Privacy Policy

This Privacy Policy explains how Kibie.ai ("Kibie," "we," "us," or "our") handles personal information when you visit our websites, use the Kibie workspace, request an assessment, connect an integration, or otherwise use our services. It does not govern a customer's own products, websites, or privacy practices.

Depending on how you use Kibie, we may collect:

• Account and contact information, such as your name, business email, organization, role, login credentials, and support communications.
• Customer content and business information, including websites, brand details, documents, approved facts, buyer questions, content drafts, and materials you choose to provide.
• Service and device information, such as IP address, browser type, timestamps, request identifiers, security events, feature usage, and diagnostic logs.
• Integration data, including the account, property, authorization status, and performance data made available by a third-party service you connect.
• Cookie and session information required to authenticate users, protect authorization flows, remember essential preferences, and prevent abuse.

Please avoid uploading sensitive personal information that is not necessary for the service.

We use information to provide and operate Kibie, authenticate users, analyze AI and search visibility, create customer-requested reports and content, synchronize authorized data sources, maintain evidence and change history, provide support, secure the service, improve reliability, and comply with legal obligations. We may also use aggregated or de-identified information that cannot reasonably identify an individual to improve our products.

If you connect Google Search Console, Kibie requests the read-only webmasters.readonly permission. We use it to identify the Search Console property that exactly matches your configured customer domain and retrieve search performance metrics such as clicks, impressions, click-through rate, and average position.

• Kibie does not use this permission to modify your website or Search Console configuration.
• Access tokens are used transiently. Long-lived authorization credentials are encrypted at rest and restricted to authorized service processes.
• Google user data is not sold, used for advertising, or transferred for unrelated purposes.
• Human access is limited to support, security, legal compliance, or actions you explicitly request or consent to.
• You may disconnect Search Console in Kibie or revoke Kibie's access from your Google Account security settings.

Kibie's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

We do not sell personal information. We may share information:

• with infrastructure, hosting, security, communication, and professional-service providers that process it for us under appropriate obligations;
• with members of your organization and people you authorize;
• with third-party services when you direct us to connect or publish to them;
• to comply with law, protect rights and safety, investigate abuse, or enforce agreements; or
• as part of a merger, financing, acquisition, or transfer of assets, subject to appropriate confidentiality protections.

We retain information for as long as needed to provide the service, preserve customer-requested evidence and audit history, meet contractual commitments, resolve disputes, and comply with law. Retention periods vary by data type and account status. When you disconnect an integration, future synchronization stops and the locally stored authorization credential is removed. Historical metrics and evidence may remain until the customer requests deletion or the applicable retention period expires. To request deletion, email support@kibie.ai.

We use administrative, technical, and organizational safeguards designed to protect information, including role-based access controls, tenant isolation, encrypted credentials, request validation, logging controls, and restricted production access. No system is completely secure, and we cannot guarantee absolute security.

Kibie and its service providers may process information in countries other than where you live. Where required, we use contractual and organizational measures intended to provide an appropriate level of protection for cross-border transfers.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to withdraw consent where processing relies on consent. You may also lodge a complaint with your local data-protection authority. We may need to verify your identity and authority before completing a request.

Kibie is a business service and is not directed to children under 16. We do not knowingly collect personal information from children. Contact us if you believe a child has provided information to the service.

We may update this Privacy Policy as our services or legal obligations change. We will post the updated version here and revise the effective date. If a change materially affects how we handle information, we will provide additional notice where required.