Privacy Notice
Last modified:
Jul 8, 2024
At kapa.ai, we take your privacy very seriously.
Introduction
At kapa.ai, we make it easy for developer-facing companies to build AI support bots for their community and we are recognized as a leader in the development of Gen AI applications for developer support.
Personal data protection is a crucial element in the development of all of our products and services. Because successful relationships require mutual trust and shared understanding, we aim for complete transparency in the way that we deal with your personal data.
Respect for your privacy guides the way we choose our business partners, design our products and services, and deal with your personal data. We handle your data according to your preferences and business requirements. Whether you are a user, customer, or business partner, kapa.ai works to ensure that you maintain control over how your data is managed, processed, and stored.
Our team works closely with privacy advisors and is committed to managing privacy and data protection regulations across the globe.
On this website, you can find details on how we handle personal data, answers to your privacy questions, and information on how you can exercise your rights as a consumer and business customers or other individuals dealing with kapa.ai. But, if you find we did not address any questions you may have, please reach out to us, we want to be completely transparent about how we collect and use your information.
We'd love to hear from you – Contact us at privacy@kapa.ai.
Here at kapa.ai, Inc, we offer ai-integration solutions optimized to help developers integrate and deploy customers’ development tools. This Privacy Notice explains how kapa.ai and its affiliates (“kapa.ai”, “Company”, “we”, “us” or “our”) collects, uses, discloses, and otherwise processes personal information (as defined below) in connection with our websites accessible via kapa.ai, the customer dashboard functionality to help you manage your account (“Webapp”), the chatbot function and the related content, platform, services, products, integrations and other functionality offered on or through our Services (collectively, the “Services”). It does not address our privacy practices relating to kapa.ai job applicants, employees and other personnel.
Data Controller
For the purposes of the General Data Protection Regulation (GDPR) and other data protection laws applicable in Member states of the European Union and other provisions related to data protection, kapa.ai is the Data Controller of the personal information we hold about customers in connection with your use of the Services. This means that we are responsible for the protection of your personal information and determining how it is used.
End-users of kapa.ai customers do not submit identifiable information to kapa.ai directly, but may choose to do so through their use of a customer’s products and services. Our customers have the power to adopt or decline features of our services which allow or require identifiable information about end users; where customers adopt such features, customers are required to obtain the consent necessary to allow their use of such features. In such cases, Customers are the Data Controller and Kapa is a Data Processor.
When does this Privacy Notice Apply?
This Notice covers how we collect and use your data, e.g., when you visit or use our consumer and customer-directed websites, applications or social media channels; purchase and use our Services; subscribe to our newsletters or other marketing communications; participate in an event we sponsor or host; contact our customer support; join or attend our business events; or otherwise interact with us (directly or indirectly) in your capacity as a user, business customer, partner, or other person with a business relationship with us.
Depending on where you reside, this Privacy Notice may be supplemented by US State Specific Jurisdictional Rights, which may provide you with additional rights if you reside within the United States.
What is Personal Information?
When we use the term “personal information” in this Privacy Notice, we mean any data or information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular natural person or household or any other data or information that constitutes “personal data”, “personal information,” or “personally identifiable information.”
Please keep in mind that since kapa.ai is a global company, this Notice may be replaced or revised in order to meet changes to existing law or new laws, as well as to provide you with additional information on how we process your data through the Services or in connection with new functionality or features, which will change over time as we improve our Services. For web or app-based functionality that may involve specific processing of your data, this Notice might be supplemented by our product specific or “just in time” notices which provide additional information on the processing of your data related to the Services.
We strongly encourage you to take some time to read this Notice in full and to check back here frequently for changes and updates. Changes and updates are effective as of the date posted. If you do not agree to this Privacy Notice, please do not provide us with your data.
Our Collection and Use of Personal Information
We collect personal information in a variety of ways. For example, you may provide us your personal information when you register for an account or contact us.
We may link or combine your activities and information collected from you on our websites and chatbot integrations with information we collect automatically. As a business customer, you elect which functionality you want to use and control what personal information we can access about users who reach us through your implementation.
