Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Name (first and last)
• Email address
• Phone number (optional, for SMS notifications)
• LinkedIn profile URL
• Profile photo / avatar
• Company name and job title
• Location (city, country)
• Bio and professional summary
• Authentication provider (Google, LinkedIn, or email/password)

1.2 Contact and Relationship Data

The core of kinetic.ai is managing your professional relationships. You may provide or sync the following data about your contacts:

• Contact names, job titles, companies, and locations
• LinkedIn profile URLs and profile photos (URL only)
• Relationship context and notes you write about contacts
• Categorization data (circles, VIP status, do-not-contact flags)
• Tags, birthdays, interests, and other metadata you choose to add

1.3 Usage and Activity Data

We automatically collect information about how you use the Service:

• Feature interactions (e.g., which suggestions you act on, searches you perform)
• Communication preferences and notification settings
• Onboarding responses and goals
• Session activity and engagement patterns

1.4 Device and Technical Data

We may collect technical information including:

• Browser type and version
• IP address
• Device type and operating system
• Timezone settings

1.5 Chrome Extension Data

If you use the kinetic.ai LinkedIn Network Sync Chrome extension, we collect the following information about your LinkedIn connections:

• Names (first and last name)
• LinkedIn profile URLs
• Current job title and company
• Profile headlines
• Profile photos (URL only)
• Location (city, country)
• Connection date and connection degree
• Recent public activity by your connections observed in your LinkedIn feed (for example, posts and comments)
• A short excerpt of the profile's "About" section, when you visit that profile
• Recent work history and education shown on profiles you visit
• Email address, when a connection has made it visible to you

The extension collects this data in two ways: (a) when you explicitly start a sync of your connections list, and (b) when you visit a LinkedIn profile or browse your LinkedIn feed while the extension is installed, in which case it may record profile details and recent public activity (for example, that a connection posted or commented) for people you are already connected to.

Important: kinetic.ai only creates contact records for people you are already connected with on LinkedIn (1st-degree connections). Activity observed in your feed about people you are not connected to is discarded. If you visit the profile of someone you are not connected to while the extension is active, basic professional details from that page may be transmitted to our servers, but that person is not added to your contacts.

The extension requests the following browser permissions:

• Host permission for linkedin.com — Required to read connection data from LinkedIn pages you visit
• Storage — Used to store your authentication state and sync progress locally
• Identity — Used for secure authentication with Google or LinkedIn sign-in

1.6 Google Calendar Data

If you connect your Google Calendar, we read past and upcoming events to power relationship features. We collect event titles, attendee email addresses, event start and end times, attendee response status, and event location. We do not read event descriptions, attachments, or conferencing links. See Section 5 for full details on how we use Google user data.

1.7 Granola Meeting Data

If you connect your Granola account, we sync your recorded meetings to create meeting notes and follow-up reminders inside kinetic.ai. For each meeting we collect the meeting title, date and time, attendee names and email addresses, and the meeting summary generated by Granola. Summaries for meetings we cannot automatically match to a contact are held only until you review them, then removed from our meeting ledger. Your Granola access tokens are encrypted before storage, and you can disconnect Granola at any time from settings, which immediately stops syncing and deletes both the stored tokens and our meeting ledger. Meeting summaries are processed by our AI providers, under the protections described in Section 3, to generate notes and follow-up reminders. Notes already created from meetings remain in your account until you delete them.

2. How We Use Your Information

We use the information we collect to:

• Provide the Service — Display your network, manage contacts, generate suggestions, and create personalized outreach messages
• Power AI features — Generate relationship insights, outreach suggestions, and message drafts using AI models (see Section 3)
• Enrich contact data — Supplement your contact information with publicly available professional data to improve suggestions
• Communicate with you — Send email and SMS notifications, reminders, and service updates based on your preferences
• Improve the Service — Analyze usage patterns, debug errors, and optimize performance
• Ensure security — Detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations — Respond to legal requests and enforce our Terms

2.1 What We Do Not Use Your Information For

• We do not sell, rent, or license your personal information, or your contacts' information, to any third party
• We do not use your data, your contacts' data, or your notes to train AI or machine-learning models
• We do not use your data for advertising and do not share it with data brokers or advertisers
• Your data is used solely to provide features within your own account and is not visible to other users, except as described in Section 7.1

3. AI and Third-Party Data Processing

kinetic.ai uses artificial intelligence to provide core features such as outreach suggestions, message generation, relationship insights, and research. When you use these features, certain data may be transmitted to the following third-party AI providers:

