Privacy Policy

Effective July 1, 2026

1. Information We Collect

When you create a KITE account or use our service, we collect:

  • Email address and password (hashed)
  • Phone number(s) you link to your account
  • Call records and metadata (date, time, duration, cost)
  • Usage data (voice minutes, searches, tool calls)
  • Optional information: caller profiles (name, notes)

2. Call Recordings & Transcripts

Call recordings are never stored server-side by default. You may opt in to transcript storage for call review in your account settings. If enabled, transcripts are:

  • Stored encrypted in our database
  • Retained for 30 days by default
  • Deleted immediately upon account deletion
  • Never shared with third parties except to comply with law

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the Service
  • Authenticate you and authorize your calls
  • Process payments via Stripe
  • Meter usage against your plan limits
  • Provide customer support
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

4. Third-Party Services

KITE uses third-party services to deliver the Service:

  • Gemini API (Google) - powers the voice AI agent
  • SignalWire - manages phone calls and SMS
  • Stripe - processes payments
  • Composio - manages social media OAuth connections (premium only)

These services have their own privacy policies. We never store third-party account tokens (e.g., your Gmail password) — they stay with Composio.

5. Recording Consent

Depending on your location, we may be required to obtain your consent before recording calls. By using KITE, you confirm that:

  • You have the right to record calls in your jurisdiction
  • If required, you have obtained consent from all call participants

You may disable transcript storage at any time in your account settings.

6. Data Retention & Deletion

We retain your data according to the following policy:

  • Account information: until account deletion
  • Call records (CDR): 13 months for billing and compliance
  • Transcripts (if opted in): 30 days or until deletion
  • Usage events: indefinitely (audit trail)

You may delete your account at any time. Deletion immediately removes all user-linked data except usage events required by law.

7. Data Security

We take security seriously:

  • Passwords hashed with argon2id
  • All data in transit encrypted with TLS
  • API calls signed and timestamped
  • Short-lived session tokens with httpOnly, secure cookies

However, no method of transmission over the Internet is 100% secure. We are not liable for unauthorized access resulting from user negligence.

8. Your Rights

You have the right to:

  • Access your personal data in your account
  • Request deletion of your account and associated data
  • Opt out of optional data collection (transcripts)
  • Update your information at any time

To exercise these rights, contact us through the support page on our website.

9. Children's Privacy

KITE is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information immediately.

10. Policy Updates

We may update this privacy policy from time to time. We will notify you of any material changes by posting the updated policy here and updating the effective date.

11. Contact

If you have questions about this privacy policy or our practices, please contact us through the support page on our website.

← Back to home