Personal Information Collected from You
We may collect the following categories of personal information submitted to us by individuals through the Services:
Contact Information: We may collect first and last name, business email address, business postal address, employer, job title, your area of responsibility, company name, phone number, your country or region and communication preferences. We use this information to fulfill your request or transaction, to communicate with you directly and to enhance the Services we offer to our users and to manage and grow our organization.
Account Information: We collect business email address, user ID and password. We use this information to provide access to our Webapp and administer your account, provide you with the relevant service and information, for customer support purposes and to diagnose or fix technology problems and to maintain the safety, security and integrity of our property and Services, technology assets and business.
Payment Information: If you sign up for one of our Services requiring payment, we collect the information provided in connection with such payment. Please note that we use third-party payment processor Stripe to process credit card payments made to us. As such, we do not retain any personally identifiable financial information in connection with credit card payments, such as credit card numbers. Rather, all such information is provided directly by you to our third-party processor. The payment processor’s use of your personal information is governed by their privacy notice. To view Stripe’s privacy policy, please click here.
Inquiry and Communications Information: We collect information provided in custom messages sent through our online forms or to our email address, such as to request a demo or submit a testimonial. We use this information to investigate and respond to your inquiries, and to communicate with you, to enhance the Services we offer to our users and to manage and grow our organization.
Information Collected to provide the Service: We collect materials from customers, at the customer’s option, to be referenced by a customer’s kapa implementation. Such information includes, for example, documentation, tutorials, blogs, etc. that you choose to connect to kapa to create the bot's knowledge base. You can see a full list of supported knowledge sources here. We use this information to enable and improve the services made available to customers, specifically for that customer and users of that customer’s properties.
Information Collected Through the Use of the Service: We collect information, including any files, documents, videos, images, data, or information and questions users choose to upload or transmit through communications with us or your use of the Services (collectively, “User Content”). This includes any information in connection with our chatbot as the type of integration channel (e.g., Slack or Discord) along with any questions submitted to our chatbots and answers users receive, as well as feedback you submit. We use the User Content to provide you and our customers with the Service, to improve and develop our Services, and to prepare aggregated and detailed analytics for our customers. Please note that we, and our third-party service providers, may monitor, record, and store User Content and any information contained in User Content, including personal information a user chose to include, and may associate that information with your user ID and email depending on the preferences of the customer for whom the particular chat implementation was operated.
Feedback Information: We may also collect feedback and ratings you provide relating to our Services or products. We use this information to communicate with you, to conduct market research, inform our marketing and advertising activities and improve and grow our business.
Business Representative Contact Information: If you are a business representative, we collect information which may include your first name, last name, company contact information (e.g., email, phone, address), job title, and any other information related to the performance of the agreement with us. We collect and use your information in connection with the performance of the agreement or potential agreement with us.
Usage Data Automatically Collected
As is true of many digital properties, we and our third-party partners may automatically collect certain information from or in connection with your device when visiting or interacting with our Services, such data includes:
Log Data: Includes internet protocol (IP) address, operating system, device type and version, browser type and version, browser id, the URL entered and the referring page/campaign, date/time of visit, other user agent string data, the time spent on our Services, and any errors that may occur during the visit to our Services.
Analytics Data: Includes the electronic path you take to our Services, through our Services and when exiting our Services, UTM source, as well as your usage and activity on our Services, such as the time zone, activity information (first and last active date and time), usage history (flows created, campaigns scheduled, emails opened, total log-ins) as well as the pages, links, objects, products and benefits you view, click or otherwise interact with. We may also analyze the interaction between you and your customer using our Services.
Location Data: Such as general geographic location (not an address) that we or our third-party providers may derive from your IP address.
Other Data: Such as the applications you use or web pages you visit on our Services, or links you click within our emails.
Additional Limits on Use of Your Google Information
Our Services use certain Google services, such as the reCAPTCHA Enterprise API. Notwithstanding anything else in this Privacy Notice to the contrary, if you provide kapa.ai access to your Google data, kapa.ai’s use of that Google data will be subject to the following additional restrictions:
The Services will only use access to read, write, modify, or control email messages, metadata, headers, and settings to provide a web email client that allows users to compose, send, read, and process emails.
The Services will not transfer this data to others unless doing so is necessary (i) to provide and improve the features of the Services we provide to you, (ii) to comply with applicable law, or (iii) as part of a merger, acquisition, or sale of assets.
We will not use or share this data for serving advertising, including retargeting, personalized, or interest-based advertising.
We will not allow humans to read this data unless:
we have your affirmative agreement for specific messages,
doing so is necessary for security purposes (such as investigating a bug or abuse),
it is necessary to comply with applicable law,
the data has been aggregated and anonymized and is used only for our own internal operations purposes.
Our Services’ use of information received, and the Services’ transfer of information to any other app, from Google APIs will adhere to Google’s Limited Use Requirements.
Use and Processing of Personal Information
We may use personal information we collect to:
Fulfill or meet the reason the information was provided, such as to fulfill our contractual obligations, to deliver the Services you have requested (including with respect to any processing of personal information about your users) and to process transactions, including providing you an online product demonstration;
Manage our organization and its day-to-day operations;
Communicate with individuals, including via email and social media;
Request individuals to complete surveys about our organization, organizations we partner with, and Services;
For marketing and updates on products or services we think that you may be interested in (where applicable, we may send you marketing messages if you have given us your consent to do so or where we have relied on the soft opt-in rule);
Administer, improve and personalize our Services, including by recognizing an individual and remembering their information when they return to our Services;
Process payment for our Services;
Facilitate customer benefits and services, including customer support through our command center services;
Identify and analyze how individuals use our Services;
Conduct research and analytics on our customer and user base and our Services;
Improve and customize our Services to address the needs and interests of our user base and other individuals we interact with;
Test, enhance, update and monitor the Services, or diagnose or fix technology problems;
Help maintain the safety, security and integrity of our property and Services, technology assets and business;
To enforce our Terms of Use, to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of third-parties;
Prevent, investigate or provide notice of fraud or unlawful or criminal activity;
Comply with contractual and legal obligations and requirements;
To fulfill any other purpose for which you provide personal information; and
For any other lawful purpose, or other purpose that you consent to.
The Legal Basis for Which We May Use Your Data
To be able to process your personal information, we may rely on different legal bases, including:
Your consent (only when legally required or permitted). If we rely on your consent as a legal basis for processing your data, you may withdraw your consent at any time;
The necessity to establish a contractual relationship with you and to perform our obligations under a contract;
The necessity for us to comply with legal obligations and to establish, exercise, or defend against legal claims;
The necessity to pursue our legitimate interests, including:
To ensure that our networks and information are secure;
To administer and generally conduct business within the Company;
To prevent or investigate suspected or actual violations of law, breaches of a business customer contract, or non-compliance with the Kapa Integrity code or other Kapa policies;
To optimize or extend our marketing reach and communication relevance;
The necessity to respond to your requests;
The necessity to protect the vital interests of any person;
Any other legal basis anyhow permitted by local laws.
Our Disclosure of Personal Information
We may also share, transmit, disclose, grant access to, make available, and provide personal information with and to third-parties, as follows:
Your Employer / Company: If you interact with our Services through your employer or company, we may disclose your information to your employer or company, including another representative of your employer or company.
Marketing Providers: We coordinate and share personal information with our marketing providers in order to communicate with individuals about the Services we make available.
Our Customers: If you interact with or use our Services, we may disclose your information to our customers in the course of delivering them the Services and so that they can best deliver you their services.
Language Models. Our Services use third party language models and similar tools to draft chat responses which have been sourced, designed and architected by our proprietary technology.
Other Service Providers: In addition to the third-parties identified above, we engage other third-party service providers that perform business, infrastructure or operational services for us or on our behalf, data processing, website hosting, infrastructure provisioning, IT services, analytics services, employment application-related services, payment processing services, and administrative services.
Ad Networks and Advertising Partners: We work with third-party ad networks and advertising partners to deliver advertising and personalized content on our Services, on other websites and services, and across other devices. These parties may collect information directly from a browser or device when an individual visits our Services through cookies or other data collection technologies. This information is used to provide and inform targeted advertising, as well as to provide advertising-related services such as reporting, attribution, analytics and market research. Please see the “Third-Party Data Collection and Online Advertising” section below.
Business Partners: From time to time, we may share personal data with our business partners, or we may allow our business partners to collect your personal information. Our business partners will use your information for their own business and commercial purposes, including to send you any information about their products or services that we believe will be of interest to you.
Business Transaction or Reorganization: We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose personal information to a third-party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal information may also be disclosed in the event of insolvency, bankruptcy or receivership.
Legal Obligations and Rights: We may disclose personal information to third-parties, such as legal advisors and law enforcement:
in connection with the establishment, exercise, or defense of legal claims;
to comply with laws or to respond to lawful requests and legal process;
to protect our rights and property and the rights and property of others, including to enforce our agreements and policies;
to detect, suppress, or prevent fraud;
to protect the health and safety of us and others; or
as otherwise required by applicable law.
With Your Consent or At Your Direction: We may disclose personal information about an individual to certain other third-parties or publicly with their consent or at their direction. For example, with an individual’s consent or direction we may post their testimonial on our Sites or Service-related publications.
Cross-border Transfers
Due to our global nature, data you provide to us may be transferred to or accessed by us or our affiliates and trusted third-parties from many countries around the world. As a result, your data may be processed outside the country where you live, if this is necessary for the fulfillment of the purposes described in this Notice.
If you are located in a country member of the European Economic Area, we may transfer your data to countries located outside of the European Economic Area. Some of these countries are recognized by the European Commission as providing an adequate level of protection. With regard to transfers from the European Economic Area to other countries that are not are recognized by the European Commission as providing an adequate level of protection, we have put in place adequate measures to protect your data, such as organizational and legal measures (e.g., binding corporate rules and approved European Commission standard contractual clauses).
How Long We Keep Your Personal Information
We keep your personal information for the period necessary to fulfill the purposes for which it has been collected (for details on these purposes, see above section “Our Collection and Use of Personal Information”). Please keep in mind that in certain cases a longer retention period may be required or permitted by law. The criteria used to determine our retention periods include:
How long is the data needed to provide you with our Services or to operate our business?
Do you have an account with us? In this case, we will keep your data while your account is active or for as long as needed to provide the Services to you.
Are we subject to a legal, contractual, or similar obligation to retain your personal information? Examples can include mandatory data retention laws in the applicable jurisdiction, government orders to preserve data relevant to an investigation, or data that must be retained for the purposes of litigation, or protection against a possible claim.
How We Keep Your Data Secure
To protect your data, we will take appropriate measures that are consistent with applicable data protection and data security laws and regulations, including requiring our service providers to use appropriate measures to protect the confidentiality and security of your data. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. Depending on the state of the art, the costs of the implementation and the nature of the data to be protected, we put in place technical and organizational measures to prevent risks such as destruction, loss, alteration, unauthorized disclosure of, or access to your data. If you have reason to think that your interaction with us or your data is no longer processed in a secure manner, please reach out to the Kapa Privacy Office immediately in accordance with the “Your Choices” section as described below.
Accurate Data
In order for us to provide you with the Services or fulfill the purpose for which we collect your personal information, it is your responsibility to ensure, to the best of your knowledge, that the information you provide us with is accurate, complete and up-to-date. Furthermore, if you share any information relating to other people, it is your responsibility to collect such information in compliance with local legal requirements. For instance, you should inform such other people whose data you provide to us, about the content of this Notice and obtain their prior consent.
Third-Party Data Collection and Online Advertising
To the extent permitted by applicable law, in addition to collection through our websites and Services, we may also obtain personal information from third-parties, which we often combine with personal information we collect either automatically or directly from an individual.
For instance, if you have indicated to us that you wish to receive personalized direct marketing communications, we might aggregate data from different sources (both internally and externally) to have a better understanding of your preference and interests so that we are able to serve you with more relevant communications. You can always object to these activities and opt-out from receiving marketing-related emails by following the unsubscribe instructions provided in each email. In some instances, if you opt-out, you may lose some functionality.
We may receive the same categories of personal information as described above from the following third-parties:
Social Media: When an individual interacts with our Services through various social media networks, such as when someone “Likes” us on Facebook or follows us or shares our content on Google, Twitter, or other social networks, we may receive some information about individuals that they permit the social network to share with third-parties. The data we receive is dependent upon an individual’s privacy settings with the social network, and may include your profile information, profile picture, gender, username, user ID associated with your social media account, age range, language, country, and any other information you permit the social network to share with third-parties. Individuals should always review and, if necessary, adjust their privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services. We use this information to operate, maintain, and provide you the features and functionality of the Service, as well as improve our products.
