Kassie
← Back to Kassie

Privacy Policy

Last Updated: October 3, 2026

This Privacy Policy explains how Kassie AI, Inc. (“Kassie,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit our website, interact with our AI inbound representative, communicate with us, use our services, or interact with a Kassie-powered AI inbound representative on one of our customers’ websites.

Kassie provides an AI inbound representative platform for B2B companies. Our services may help companies engage website visitors, answer approved product questions, qualify potential buyers, book meetings, and provide conversation summaries and sales handoffs.

Our website and services are designed for businesses and business representatives. They are not intended for personal, family, household, children’s, or consumer use.

If you interact with Kassie, we generally treat the information you provide as business-related information associated with your professional role.

Kassie may process personal information in different roles depending on the context.

Kassie as a Controller: When you visit our website, interact with Kassie on our own website, request a demo, communicate with us, purchase our services, receive marketing communications from us, or otherwise engage directly with Kassie, we may process your personal information as a controller, business, or similar role under applicable privacy laws.

Kassie as a Processor or Service Provider: When Kassie is deployed on a customer’s website, landing page, application, or digital property, we generally process personal information on behalf of that customer as a processor, service provider, or similar role under applicable privacy laws.

If you interact with a Kassie-powered AI inbound representative on one of our customer’s websites, that customer’s privacy policy and notices govern how your personal information is collected and used by that customer. You should review that customer’s privacy policy for more information about its privacy practices, legal bases for processing, data retention, marketing practices, and your privacy choices.

We may collect the following categories of personal information.

Information You Provide Directly

This may include:

  • Name.
  • Work email address.
  • Phone number.
  • Company name.
  • Job title.
  • Company website.
  • Business address.
  • CRM or marketing technology information.
  • Calendar availability.
  • Messages, questions, feedback, and support requests.
  • Demo requests and sales communications.
  • Billing, invoicing, and payment-related information.
  • Information provided during onboarding, support, or customer success interactions.

AI Conversation Information

When you interact with Kassie or a Kassie-powered AI inbound representative, we may collect:

  • Audio recordings.
  • Voice inputs.
  • Transcripts.
  • Conversation summaries.
  • Questions asked.
  • Responses provided.
  • Qualification details.
  • Company and role information.
  • Business contact information.
  • Meeting booking details.
  • Calendar-related information.
  • CRM-related information.
  • Conversation metadata, such as date, time, duration, page, session, and outcome.
  • Signals related to whether a conversation resulted in a meeting, handoff, or follow-up.

Customer Data

When we provide services to a customer, we may process Customer Data on behalf of that customer, including:

  • Customer-approved product knowledge.
  • Website content.
  • FAQs.
  • Pricing or packaging information.
  • Qualification rules.
  • Disqualification rules.
  • Routing rules.
  • CRM records.
  • Calendar information.
  • Slack or email alert information.
  • Website visitor conversations.
  • Meeting details.
  • Sales handoff summaries.

Automatically Collected Information

When you visit our website or use our services, we may automatically collect:

  • IP address.
  • Browser type.
  • Device type.
  • Operating system.
  • Referring URL.
  • Pages viewed.
  • Clicks and interactions.
  • Session activity.
  • Approximate location derived from IP address.
  • Date and time of access.
  • Log data.
  • Error data.
  • Performance data.
  • Cookie and similar technology data.

Information from Third Parties

We may receive information from:

  • CRM systems.
  • Calendar tools.
  • Email tools.
  • Communication tools.
  • Analytics providers.
  • Cloud providers.
  • AI model providers.
  • Voice infrastructure providers.
  • Business data providers.
  • Public websites.
  • Public business profiles.
  • Marketing partners.
  • Event partners.
  • Customers who provide information to configure or use the services.

The services are not designed to collect sensitive personal information.

You should not submit, and customers should not configure the services to collect:

  • Health information.
  • Payment card numbers.
  • Financial account information.
  • Government identifiers.
  • Social Security numbers.
  • Driver’s license or passport numbers.
  • Biometric identifiers.
  • Children’s data.
  • Precise geolocation.
  • Information revealing race, ethnicity, religion, political opinions, union membership, sexual orientation, or similar sensitive categories.
  • Any other highly sensitive or regulated information.

If sensitive personal information is submitted to the services, we may delete, restrict, or process it only as necessary to provide the services, protect security, comply with law, or follow customer instructions where applicable.

We may use personal information to:

  • Provide, operate, maintain, secure, and improve our website and services.
  • Power AI inbound representative conversations.
  • Answer approved product questions.
  • Qualify website visitors based on customer-approved rules.
  • Book meetings.
  • Generate transcripts, summaries, classifications, and sales handoffs.
  • Sync information with CRM, calendar, Slack, email, or other integrations.
  • Configure and personalize the services.
  • Respond to inquiries and provide support.
  • Process orders, invoices, payments, and renewals.
  • Monitor usage, performance, latency, errors, quality, and reliability.
  • Detect, prevent, and address abuse, spam, security incidents, fraud, and misuse.
  • Evaluate and improve conversation quality.
  • Develop new features and functionality.
  • Communicate with customers, prospects, and users.
  • Send administrative, transactional, service, and security messages.
  • Send marketing communications, where permitted by law.
  • Analyze business performance and product usage.
  • Create aggregated, anonymized, or de-identified data.
  • Comply with legal obligations.
  • Enforce our agreements and protect the rights, safety, and security of Kassie, customers, users, End Users, and third parties.

Our services use artificial intelligence, large language models, speech-to-text, text-to-speech, voice models, retrieval systems, classification systems, and related technologies.

AI-generated responses may be inaccurate, incomplete, unexpected, delayed, or inappropriate. Customers are responsible for configuring, approving, monitoring, and supervising how Kassie is deployed on their websites and how AI Outputs are used.

We may process AI conversation data to provide the services, generate responses, create summaries, classify conversations, book meetings, improve reliability, evaluate quality, detect errors, troubleshoot issues, and support customers.

We do not sell customer conversation data. We do not use Customer Data to train third-party foundation models unless the customer expressly authorizes such use in writing.

We may disclose personal information as described below.

Service Providers and Subprocessors

We may disclose personal information to service providers and subprocessors that help us operate our business and provide the services, including providers of:

  • Cloud hosting.
  • Databases.
  • AI models.
  • Voice infrastructure.
  • Speech-to-text.
  • Text-to-speech.
  • Analytics.
  • Error monitoring.
  • Observability.
  • Security.
  • CRM.
  • Email.
  • Calendar.
  • Payment processing.
  • Customer support.
  • Legal, accounting, and professional services.

These providers may process personal information only as needed to provide services to us or to our customers and are subject to contractual obligations.

Customer Integrations: If a customer connects Kassie to CRM, calendar, Slack, email, or other tools, we may disclose information to those tools according to the customer’s configuration and instructions.

Business Customers: If you interact with a Kassie-powered AI inbound representative on one of our customer’s websites, we may disclose your conversation, contact details, transcript, summary, qualification details, meeting details, and related information to that customer.

Professional Advisors: We may disclose personal information to lawyers, accountants, auditors, bankers, insurers, consultants, and other professional advisors.

Legal, Safety, and Compliance: We may disclose personal information if we believe disclosure is necessary or appropriate to:

  • Comply with law, regulation, court order, subpoena, legal process, or government request.
  • Enforce our agreements.
  • Protect the rights, property, or safety of Kassie, customers, users, End Users, or others.
  • Detect, prevent, or address fraud, abuse, security incidents, or technical issues.
  • Respond to claims that content or activity violates third-party rights.

Business Transfers: We may disclose or transfer personal information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, including during diligence for such transactions.

With Consent or Direction: We may disclose personal information with your consent or at your direction.

We may use cookies, pixels, local storage, session replay, analytics tools, and similar technologies to operate our website, remember preferences, analyze usage, improve performance, measure engagement, and support marketing.

You can control cookies through your browser settings. Some features may not work properly if cookies are disabled.

If we use technologies that are considered targeted advertising, selling, or sharing under applicable privacy laws, we will provide required notices and choices.

Where required by applicable law, our legal bases for processing personal information may include:

  • Performance of a contract.
  • Legitimate interests, such as providing, securing, improving, and marketing our services.
  • Consent, where required.
  • Compliance with legal obligations.
  • Protection of rights, safety, and security.

Where Kassie acts as a processor or service provider, our customer determines the legal basis for processing personal information.

We retain personal information for as long as reasonably necessary to provide the services, comply with legal obligations, resolve disputes, enforce agreements, maintain security, improve the services, and support legitimate business purposes.

Customer conversation data, transcripts, summaries, recordings, and related records may be retained according to the applicable customer agreement, customer configuration, or our standard retention practices.

We may retain aggregated, anonymized, or de-identified data for lawful business purposes.

Personal information may persist in backups for a limited period, but it will remain protected until deleted.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission, processing, or storage is completely secure. We cannot guarantee absolute security.

Kassie is based in the United States. Personal information may be processed in the United States and other countries where we, our customers, our service providers, or our subprocessors operate.

If personal information is transferred from the European Economic Area, United Kingdom, Switzerland, or another jurisdiction with cross-border transfer requirements, we will use appropriate safeguards where required by applicable law, which may include standard contractual clauses or other legally recognized transfer mechanisms.

Depending on where you live and the context in which we process your personal information, you may have rights to:

  • Request access to personal information.
  • Request correction of inaccurate personal information.
  • Request deletion of personal information.
  • Object to or restrict processing.
  • Request portability.
  • Withdraw consent where processing is based on consent.
  • Opt out of certain marketing communications.
  • Opt out of certain targeted advertising, selling, or sharing where applicable.
  • Appeal certain privacy decisions where applicable.

To exercise rights regarding personal information Kassie controls, contact us at raphael@kassie.ai.

If you interacted with Kassie on one of our customer’s websites, please contact that customer directly first. We process that information on behalf of the customer and will assist the customer as required by law and contract.

We may need to verify your identity before fulfilling certain requests. We may decline requests where permitted by law.

This section applies to residents of California and other U.S. states with applicable privacy laws, to the extent those laws apply to Kassie.

Depending on your state, you may have rights to know, access, correct, delete, obtain a copy of, or opt out of certain processing of your personal information.

We do not sell personal information for money.

We do not knowingly sell or share personal information of individuals under 16.

If our use of advertising, analytics, or similar technologies is considered a “sale,” “sharing,” or targeted advertising under applicable law, you may have the right to opt out.

We do not use sensitive personal information for purposes that would require a right to limit under California law.

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals.

We will not discriminate against you for exercising privacy rights.

To submit a request, contact us at raphael@kassie.ai.

If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have rights under applicable data protection laws, including rights to access, correct, delete, restrict, object to processing, request portability, and lodge a complaint with a data protection authority.

Where Kassie acts as a processor, our customer is the controller responsible for responding to your request. Please contact the customer whose website or service you interacted with.

Where Kassie acts as a controller, you may contact us at raphael@kassie.ai.

You may opt out of marketing emails by using the unsubscribe link in the email or contacting us at raphael@kassie.ai.

Even if you opt out of marketing communications, we may still send transactional, administrative, security, legal, or service-related messages.

This section explains how Kassie handles information received through Google Sign-In and the Kassie Calendar integration.

Google Sign-In. When you sign in with Google, Kassie receives your name, email address and basic profile information to authenticate you and identify you in Kassie.

Google Calendar access. With your authorization, Kassie receives your Google Account email address and account identifier and accesses your primary calendar to:

  • Check free/busy times and show available meeting times within the working hours your organization approves. These checks return busy times, not other events' titles, descriptions, locations or attendees.
  • Create meetings booked through Kassie, with the visitor as a guest, and read back only those events to confirm the booking.
  • Delete a Kassie-created event when an authorized workspace administrator cancels that booking through Kassie. Google sends the invitation or cancellation notice to the guest.

