Privacy Policy

1. Introduction

Kitt Agents ("we", "us", or "our") operates the kittagents.com website, mobile application, and SMS service. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your data.

2. What We Collect

Account Information

• Name, email address, and phone number
• Authentication credentials (passwords are hashed, never stored in plain text)

Payment Information

• Payment processing is handled entirely by Stripe. We never see, store, or have access to your full card number, CVV, or bank account details.
• We store your Stripe customer ID and subscription status to manage your account.

Chat Messages

• Messages you send to and receive from your AI agent are stored in our database to provide the service and maintain conversation history.

Support Messages

• Messages sent through our support channel are stored for 30 days to resolve your requests, then automatically deleted.

Usage Data

• IP addresses, browser type, operating system, and access times are collected automatically via Google Cloud Logging.
• Error reports and performance data are collected via Sentry.

3. How We Use Your Data

• Provide the service: process your messages, generate AI responses, and maintain your agent's conversation history
• Process payments: manage subscriptions, billing, and invoices through Stripe
• Send notifications: subscription reminders, security alerts, and important service updates
• Improve the service: analyze usage patterns to fix bugs, improve performance, and develop new features
• Prevent abuse: detect and block unauthorized access, spam, and other harmful activity

We do not sell your personal information. We do not use your chat messages to train AI models.

4. Third-Party Processors

We share data with the following third-party services as necessary to operate the platform:

• Stripe — payment processing (card details, billing address, transaction history)
• Twilio — SMS delivery and phone number verification (phone number, message content). Your phone number is used to send AI agent responses, verification codes, account notifications, and subscription reminders. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe, HELP for help. We do not share your phone number with third parties for marketing purposes.
• Resend — email delivery (email address, email content)
• Hetzner Cloud — server infrastructure for AI agent instances (EU and US regions)
• Google Cloud Platform — application hosting, database, and logging (US region)
• Sentry — error monitoring and performance tracking (error context, stack traces)
• OpenAI — AI model provider that processes your chat messages to generate responses

Each processor is bound by their own privacy policy and data processing agreements. We only share the minimum data necessary for each service to function.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5. Data Retention

• Account data: retained until you delete your account
• Chat messages: retained up to a configurable limit per user (default: 500 messages). Older messages are automatically removed.
• Support messages: 30 days, then automatically deleted
• Invoices: retained by Stripe per their data retention policy
• Audit logs: 365 days
• Server logs: 30 days

When you delete your account, we remove your personal data from our systems within 30 days. Some data may persist in encrypted backups for up to 90 days.

6. Data Security

We protect your data with encryption in transit (TLS), encrypted storage, access controls, and regular security reviews. Each user's AI agent runs on a dedicated, isolated server instance. However, no system is perfectly secure, and we cannot guarantee absolute security.

7. Your Rights

Under GDPR, CCPA, and similar privacy laws, you have the following rights:

• Access: export your data from Profile > Account > Download
• Deletion: delete your account from Profile > Security > Delete Account
• Portability: download your data as a JSON export
• Correction: edit your profile information at any time
• Objection: contact us to object to specific data processing

To exercise any of these rights, use the self-service options in your account settings or contact us at support@kittagents.com. We will respond within 30 days.

8. Cookies

We use a session cookie to keep you logged in. This cookie is essential for the service to function and does not track you across other websites. We do not use advertising or analytics cookies. A cookie consent banner is shown on your first visit.

9. Children's Privacy

Our services are not intended for users under 16 years of age. We do not knowingly collect personal information from anyone under 16. If we learn that we have collected data from a user under 16, we will delete it promptly. If you believe a child under 16 has provided us with personal information, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. For material changes, we will notify you by email. Your continued use of the service after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at support@kittagents.com.

Kitt Agents