Privacy Policy

1. Overview

Kiso ("we", "us", "our") operates the real estate underwriting platform at kiso-ai.com. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using Kiso, you agree to the practices described here.

2. Information We Collect

Account Information

When you register, we collect your email address and optionally your name. This information is stored in our authentication provider.

Deal Data

Property addresses, financial figures, listing descriptions, PDFs, and other content you submit for analysis. This is the core data the Service processes.

Usage Data

Server logs, API request metadata (timestamps, endpoints), and error information collected automatically to operate and improve the Service.

Payment Information

Billing is handled entirely by Stripe. We do not store credit card numbers or payment credentials. We receive only a Stripe customer ID and subscription status.

3. How We Use Your Data

• To provide, operate, and improve the Service
• To process deal analysis via AI (your data is sent to our AI processing partner's API)
• To send transactional emails (account confirmation, password reset, deal results)
• To enforce usage limits and manage subscriptions
• To respond to support requests
• To detect and prevent fraud or abuse

We do not sell your data to third parties. We do not use your deal data to train our own AI models.

4. Third-Party Services

We use the following third-party services to operate Kiso:

• Authentication and database provider (hosted in the US)
• AI processing partner (your deal content is sent for analysis; governed by their usage policies)
• Stripe for payment processing
• Transactional email delivery provider
• Cloud hosting providers for backend and frontend infrastructure

Each third party is bound by their own privacy policies and data processing agreements.

5. Data Retention

We retain your account and deal data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., billing records).

6. Cookies and Tracking

We use cookies strictly for authentication and do not use advertising trackers or third-party analytics. We do not run any third-party tracking scripts or pixels.

7. Security

We implement industry-standard security measures including HTTPS encryption, row-level security on our database, and token-based authentication. However, no system is 100% secure and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, or to object to its processing. To exercise these rights, contact us at support@kiso-ai.com. We will respond within 30 days.

9. Children's Privacy

Kiso is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or an in-app notice. The effective date at the top of this page reflects the most recent revision.

11. Contact

Questions or requests regarding this Privacy Policy? Reach us at support@kiso-ai.com.