Service Providers: Our service providers perform services solely on our behalf, such as marketing providers, collect personal information and often share some or all of this information with us. The information may include contact information, demographic information, payment information, information about your communications and related activities, and information about your orders. We may use this information to administer and facilitate our Services, your orders, and our marketing activities.
Information We Receive from Authentication Services You Connect to our Service: Some parts of our Services may allow you to login through a third-party social network or authentication service such as Facebook or Google. These services will authenticate your identity and provide you the option to share certain personal information with us, which could include your name, email address, and information on log-in date and time. The data we receive is dependent on that third-party’s policies and your privacy settings on that third-party site. We use this information to grant access to our Webapp. We may also send you service-related emails or messages (e.g., account verification, purchase confirmation, customer support, changes, or updates to features of the Site, technical and security notices).
Cookies and Other Tracking Technologies
We and our third-party providers may use (i) cookies or small data files that are stored on an individual’s computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, location-identifying technologies and logging technologies (collectively, “cookies”) to automatically collect this personal information. We may also use this information to distinguish you from other users of our Services. This helps us monitor and analyze how you use and interact with our Services. It also helps us and our partners to determine products and services that may be of interest to you. For more information about these practices and your choices regarding cookies, please see the “Control Over Your Information” section below.
Control Over Your Information
You may control your information in the following ways:
Email Communications Preferences. You can stop receiving promotional email communications from us by clicking on the “unsubscribe” link provided in such communications. You may not opt-out of service-related communications (e.g., account verification, transactional communications, changes/updates to features of the Services, technical and security notices).
Modifying or Deleting Your Information. If you have any questions about reviewing, modifying, or deleting your information, you can contact us directly at privacy@kapa.ai. We may not be able to modify or delete your information in all circumstances.
Cookies: We use only cookies relating to Google CAPTCHA. If you use CAPTCHA, you opt-into the use of these cookies. To remove them, you can clear all cookies from your browser cache.
Online Ads: To learn more about interest-based advertising and how you may be able to opt-out of some of this advertising, you may wish to visit the Digital Advertising Alliance’s (DAA) resources and/or the Network Advertising Initiative’s (NAI) online resources, at www.aboutads.info/choices or http://www.networkadvertising.org/choices/. You may also be able to limit interest-based advertising through the settings menu on your mobile device by selecting “limit ad tracking” (iOS) or “opt-out of interest-based ads” (Android). You may also be able to opt-out of some — but not all — interest-based advertising served by mobile ad networks by visiting http://youradchoices.com/appchoices and downloading the mobile AppChoices app.
Please note that when you opt-out of receiving interest-based advertisements, this does not mean you will no longer see advertisements from us or on our online Services. It means that the online ads that you do see from DAA program participants should not be based on your interests. We are not responsible for the effectiveness of, or compliance with, any third-parties’ opt-out options or programs or the accuracy of their statements regarding their programs. In addition, third-parties may still use cookies to collect information about your use of our online Services, including for analytics and fraud prevention as well as any other purpose permitted under the DAA’s Principles.
Consent
When necessary, we will obtain your consent in advance for the use of any personal information. If there is a change in the purpose of the treatment for which consent was obtained, we will contact you to obtain new consent regarding the processing of your personal information related to the new purposes. You can revoke your consent if you disagree with the changes made or if you no longer want to permit us to continue using the personal information we collect from you.
Children’s Personal Information
Our Services are not directed to, and we do not intend to, or knowingly, collect or solicit personal information from children under the age of 13. If an individual is under the age of 16, they should not use our Services or otherwise provide us with any personal information either directly or by other means. If a child under the age of 13 has provided personal information to us, we encourage the child’s parent or guardian to contact us to request that we remove the personal information from our systems. If we learn that any personal information we collect has been provided by a child under the age of 13, we will promptly delete that personal information.
Links to Third-Party Websites or Services
Our Services may include links to third-party websites, plug-ins and applications. Except where we post, link to or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to, and we are not responsible for, any personal information practices of third-party websites and online services or the practices of other third-parties. To learn about the personal information practices of third-parties, please visit their respective privacy notices.
Your Choices
You have the right to:
Confirmation: Obtain confirmation from us as to whether we process your personal information.
Access: Obtain a copy of your personal information being processed by us.
Rectification: Have your personal information rectified.
Erasure: Have your personal information anonymized or erased.
Restriction: Have your personal information restricted.
Object to:
(General) the use of your personal information on grounds relating to your situation unless we can demonstrate prevailing compelling legitimate grounds for the processing of your personal information.
(Direct marketing) receiving direct marketing communications. If you object to the processing of your personal information for direct marketing purposes, the relevant personal information shall no longer be processed for such purposes.
(Automated decision making) the use of your personal information which is based solely on automated personal information (including profiling), and which produces adverse legal or similarly significant effects concerning you.
Data Portability: the right to receive your personal information in a structured, commonly used, and machine-readable format and have the right to transmit that personal information to another company.
File a complaint or contact us at any time: with privacy-related questions and/or complaints regarding the application or violation of our Privacy Notice by us.
To exercise your rights under this Privacy Notice, see the “Contact Us” section below.
Additionally, the General Data Protection Regulation (“GDPR”) also gives you the right to lodge a complaint with your local supervisory authority.
The above rights are not absolute and can be reasonably limited, for example when the exercise of such right by the adversely affects the rights and freedoms of others.
For any questions or reasonable inquiry related to the protection of your data or regarding this Notice in general, you can contact us at privacy@kapa.ai or by contacting us toll-free at 1-833-489-0326.
Updates to This Privacy Notice
We may update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify individuals, by prominent posting on our Services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.
Contact Us
If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please send an email to privacy@kapa.ai or by contacting us toll-free at 1-833-489-0326.
US STATE JURISDICTION SPECIFIC PRIVACY NOTICES
CALIFORNIA PRIVACY NOTICE
California Privacy Disclosures
The California Consumer Privacy Act (hereafter: 'CCPA') and the California Privacy Rights Act (hereafter: ‘CPRA’) provide California consumer residents who reside in California with specific rights regarding their personal information (which we also refer to as personal data). In addition to the general Privacy Notice, this section describes your CCPA/CPRA rights and explains how to exercise those rights.
The following does not apply to de-identified or aggregated personal data or data publicly available, which are not considered personal information since they do not identify any individual.
Information We Collect
In the course of providing you and your users with our Services and/or when visiting our websites, we collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular user or device. The purposes for which we process your personal data can be found above under the section “Our Collection and Use of Your Personal Information” and information about retention periods can be found under the section “How Long We Keep Your Personal Information”.
We might have collected and/or disclosed for an aforementioned purpose the following categories of personal data from our consumers in the last twelve (12) months before the effective date of this Notice the following categories of personal data from you:
Identifiers
Examples: A real name, alias, postal address, online identifier, Internet Protocol (IP) address, email address, account name, or other similar identifiers.
We collected: Yes
We disclosed: Yes, to affiliates, customers, service providers, and other vendors mentioned in this Notice.
Commercial Information
Examples: Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
We collected: Yes
We disclosed: Yes, to affiliates, customers, service providers, and other vendors mentioned in this Notice.
Internet or Other Similar Network Activity
Examples: Browsing history, search history, and information on interaction with a website, application, advertisement, or other content.
We collected: Yes
We disclosed: Yes, to affiliates, customers, service providers, and other vendors mentioned in this Notice.
Geolocation Data:
Examples: General physical location or movements, or the location of your device or computer.
We collected: Yes
We Disclosed: Yes, to affiliates, customers, service providers, and other vendors mentioned in this Notice.
Your Rights
"Right to Know": You may have the right to request that we disclose to you what personal data of yours we collect, use, and/or disclose.
Right to Delete: You may have the right to request the deletion of your personal data collected or maintained by us. Depending on your choices, certain offerings may be limited or unavailable. Upon verifying the validity of a deletion request, we will delete your personal data from our records and instruct any service providers or third-parties to delete your information, when applicable.
Right to Control Use: You may have the right to control or limit the use of your personal data, including:
Right to opt-out of sales/sharing/cross-context behavioral advertising.
Right to object to or opt-out of automated decision-making/profiling.
Right to opt-out of processing/limit use of sensitive personal data.
Right of Access: You may have the right to access your personal data, and to transmit it to another entity.
Right of Correction: You may have the right to request amendments to your personal data if it is inaccurate or outdated in any way. Upon verifying the validity of a verifiable correction request, we will use commercially reasonable efforts to correct your personal data as directed, considering the nature of the personal data and the purposes of maintaining your personal data.
Non-Discrimination
We will not discriminate against you for exercising your rights under the CCPA/CPRA. Based on the complexity of the request and the applicable regulations, we may charge a fee for your request. We may offer a CCPA/CPRA-permitted financial incentive, participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.
VIRGINIA PRIVACY DISCLOSURES
Virginia Privacy Disclosures
The Virginia Consumer Data Protection Act (hereafter “VCDPA”) provides Virginian consumer residents who reside in Virginia with specific rights regarding their personal data. In addition to the general Privacy Notice, this section describes your VCDPA rights and explains how to exercise those rights.
The following does not apply to de-identified or aggregated personal data or data publicly available, which are not considered personal information since they do not identify any individual.
Your Rights
As a Virginia resident, you have the following rights, subject to some exceptions, regarding your personal data effective as of January 1st, 2023:
Right to Confirm if a Controller is processing your personal data and to access personal data.
Right to Correct inaccurate personal data.
Right to Delete.
Right to Obtain a copy of personal data in a portable format.
Right to Opt-Out of the processing of personal data for purposes of targeted advertising, sale, or profiling with legal or other significant effects.
Right to Appeal – Consumers have the right to appeal a controller's (i.e., business) denial to act within the time outlined in the VCDPA.
EXERCISING YOUR RIGHTS
You may make a verifiable request to exercise your rights by contacting us via this link or by emailing us at privacy@kapa.ai or by contacting us toll-free at 1-833-489-0326.
Please note that the above rights depend on a few things, and we may refuse requests if there are exceptions under the applicable law.
If we cannot verify you (or your authority to act on behalf of another person) we have the right to deny the requests. While verifying your identity we generally avoid requesting additional information from you for verification purposes. If, however, we cannot verify your identity from the information already maintained by us, we may request additional information from you, which shall only be used to verify your identity while you are seeking to exercise your rights under applicable law, and for security or fraud-prevention purposes. We delete any new personal information collected for verification as soon as practical after processing your request, except as required to comply with applicable legislation.
An "authorized agent" means a natural person, or a business entity registered with the Secretary of State that you have authorized to act on your behalf, conditioned you have:
Provided the authorized agent written permission to do so, and we could verify this; and
verified your own identity directly with the business.
Subsection 1 does not apply when you have provided the authorized agent with a valid power of attorney.
We do our utmost to timely respond to a verifiable Individual, and in a portable format unless it is excessive, repetitive, or materially unfounded. If we require more time, we will inform you of the reason thereof and the extension period in writing.
DO NOT SELL OR SHARE PERSONAL INFORMATION?
We do not respond to “Do Not Sell” requests as we do not sell your personal information to third-parties. In the twelve months before the effective date of this Privacy Notice, we have not sold any personal information of Customers, as per the definition of the CCPA/CPRA, VCDPA, and similar laws.
We use only cookies relating to Google CAPTCHA. If you use CAPTCHA, you opt-into the use of these cookies. After receiving your opt-in consent, we sometimes disclose personal information collected via cookies for cross-contextual behavioral advertising purposes, which may qualify as sharing your personal information under the VCDPA. You can clear the Google CAPTCHA cookies by clearing all cookies in your cache. For more information on how we use cookies and other tracking technologies, please refer to the information on cookies in the Privacy Notice above.
WHEN WILL THERE BE UPDATES TO THIS PRIVACY NOTICE?
We may update this Privacy Notice or change it from to time, in particular, to address new features and functionality that we offer to our customers. We encourage you to check back here frequently to review what has changed.
The most current version of this Notice will govern our use of your data when posted and can be found on our website.
join the leading community-focused teams in reducing support