e.g. Standard Contractual Clauses]. [LEGAL REVIEW.]
10. Customer Responsibilities
Customers must have lawful grounds and notices to upload leads and to call, record and transcribe (see Terms and AI / Voice Calling Disclosure).
11. Your Rights
Depending on your location, you may have rights to access, correct, delete, restrict, object, port your data, withdraw consent, or complain to a regulator. For data Kooi holds as a processor, we will refer requests to the relevant Customer and assist them as the DPA requires. Contact [privacy@kooi.ai]. [LEGAL REVIEW: list rights per jurisdiction.]
12. Account and Data Deletion
Workspace owners can request account closure and deletion via [support@kooi.ai]. Deletion timing: [Deletion Period, e.g. 30 days]. Some data may be kept for legal, billing, security or backup purposes for [Backup Overwrite Period, e.g. 90 days]. Individuals whose data was uploaded by a Customer should contact that Customer.
13. Children
Kooi is a business service not directed to children under [Age, e.g. 18]. We do not knowingly collect their data directly. Customers must not upload children's data without lawful authority.
14. Changes
We will post updates with a new effective date and notify users of material changes [METHOD].
15. Contact
[Legal Company Name], [Registered Address], [privacy@kooi.ai]. [DATA PROTECTION / GRIEVANCE OFFICER, if required].