Privacy Policy
Your privacy is important to us. Learn how we collect, use, and protect your data.
Introduction
Welcome to Kantos ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered CRM platform.
Information We Collect
Information You Provide
- Account information (name, email address, company details)
- Billing information (processed securely through Stripe)
- Customer data you upload to the CRM (leads, contacts, messages)
- Communication preferences and settings
Automatically Collected Information
- Usage data (features used, time spent, interactions)
- Device information (browser type, IP address, operating system)
- Cookies and similar tracking technologies
- Log data (access times, pages viewed, errors)
How We Use Your Information
We use your information to:
- Provide, maintain, and improve our CRM services
- Process transactions and send transactional emails
- Send service updates, security alerts, and administrative messages
- Provide customer support and respond to inquiries
- Analyze usage patterns to improve our platform
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations and enforce our terms
Email Communications
Transactional Emails
We send transactional emails necessary for the operation of our service, including:
- Account verification and password resets
- Billing notifications and receipts
- Trial expiration reminders
- Important service updates and security alerts
- CRM-related notifications (new leads, automated workflows)
Marketing Emails
With your explicit consent, we may send marketing emails about new features, product updates, and educational content.
Data Sharing and Disclosure
We share your information only in the following circumstances:
Service Providers
Legal Requirements
We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
Google User Data and Gmail Access
Kantos lets you optionally connect a Google (Gmail) account so you can manage that mailbox from inside Kantos. Connecting a Google account is entirely your choice, and Kantos only requests the following Google account permissions when you start the connection:
Access and refresh tokens are stored encrypted, and Google data is used only to provide the connected-inbox features described above. You can disconnect a Google account at any time from Kantos settings, or revoke access directly from your Google account permissions.
Limited Use of Google user data
Kantos's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, Kantos does not use Google user data for advertising, does not sell Google user data, and does not use it to train generalized or third-party artificial-intelligence or machine-learning models. We do not allow humans to read your Gmail data except where you give explicit consent, where required for security purposes or to comply with applicable law, or where the data has been aggregated and anonymized for internal operations.
Data Security
We implement industry-standard security measures to protect your information:
- Encryption in transit (TLS/SSL) and at rest
- Row-level security (RLS) policies in our database
- Multi-tenant data isolation
- Regular security audits and monitoring
- Role-based access controls
- Secure API key management
Data Retention
We retain your information for as long as your account is active or as needed to provide services. When you close your account, we will delete or anonymize your data within 90 days, except where we are required to retain it for legal, tax, or regulatory purposes.
Your Rights and Choices
You have the right to:
Access
Request a copy of your personal information
Correct
Update inaccurate or incomplete information
Delete
Request deletion of your account and data
Export
Download your data in a portable format
Opt-out
Unsubscribe from marketing communications
Object
Object to processing of your information
To exercise these rights, please contact us at privacy@kantos.ai or through your account settings.
Cookies and Tracking
We ask before turning on analytics or advertising measurement, and nothing for either is set until you allow it. You can change your choice at any time.
Always on
- Sign-in session cookies, which keep you logged in to Kantos.
kantos_consentrecords your cookie choice and when you made it. Kept for up to 180 days (Safari keeps it for 7).kantos-last-orgremembers the organisation you last opened, so signing in takes you back to it. Kept for 30 days.- Live chat: the chat widget stores
kantos_visitor_token_…in your browser when it loads, and the details of a conversation once you start one, so the chat continues as you move between pages.
Analytics (only if you allow it)
Google Analytics shows us how our website and app are used. It sets the _ga and _ga_* cookies, kept for up to 2 years (Google's default).
Advertising measurement (only if you allow it)
OpenAI's measurement pixel tells us which of our ads in ChatGPT lead to trials, contact requests and paid subscriptions. It runs only on our public website, never inside the Kantos app. It sets:
__oppref: the ad click that brought you here. Kept for 30 days.__obref: a random reference for your browser. Kept for 365 days.__oaiq_consent(a cookie, 30 days) andoaiq_consent(browser storage): the pixel's own record of your choice.oaiq_cs:…(browser storage, cleared when you close the tab): the pixel's note of this visit.
When the pixel loads, OpenAI's content network (bzrcdn.openai.com, run on Cloudflare) may also set its own short-lived __cf_bm and _cfuvid cookies on that domain.
With this on, OpenAI receives the pages you view on our website, and a note when you start a trial or send our contact form. If you later subscribe, our servers send OpenAI the plan, amount and currency. Along with these it receives the two references above, your IP address and browser details, and hashed identifiers, which OpenAI can match to ChatGPT accounts: your email address when you subscribe, and possibly the email address, phone number and name you enter in a form on our website.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.
Children's Privacy
GDPR & CCPA Compliance
For users in the European Union and California, we comply with GDPR and CCPA requirements. You have additional rights under these regulations, including:
- Right to data portability
- Right to be forgotten
- Right to restrict processing
- Right to object to automated decision-making
- Right to know what data is collected and sold
To exercise these rights, please contact us at privacy@kantos.ai.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: