We use information to provide the service, respond to requests and manage subscriptions. Voice/video features involve specialist providers. You can contact [email protected] about access, correction or deletion.
1. Scope and responsibility
Greenpeas Inc operates KituSDR. This Policy covers our own website visitors, prospective customers, account holders and information processed through the service. For our own accounts, billing, security and marketing, we decide how information is used. When a business uses its KituSDR assistant to interact with its visitors, that business determines the purposes of its visitor data, and we process that information to provide its workspace.
A business's own website privacy notice also applies when you interact with its assistant. Contact that business first about its use of your data; you may also contact us if you need help identifying the relevant workspace.
2. Information we collect
Information depends on which features you use.
- Account information: name, email, login credentials in protected form, workspace settings and account activity.
- Sales and demo requests: name, email, phone number, optional company and business needs, consent choices and request history.
- Workspace content: website pages or documents you import, assistant settings, conversation messages, captions, summaries and lead details supplied in conversations.
- Voice/video information: microphone audio and generated speech processed during an active session, related captions and connection/session usage. The AI avatar does not require the visitor's camera to be on.
- Billing information: Stripe customer and subscription identifiers, plan, payment status and invoice-related information. Full payment card details are entered with Stripe.
- Technical information: request and security logs, browser or device information, network identifiers processed by our infrastructure, essential session cookies and usage counters.
3. How we use information
We use information to create and protect accounts, answer product questions, operate customer assistants, import and retrieve knowledge, capture and display leads, measure plan usage, process subscriptions, respond to support or privacy requests and investigate abuse or payment issues.
We use the contact details in a demo or sales request to respond to that request. Talk to Kitu starts a public AI voice conversation without requiring a contact form or account; captions and details you choose to share can be saved in our website lead inbox. Promotional follow-up email uses a separate optional choice and email confirmation. KituSDR manages a Lead Engagement list and a three-email introduction over five days, delivered through Hostinger Mail. Declining marketing does not prevent the conversation or a requested demo. Unsubscribing or becoming a subscriber stops pending promotional follow-ups. We do not sell personal information or use workspace conversations to operate an advertising network.
4. AI processing
Relevant knowledge excerpts, recent conversation context and explicit lead details may be sent to the selected model provider to generate a response. OpenAI is the current default text and voice provider. Google or xAI may process text when selected by the platform operator. We do not send the complete contents of every customer's workspace with each answer; selected material can nevertheless contain personal information you included in it.
KituSDR does not train its own foundation model on your content. Provider-side handling, abuse monitoring and retention depend on the applicable provider terms and configuration; this Policy does not promise zero provider retention or a special data-residency agreement. Avoid adding information to knowledge sources that your visitors should not receive.
5. Voice and avatar video
Your microphone is used after you start a voice or video session and grant browser permission. Microphone audio is transmitted while the session is active. For avatar video, generated speech is also processed through Runway and LiveKit to animate and deliver the avatar. Captions, messages, summaries and captured lead details can be saved in the workspace.
Kitu is an AI-generated presenter. A moving or blinking avatar on a public page can be a presentation animation rather than a connected call. Starting a live call is a separate action. Stop the call or close it to end microphone transmission; your browser also provides microphone controls. Review any notices shown before starting the session.
6. Service providers and disclosure
We share information necessary to operate the features you use with the following provider categories. Not every provider receives every customer's information.
If you connect YouTube, KituSDR uses Google’s read-only authorization to show the connected channel and its upload titles in your workspace. We keep an encrypted authorization token to maintain your connection. Channel and video listings are fetched when you browse, and are not stored in the database, shared with visitors, or sent to AI providers. Caption files that you upload separately are workspace content and can be used by your assistant once you save them. Disconnect in Knowledge or revoke access in your Google Account settings. Disconnecting does not delete files you uploaded separately or change anything on YouTube.
- OpenAI and, when configured, Google or xAI: AI text and/or audio processing.
- Runway and LiveKit: avatar generation and real-time media transport for video features.
- Stripe: payment processing, subscriptions, billing records and the billing portal.
- Hostinger Mail, when email is enabled: recipients' email addresses and message contents for requested messages and consent-based promotional follow-ups. Copies of outgoing messages can be retained in our business mailbox.
- Customer-connected services: qualifying lead details go to a customer's connected HubSpot account. A customer who sends a follow-up from their workspace shares the recipient address and message with their selected SMTP provider.
- Our hosting provider and Cloudflare: hosting, delivery, network security and related operational logs.
- Authorized operators and support personnel: access needed to assist you, investigate incidents or administer the service.
- Other recipients when you authorize a connected integration, when legally required, or as reasonably necessary to protect rights and prevent fraud. A business transfer may involve relevant records, subject to applicable privacy protections.
7. International processing
We are based in Canada, and our service providers may process information in Canada, the United States or other countries. Laws and lawful government-access rules can differ from those where you live. We remain responsible for information under our control and use appropriate contractual or other safeguards when arranging processing. We do not promise Canada-only or EU-only hosting. Contact us if your business requires a specific processing location or agreement before uploading data.
9. Retention and deletion
We retain account and workspace information while needed to provide the service and for legitimate operational, security, dispute and legal requirements. Account closure or a verified deletion request initiates a review of what can be deleted or anonymized. Billing records and records needed to comply with law, prevent fraud or honor an unsubscribe request may need to be retained longer.
Deleting an item in a workspace does not necessarily delete associated billing, security or usage records. Backup copies may remain until replaced or expired through the backup process; they are not a promise of ongoing customer access. We do not currently promise an automatic fixed-day deletion schedule. Contact us to arrange account-level deletion and confirm what is retained and why.
10. Safeguards
We use measures appropriate to the information we handle, including authenticated workspace access, protected credentials, access restrictions and encrypted network connections in production. No system or transmission is completely secure. Do not send passwords, full payment card details or unnecessary sensitive information through a sales conversation. If you believe information has been exposed, contact us promptly.
11. Your requests and rights
Subject to applicable law and necessary verification, you can request access to personal information, correction, deletion, information about processing, or withdrawal of consent. Other rights may apply depending on where you live. Write to [email protected] with enough context to identify the account or the website where you used the assistant; do not send unnecessary sensitive documents in your initial message.
We may need to verify identity or work with the business that controls the visitor data before acting. Some requests are subject to legal exceptions. You may raise a concern with the appropriate privacy regulator, including the Office of the Privacy Commissioner of Canada where applicable. We will not restrict a mandatory privacy right because you have made a complaint.
12. Children and changes
KituSDR is intended for adult business users, not children. If you believe a child has provided personal information without appropriate authorization, contact us. We may update this Policy as the service or our providers change and will identify the effective date. Material changes will be communicated where appropriate or legally required.
1217 Owl’s Head Road
Mississauga, Ontario L5E 0A6, Canada
[email protected]