Privacy Policy

Who This Policy Covers

This Privacy Policy applies to Kyro, available at kyroassistant.com, and to Kyro web and mobile apps. Kyro provides AI assistant software for sole traders and small service businesses.

For privacy questions, contact us through the contact page.

Information We Collect

Kyro may collect account information such as name, email address, sign-in details, verification status, workspace membership, support requests, and account preferences.

Kyro may collect workspace and business information, including business name, industry, service area, operating hours, public contact details, brand settings, assistant instructions, pronunciation preferences, and other settings used to run your assistant.

Kyro may process customer and job information that you add or connect, including customer names, phone numbers, email addresses, addresses, enquiry details, job notes, messages, quote drafts, documents, payment request details, uploaded files, photos, and customer history.

Kyro may process voice, call, email, SMS, and assistant interaction data, including call metadata, transcripts, recordings where enabled, message content, AI prompts, assistant instructions, generated drafts, summaries, tool actions, audit events, and usage records.

The mobile app may request access to device permissions only when a feature needs them, such as microphone access for voice assistant calls, contacts access when you choose to import selected contacts, camera or photo library access when you attach images, document picker access when you attach files, and Face ID or device biometric unlock for local app locking. Kyro does not receive or store your biometric identifiers.

Kyro may collect technical, analytics, billing, and security data, including device and browser information, app activity, API logs, error logs, IP address, usage events, payment provider metadata, invoice records, and data needed to prevent abuse and keep the service reliable.

How We Use Information

We use information to provide the Kyro service, operate the AI assistant, manage customer enquiries, prepare emails, SMS, calls, quotes, tasks, and follow-ups, maintain customer history, provide support, improve reliability, prevent abuse, and calculate usage-based billing.

We may also use information to verify accounts, troubleshoot issues, improve product quality, maintain security logs, satisfy legal and accounting obligations, and communicate with you about the service.

AI Providers And Service Providers

Kyro may share data with service providers that help run the product, including hosting, database, authentication, storage, analytics, payments, communications, voice, email, SMS, and AI model providers. These providers process data so Kyro can deliver the service.

Depending on the features you enable, this may include providers for Supabase authentication and database services, Vercel hosting, Stripe payments, Google or Microsoft email/calendar integrations, Twilio SMS or phone infrastructure, Vapi or voice infrastructure, Resend email, and AI model providers. We do not sell personal information.

Connected Accounts And Customer Data

If you connect third-party accounts, Kyro uses the connection to provide the feature you enabled, such as reading relevant emails, syncing messages, generating replies, preparing customer follow-ups, or creating payment and document workflows. You are responsible for making sure you have permission to add customer information to Kyro.

Data Security

Kyro is designed with workspace-scoped access, server-side permissions, private file storage, audit logs, and approval gates for sensitive assistant actions. No online service can guarantee absolute security, but we use reasonable technical and organisational measures to protect data.

Retention And Deletion

We keep data while it is needed to operate Kyro, meet legal or billing obligations, resolve disputes, maintain audit records, and support customers. Users may request deletion of account or workspace data on the account deletion page, subject to legal, security, and billing retention requirements.

Your Choices

You can request access, correction, export, or deletion of your data through the contact page or the account deletion page. Some data may need to be retained where required for security, accounting, legal compliance, or legitimate business records.

Children

Kyro is intended for business use and is not directed to children. Users must not submit information about children unless it is lawful and necessary for their business use of Kyro.

Changes

We may update this Privacy Policy as Kyro changes. The latest version will be posted on this page with the updated date above.