Privacy Policy
Effective Date: Jul. 2026
The English version of this policy governs; this translation is provided for convenience.
At Kinva AI (“we,” “us,” or “our”), we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with us through our website, app, SMS, email, or any other electronic communication (“Services”).
1. Information We Collect
We may collect the following types of information:
- Personal Information: Name, contact details (such as phone number, email address), address, and any other information you provide us.
- Usage Information: Details about how you use our Services, including device information, log files, and analytics.
- Product usage telemetry (pilot instrumentation): Named, organization-scoped event records that answer whether and how an organization uses the product (for example: app session starts, which screens were opened, draft outcome bands, capture receive/file counts by channel, chat prompt-length and session-duration buckets, voice transcript opens and recording play-starts, escalation surface/ack timing). Each event stores an event name, timestamp, organization id, optional actor user id (UUID only), optional entity type/id (UUIDs), and a small allowlisted property bag of enums, integers, booleans, or bounded floats. We never store message bodies, email subjects, contact names, addresses, or other free text in these events. Events are retained for a bounded window (about one year) and are removed with other organization data when an organization leaves the service.
- Communications: Content of messages or requests sent through SMS, in-app messaging, email, or other platforms.
- Google Account Data: If you connect a Google account, and only with your explicit OAuth authorization, we access Gmail messages, Google Drive files, Google Contacts, and Google Calendar availability and events solely to power the AI assistant features you request (e.g., drafting replies, retrieving documents, contact lookups, finding and scheduling time on your calendar). See Section 8 for how this data is used and protected.
2. How We Use Your Information
We use your information to:
- Provide, operate, and maintain our Services
- Respond to your requests or service inquiries
- Communicate with you about updates, offers, or changes to our Services
- Improve and personalize your experience
- Comply with legal requirements and protect our legal rights
3. How We Share Your Information
We may share your information:
- With service providers who help us operate our business (e.g., IT support, communication platforms)
- AI/LLM processing providers: message and document content, including content from connected Google accounts, may be sent to the third-party AI language model provider(s) we use at the time solely to generate the drafts, summaries, and analysis you request. See Section 8 for our data-handling commitments around this processing.
- As required by law, regulation, or legal process
- To protect the rights, property, or safety of us, our users, or others
- With your consent or at your direction
We do not sell or share your personal information with third parties for marketing purposes.
Text-messaging opt-in data and consent are not shared with third parties: when you or a business's customer opts in to receive text messages through our Services, the opt-in record and consent status are used only to operate the Services and are never sold, shared, or disclosed to any third party.
4. How We Protect Your Information
We use reasonable administrative, technical, and physical measures to safeguard your personal information against unauthorized access, disclosure, alteration, or destruction.
5. Your Choices
You may:
- Update or correct your information by contacting us
- Opt out of marketing communications by following the instructions in those communications
- Request deletion of your information, subject to legal or contractual obligations
6. Children’s Privacy
Our Services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.
7. California Residents: Your CCPA Rights
If you are a California resident, you have the right to:
- Know what personal information we collect and how we use it,
- Request access to your personal information,
- Request deletion of your personal information (subject to certain exceptions),
- Correct inaccurate information,
- Opt out of the sale or sharing of your personal information (we do not sell your information),
- Non-discrimination for exercising your privacy rights.
To exercise your rights, contact us with methods below. We will respond within 45 days.
8. Google API Services User Data & AI Processing
Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Where you connect a Google account, we access Gmail, Google Drive, Google Contacts, and Google Calendar data only for the features you request, and:
- We do not use this data for advertising, and we do not sell or transfer it to third parties for their own purposes.
- We do not use this data, or any content processed by AI/LLM providers, to develop, improve, or train generalized AI or machine learning models.
- Content is shared with AI/LLM providers only to generate the specific draft, summary, or analysis you requested, as described in Section 3.
- We retain Google Account data only as long as needed to provide the requested features. You may revoke our access at any time from your Google Account permissions page or by disconnecting the integration in-app, which deletes our stored credentials and, where you request it, associated synced data.
In more detail, this is how we use Google Contacts and Google Calendar:
- Google Contacts: What we read: the names, companies, job titles, phone numbers, email addresses, and contact groups of your Google contacts. What we write: we add contacts you create in Kinva to Google, update an existing Google contact when your edit in Kinva is newer, and add contacts to groups named after your contact types; contacts the assistant creates automatically from incoming messages are not sent to Google, and we never delete a Google contact. What we store: the contacts we read are saved in your Kinva contact list, together with each Google contact’s identifier so the two stay linked. What we use it for: keeping your Kinva contacts and Google Contacts in step, and recognizing who is calling, texting, or emailing you by matching phone numbers and email addresses.
- Google Calendar: What we read: whether your primary calendar is free or busy during a time window (not the titles or details of your other events), and the title, time, and link of events that Kinva itself created. What we write: only when you ask us to schedule something, in the app or by confirming the assistant’s proposal, we create an event on your primary calendar (title, start and end time, and an optional description); when the to-do an event belongs to is completed or deleted, we delete that event if it has not happened yet. What we store: only the Google event identifier, saved on the to-do the event belongs to; event details are fetched from Google when shown and kept in memory for about a minute. What we use it for: finding open times and scheduling time for your to-dos and appointments. Google’s calendar permission covers every calendar you can access; we use only your primary calendar.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on our website or app or Email. Your continued use of our Services after any changes means you accept those changes.
10. Contact Us
If you have any questions or concerns about this Privacy Policy or our practices, please contact us at:
- Email: contact@kinva.ai
- Phone: 559-570-6237
- Mailing Address: 2784 HOMESTEAD RD. 133 SANTA CLARA CA 95051