Privacy Policy

Effective Date: March 14, 2026  |  Last Updated: March 14, 2026

Kazozo, Inc. ("Kazozo," "we," "our," or "us") operates the Kazozo AI agent platform at kazozo.com. This Privacy Policy describes how we collect, use, store, and share information when you use our platform, website, APIs, and related services (collectively, the "Services").

1. Information We Collect

1.1 Account Information

When you create a Kazozo account, we collect your name, email address, company name, industry vertical, and billing information (processed by our payment provider, Stripe).

1.2 Conversation Data

Our AI agents process conversations between your business and your customers. This includes messages, metadata (timestamps, channel, agent ID), and any information your customers provide during interactions (names, contact details, inquiries).

1.3 Usage Data

We collect information about how you use the Services, including API calls, resolution counts, agent utilization, feature usage, and performance metrics.

1.4 Technical Data

We automatically collect device type, browser type, IP address, operating system, and referring URLs when you access our dashboard or website.

1.5 Integration Data

If you connect third-party services (CRM, payment processors, communication tools), we access data from those services as authorized by you during the integration setup.

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Services
• Process AI agent conversations on your behalf
• Calculate billing, track usage, and process payments
• Send service-related communications (billing, usage alerts, maintenance notices)
• Provide customer support
• Monitor and prevent fraud, abuse, and security threats
• Analyze usage patterns to improve our AI models and platform
• Comply with legal obligations

3. Data Sharing

We do not sell your personal information. We share data only in these circumstances:

• Service providers: Payment processing (Stripe), cloud infrastructure (Railway), AI processing (Anthropic Claude), and communication services (Twilio) — each bound by data processing agreements
• At your direction: When you configure integrations (CRM, email, Slack), data flows to those services as you authorize
• Legal compliance: When required by law, subpoena, court order, or to protect rights and safety
• Business transfers: In connection with a merger, acquisition, or sale of assets (with advance notice)

4. Tenant Data Isolation

Kazozo operates a multi-tenant architecture with strict data isolation. Your conversation data, customer information, knowledge base documents, and configuration are scoped exclusively to your tenant. No other customer can access your data. We enforce tenant isolation at the API, database, and application layers.

5. Data Retention

• Conversation data: Retained for the duration of your subscription plus 90 days after account closure
• Account information: Retained for the duration of your subscription plus 1 year (for legal and billing purposes)
• Usage/billing records: Retained for 7 years per financial record-keeping requirements
• Technical logs: Retained for 90 days, then automatically purged

You can request data export or deletion at any time (see Section 7).

6. Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.2+) and at rest
• API key authentication with scoped permissions
• Role-based access control (RBAC) for dashboard users
• Rate limiting and webhook signature validation
• Regular security reviews and dependency updates

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your data ("right to be forgotten")
• Export: Receive your data in a portable format (CSV/JSON)
• Opt-out: Withdraw consent for optional data processing
• Restrict: Limit how we process your data

To exercise these rights, email privacy@kazozo.com. We respond within 30 days.

8. California Residents (CCPA)

If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information we collect and share, the right to delete, and the right to opt-out of the sale of personal information. We do not sell personal information. To make a CCPA request, email privacy@kazozo.com.

9. International Data Transfers

Our services are hosted in the United States. If you access the Services from outside the US, your data will be transferred to and processed in the US. We rely on standard contractual clauses and other approved transfer mechanisms where required.

10. AI Processing Disclosure

Kazozo uses third-party AI models (Anthropic Claude) to power agent conversations. Conversation data is sent to Anthropic's API for processing. Anthropic does not use API customer data to train their models. We do not use your conversation data to train AI models without your explicit consent.

11. Cookies

Our website uses essential cookies for authentication and session management. We do not use advertising or tracking cookies. Our chat widget uses sessionStorage (browser-only, not transmitted) for conversation state.

12. Children's Privacy

The Services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at privacy@kazozo.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website at least 30 days before the changes take effect.

14. Contact Us

For privacy questions or data requests:

• Email: privacy@kazozo.com
• Mail: Kazozo, Inc., Miami, FL