3.1 AI Providers

• Anthropic (Claude) — Used for relationship planning, onboarding chat, and insight generation. Data sent may include contact names, relationship context, and notes.
  Anthropic Privacy Policy
• OpenAI (GPT) — Used for message generation, research synthesis, and content suggestions. Data sent may include contact names, professional details, and relationship notes.
  OpenAI Privacy Policy

3.2 Data Enrichment and Research Providers

• Exa — Used to enrich contact profiles with publicly available professional information such as work history and education, and to research companies. Data sent includes contact names and LinkedIn URLs.
  Exa Privacy Policy
• Serper — Used to run web searches that power research features, such as finding recent news about a contact's company. Data sent includes contact and company names within search queries.
  Serper Privacy Policy

3.3 No Model Training

We access Anthropic and OpenAI through their commercial APIs, under terms that do not permit them to use data we send to train their models. Your data is processed to generate a response for you and is not retained by these providers for training. We do not use your data to train models of our own.

3.4 Data Minimization

We take reasonable steps to minimize the personal data sent to third-party providers. We only transmit the fields necessary to perform the requested function and do not intentionally send sensitive personal information such as financial data, government identification numbers, or health records.

4. Third-Party Service Providers

In addition to AI providers, we use the following third-party services to operate the Service:

• Firebase (Google) — Authentication and user identity management
• Amazon Web Services (AWS) — Cloud storage for user avatars and profile images
• Twilio — SMS notification delivery
• Resend — Transactional and notification email delivery
• FullStory — Session analytics to understand usage patterns and improve the user experience. We send a hashed (SHA-256) identifier — not your raw email — to FullStory
• Stripe — Payment processing and subscription billing. We do not store your card details; payment information is handled by Stripe under its own privacy policy
• Sentry — Error monitoring and performance tracking to maintain service reliability
• Railway — Cloud infrastructure hosting for our API
• Vercel — Cloud hosting for our web application

5. Use of Google User Data

kinetic.ai's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5.1 What we access

When you connect your Google Calendar, we request the https://www.googleapis.com/auth/calendar.readonly scope. This is read-only access — kinetic.ai cannot create, modify, or delete events on your calendar.

5.2 What we read

For each calendar event, we read:

• Event title
• Event start and end time
• Attendee email addresses
• Attendee response status (accepted, declined, tentative)
• Event location, when present

We do not read event descriptions, attachments, or video conferencing links.

5.3 How we use it

Calendar data is used solely to power features inside your kinetic.ai account:

• Displaying your meeting history with each connection, including the meeting title and the date you last met
• Detecting relationships that are fading because no recent meetings have occurred
• Generating post-meeting recap reminders
• Identifying overlap when you and a connection travel to the same city

5.4 How we store it

Event titles, attendee email addresses, and meeting timestamps are stored in our database, encrypted at rest. OAuth refresh tokens are encrypted before storage. We retain meeting history for as long as your account is active. You can disconnect Google Calendar at any time from your kinetic.ai settings, which immediately deletes the stored tokens and requests revocation of our access from Google.

5.5 What we don't do

• We do not sell Google user data
• We do not use Google user data for advertising
• We do not transfer Google user data to third parties except as necessary to provide the kinetic.ai service (for example, to our cloud database provider, under contractual data-processing terms)
• We do not use Google user data to train AI or machine learning models

5.6 Revoking access

You can revoke kinetic.ai's access to your Google Calendar at any time at https://myaccount.google.com/permissions or from your kinetic.ai settings page.

6. Cookies and Tracking Technologies

We use the following technologies:

• Authentication tokens — Stored locally to maintain your signed-in session. These are essential for the Service to function.
• Local storage — Used to store user preferences, sync state, and session data within your browser.
• Session analytics (FullStory) — Records anonymized session activity such as clicks, scrolls, and page navigation to help us understand how users interact with the Service and identify areas for improvement.

We do not use advertising cookies or third-party tracking cookies for ad targeting purposes.

7. Data Sharing and Disclosure

We do not sell your personal information. We share your data only in the following limited circumstances:

• Service providers — With the third-party providers listed in Sections 3 and 4, solely to operate and improve the Service
• Legal compliance — When required by law, regulation, legal process, or governmental request
• Safety and rights — To protect the rights, property, or safety of Vetrivel Inc., our users, or the public
• Business transfers — In connection with a merger, acquisition, or sale of assets, in which case your data would remain subject to this Privacy Policy

7.1 Shared Contact Profiles

To keep contact information accurate, basic profile information about a contact — their name, LinkedIn URL, headline, current company and title, work history, location, profile photo, and, when available, an email address and birthday — is stored in a single deduplicated profile record. If two kinetic.ai users are each independently connected to the same person, both accounts reference that single record, so updated information detected through one user's sync (for example, a job change) is reflected for both.