Kassie does not read, change or delete your other events. Authorized background access lets these scheduling features work when you are not signed in to Kassie.

Storage and protection. Kassie stores the connected account’s email address and identifier and granted permissions. Access and refresh credentials are encrypted before storage. Booking records include meeting times, calendar event identifiers and links, and the guest name and email supplied in the booking form. Prepared meeting notifications can also contain the connected account's email address (or account identifier if an email address is unavailable) and meeting time. Free/busy information is processed to calculate availability, not stored; Kassie does not store the contents of your other calendar events.

Visibility and sharing. Visitors who ask to meet can see the available times Kassie offers. Meeting information, including the host's connected email address or account identifier and meeting time, is available to your organization's team through Kassie Workspace and, when configured, Slack notifications and CRM features. Copies sent to Slack or a CRM are held by those services under your organization's control. When configured, internal email recaps also include the booking status.

AI processing. The Calendar integration does not supply free/busy data, offered or booked times, booking-form details, event content, event identifiers or links, or Google credentials to the AI model. It supplies only a confirmation that a meeting was booked and fixed guidance about the calendar invitation. Separately, information visitors voluntarily type into a conversation, including names, email addresses or meeting details, is part of the conversation processed by the AI model. We do not use Google API data to create, train or improve AI or machine learning models.

Disconnecting and revoking access. An Owner or Admin can disconnect the workspace's Google Calendar connection in Settings > Integrations. Kassie then stops using that connection to check availability, create meetings or cancel meetings. This does not automatically revoke Google's authorization or delete stored credentials or history. To revoke Google authorization, remove access for Kassie Calendar in Google Account connections.

Google accounts connected as additional meeting representatives cannot currently be disconnected individually inside Kassie. Their account holders can revoke access through Google Account connections. Google Sign-In access can also be removed through Google Account connections.

Events already created remain in Google Calendar after disconnecting. Kassie cannot cancel them while the connection is disconnected; the same Google account must reconnect for cancellation through Kassie. You can delete the events directly in Google Calendar.

Information retained after disconnecting. Kassie retains the connection record, encrypted credentials and booking history. It does not use stored credentials while the connection is disconnected. Disconnecting or revoking Google authorization does not itself delete these records. The Data Retention section of this policy applies; you can use the contact details in this policy for questions or requests about retained information.

Limited Use and other restrictions. Kassie's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. These restrictions take precedence over any broader permission in this Privacy Policy.

We use Google API data only to provide or improve the user-facing features described here. We transfer it only with your consent for those features, for security purposes, to comply with law, or for a merger, acquisition or asset sale with your explicit prior consent. We do not sell it or use or transfer it for advertising, data brokers, information resellers, creditworthiness or lending.

We permit personnel to read Google API data only with your affirmative permission to access specific information, when necessary for security or legal compliance, or when the data is aggregated and anonymized for internal operations in accordance with applicable law. These restrictions also apply to our agents, contractors and successors.

Our website and services are intended for business use and are not directed to children.

We do not knowingly collect personal information from children under 13 or under the applicable age of consent in relevant jurisdictions.

If we learn that we have collected personal information from a child without appropriate consent, we will take reasonable steps to delete it.

Our website and services may contain links to third-party websites, applications, or services that we do not control.

We are not responsible for the privacy practices, content, security, or policies of third parties. You should review the privacy policies of those third parties before providing information to them.

We may update this Privacy Policy from time to time. Updated versions will be posted on our website with a new effective date.

If we make material changes, we will provide notice as required by law.

Your continued use of our website or services after an updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy.

For privacy questions, requests, or concerns, contact us at:

Kassie AI, Inc.5900 Balcones Drive Suite 100 Austin TX 78731Email: help@kassie.ai

Kassie

Connecting to Kassie…