Privacy Policy

Last Updated: October 9, 2026

Kypselo.ai ("Kypselo," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, access, use, process, store, share, and protect information when you visit https://www.kypselo.ai or use our AI employee platform, automation tools, and connected third-party services.

This Policy specifically explains our handling of information obtained through Google API Services, including Gmail and Google Calendar.

1. Information We Collect

We may collect the following categories of information when you use Kypselo.

1.1 Personal and Account Information

When you register or use our services, we may collect your name, email address, company name, account credentials, profile information, subscription details, and other information you provide.

1.2 Technical and Usage Information

We may collect technical information such as IP address, browser type, device information, log data, feature usage, error reports, and security-related events to operate, maintain, and protect our platform.

1.3 Third-Party Integration Data

When you connect an external service and grant the required permissions, Kypselo may access information from that service to perform the functions you authorize.

Depending on the integration and permissions granted, this information may include email content, email metadata, drafts, calendar events, event descriptions, attendee details, contact information, and other information necessary for the requested functionality.

1.4 Payment Information

Payments and subscriptions may be processed by third-party payment providers. We may receive transaction references, subscription status, billing information, and payment confirmation details. Payment card information may be handled directly by the relevant payment provider.

2. How We Use Information

We use information as necessary to:

• Create and manage accounts and subscriptions.
• Provide and operate Kypselo's AI employees and automation features.
• Perform tasks requested or authorized by users.
• Connect with third-party services and execute authorized actions.
• Provide email assistance, draft preparation, and calendar management when enabled.
• Respond to customer support requests and communicate service updates.
• Process payments and manage subscriptions.
• Protect accounts, prevent fraud, troubleshoot problems, and maintain platform security.
• Meet applicable legal and regulatory obligations.
• Maintain and improve the functionality, reliability, and security of our services in accordance with applicable privacy policies and restrictions.

We do not use Google user data obtained through Google Workspace APIs to develop, train, or improve generalized artificial intelligence or machine learning models.

Google user data is used only for permitted purposes connected to the features and functionality described in this Policy and authorized by the user.

3. Google API Services: Gmail and Google Calendar

Kypselo may integrate with Google API Services, including Gmail and Google Calendar, to provide user-authorized productivity and automation features.

Users must grant the relevant permissions through Google's authorization process before Kypselo accesses protected Google account information.

The specific information accessed depends on the Google API permissions granted and the feature the user chooses to use.

3.1 Gmail Data

Depending on the permissions granted, Kypselo may access relevant Gmail information to provide requested email-related functionality, such as:

• Accessing authorized email information needed for a requested task.
• Assisting with email organization and processing.
• Preparing email drafts at the user's request.
• Supporting other authorized email productivity features available within Kypselo.

Kypselo accesses and processes only the Gmail information necessary for the functionality enabled by the user and the permissions granted.

3.2 Google Calendar Data

Depending on the permissions granted, Kypselo may access relevant Google Calendar information to provide requested calendar functionality, such as:

• Retrieving authorized calendar events and event details.
• Helping users review their schedules.
• Assisting with event creation, updates, or other calendar actions where the granted permissions allow them.
• Supporting scheduling and productivity workflows requested by the user.

Kypselo does not perform actions beyond the permissions granted and the functionality authorized by the user.

3.3 Purpose Limitation

Google user data is used to provide the authorized features for which it was accessed. It is not sold, used for advertising, or used to develop, train, or improve generalized AI or machine learning models.

Google user data is not used for unrelated purposes, including advertising profiling, data brokerage, or the creation of generalized AI training datasets.

3.4 Google API Services Limited Use Compliance

Kypselo's use and transfer of information received through Google API Services will comply with the Google API Services User Data Policy, including its Limited Use requirements, and the Google Workspace User Data and Developer Policy, where applicable.

Our use of Google user data is limited to providing or improving permitted user-facing functionality. Transfers of such data are restricted to the circumstances permitted by Google's policies, including necessary processing to provide authorized features with appropriate user consent, security purposes, legal compliance, and other expressly permitted circumstances.

We do not sell Google user data or use it for advertising. We do not transfer Google user data to third parties for prohibited purposes or allow it to be used to train or improve generalized AI or machine learning models.

We apply these restrictions to Google user data and data derived from it, including aggregated or anonymized data, as required by Google's policies.

Official policy references:

• Google API Services User Data Policy: https://developers.google.com/terms/api-services-user-data-policy
• Google Workspace User Data and Developer Policy: https://developers.google.com/workspace/workspace-api-user-data-developer-policy

4. AI Processing and Third-Party AI Services

Kypselo provides AI-powered employees and automation features that may use third-party AI model providers, infrastructure services, and other technical service providers.

Depending on the feature used, information supplied by the user or obtained through an authorized integration may be processed to generate a response, prepare a draft, summarize information, or perform a requested task.

When Google user data must be processed by an external service to provide an authorized feature, the transfer and processing must comply with Google's Limited Use requirements and other applicable restrictions.

We do not authorize third-party AI providers to use Google user data to train or improve generalized AI or machine learning models. We also do not authorize them to sell Google user data or use it for advertising.

Third-party services must be used under applicable terms, configurations, and data-processing arrangements consistent with these requirements. Access to Google user data must be limited to what is necessary for the authorized functionality.

The AI providers, models, and technical services used by Kypselo may change as the platform evolves. Any processing of Google user data remains subject to the restrictions described in this Policy.

5. How We Share Information

We do not sell personal information or Google user data.

We may share information in the following circumstances:

5.1 Service Providers

We may use service providers for hosting, infrastructure, AI processing, payment processing, security, communications, and customer support. Information may be shared only as necessary for the relevant service and subject to applicable privacy and data-use restrictions.

5.2 User-Authorized Actions

Information may be transmitted to a connected service when necessary to complete an action explicitly requested or authorized by the user.

5.3 Legal Requirements and Security

We may disclose information when required by applicable law, valid legal process, or when necessary to investigate security incidents, prevent abuse, protect users, or enforce our legal rights.

5.4 Business Transfers

Information may be involved in a merger, acquisition, or transfer of business assets only subject to applicable law and the restrictions governing the relevant data. Google user data will not be transferred as part of a business transaction except as expressly permitted by Google's policies, including any required prior user consent.

We do not permit recipients to use Google user data for purposes prohibited by Google's policies.

6. Data Retention and Deletion

We retain information only for as long as necessary for the purposes described in this Policy, including providing requested services, maintaining security, fulfilling legal obligations, resolving disputes, and enforcing agreements.

Google user data is not retained longer than permitted by applicable Google policies and API documentation. Cached data is handled according to the applicable Google requirements.

Users may request deletion of their information by contacting info@kypselo.ai. We will process requests in accordance with applicable law and relevant data-retention requirements.

Revoking access to a Google account generally prevents future access through the revoked authorization, but does not necessarily delete information previously stored in Kypselo. Users may need to request deletion separately.

Where information must be retained for legitimate legal, security, or operational reasons, we will handle it in accordance with applicable requirements.

7. Data Security

We implement appropriate technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, loss, and misuse.

Depending on the data and system involved, safeguards may include access controls, secure transmission, encryption, credential protection, security monitoring, and restricted access to sensitive information.

Google user data and authorization credentials must be protected in accordance with applicable Google security requirements. Access should be limited to authorized systems and personnel who require it for permitted operational, security, or support purposes.

No electronic transmission or storage system can be guaranteed to be completely secure.

8. Cookies and Tracking Technologies

Kypselo may use essential cookies and similar technologies to maintain sessions, support account security, and operate platform features. We may also use analytics technologies to understand website performance and improve the user experience.

Google user data obtained through Gmail or Google Calendar APIs is not used for advertising or advertising profiling.

Users can manage cookies through their browser settings. Disabling certain cookies may affect some platform features.

9. Your Rights and Choices

Depending on applicable law, you may have the right to:

• Request access to your personal information.
• Request correction of inaccurate information.
• Request deletion of eligible information.
• Request a copy of certain personal information.
• Withdraw authorization for connected third-party services.
• Ask questions about how your information is processed.

You may revoke Kypselo's Google account access through your Google Account security settings.

For privacy requests, contact info@kypselo.ai. We may need to verify your identity before responding.

10. Third-Party Services

Kypselo may connect to external platforms, including Google Workspace and other business applications. Those platforms have their own privacy policies and terms.

Our handling of information obtained through Google APIs remains subject to Google's applicable API policies, including the Limited Use requirements. Users should review the applicable third-party terms for information about the services they choose to connect.

11. Children's Privacy

Kypselo is not intended for children who are prohibited from using the service under applicable law. We do not knowingly collect personal information from children in violation of applicable legal requirements. If you believe a child has provided personal information inappropriately, contact us so we can review the matter.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, integrations, data-handling practices, or legal obligations.

When we make changes, we will update the revision date and provide additional notice where required or appropriate. If a material change affects how Google user data is accessed or used, we will provide the required disclosure and obtain renewed consent where applicable before implementing the new use.

13. Contact Us

For questions about this Privacy Policy, Google API data use, or privacy requests, contact:

Kypselo.ai

Privacy Email: info@kypselo.ai

Support Email: info@kypselo.ai

Website: https://www.kypselo.ai

Google Workspace Data Use Statement

Kypselo's use of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements, and the Google Workspace User Data and Developer Policy, where applicable.