All other data is private to you and is never visible to any other user: your notes, relationship context, tags, circles, reminders, meeting history, messages, and the fact that a given person is in your network. No other user can see who your contacts are or what you have written about them.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• All data transmission is encrypted using HTTPS/TLS
• Data access is scoped to authenticated users — you can only access your own data
• Application logging is designed to exclude sensitive data such as phone numbers and email addresses
• Internal error details are not returned to clients
• All secrets and credentials are managed via environment variables, never hardcoded

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Your account and profile data is retained until you delete your account
• Contact and relationship data is retained until you explicitly delete it or close your account
• If you uninstall the Chrome extension, your previously synced data remains in kinetic.ai unless you explicitly delete it
• If you disconnect an integration (Google Calendar, Granola), we delete its stored access tokens immediately
• We may retain certain data after account deletion as required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance)
• Usage logs and analytics data may be retained in anonymized or aggregated form

When you delete your account, the license you granted us to use your data is revoked, and we delete your profile, settings, contacts, notes, reminders, integration tokens, and other data tied to your account from our active systems within 30 days. Residual copies in encrypted backups are purged on a rolling basis within 90 days. Two narrow exceptions apply. First, we may retain limited data where required by law or for legitimate business purposes such as fraud prevention, as described above. Second, where a contact's basic profile information lives in a shared record (see Section 7.1), that shared record — including any basic profile fields you contributed, such as an email address or birthday — persists after account deletion. It contains no notes or relationship context you wrote, and it is no longer associated with you.

10. Your Rights and Choices

10.1 All Users

Regardless of your location, you have the right to:

• Access — View the data in your kinetic.ai account, and request a complete copy of everything we store by contacting us
• Delete — Remove any or all contacts, notes, and relationship data from your account
• Export — Request a copy of your data in a portable format
• Opt-out of communications — Unsubscribe from marketing emails at any time via the unsubscribe link in each email, or reply STOP to SMS messages
• Close your account — Request deletion of your account and associated data by contacting us; deletion is described in Section 9
• Disconnect integrations — Disconnect Google Calendar or Granola at any time from settings, which deletes the stored tokens and stops all further syncing
• Uninstall the extension — Remove the Chrome extension at any time to stop LinkedIn data syncing

No permission you grant us is irrevocable. Each integration, each notification channel, and your account itself may be revoked or deleted at any time, and revoking one permission does not require closing your account.

10.2 European Economic Area (EEA) and UK Residents (GDPR)

If you are located in the EEA or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including the right to:

• Request rectification of inaccurate personal data
• Request restriction of processing in certain circumstances
• Object to processing based on legitimate interests
• Data portability — receive your data in a structured, machine-readable format
• Lodge a complaint with your local data protection authority

Our legal basis for processing your personal data includes: your consent (which you may withdraw at any time), performance of our contract with you (the Terms of Service), our legitimate interests in operating and improving the Service, and compliance with legal obligations.

10.3 California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights, including:

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt out of the sale of personal information — we do not sell your personal information
• The right to non-discrimination for exercising your CCPA rights

To exercise any of these rights, contact us at hello@getkinetic.ai. We will respond to verifiable requests within the timeframes required by applicable law.

11. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@getkinetic.ai and we will take steps to delete such information.

12. International Data Transfers

kinetic.ai is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to the United States. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.

13. LinkedIn Data and Terms

The kinetic.ai Chrome extension captures data from LinkedIn pages that you visit while browsing. By using the extension, you acknowledge that you are using it for personal, non-commercial purposes, you are only syncing your own connections, and you accept responsibility for your use of the extension in compliance with LinkedIn's User Agreement. LinkedIn's User Agreement restricts automated data collection, and the use of any synchronization tool carries some risk to your LinkedIn account. Please review Section 5.3 of our Terms and Conditions for a full disclosure before using the extension.

14. SMS Communications

If you opt in to SMS notifications, we will send you text messages related to your networking activity and outreach reminders. You can opt out at any time by replying STOP to any message or updating your notification preferences in the app.

For full details, see our SMS Terms of Service.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, legal requirements, or other factors. We will notify you of material changes by updating the "Effective Date" at the top of this page and, for significant changes, by sending an email or in-app notification. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: