Privacy policy

What this policy covers

This policy explains how Kiso CRM handles information when businesses use our website and customer communication service. A business using Kiso CRM controls the customer information it places in the service; Kiso CRM processes that information to provide the service.

Information we collect

We collect account and workspace details, user names and email addresses, location information, customer contact records, message content, call event metadata, consent and opt-out status, lead details, product usage, support correspondence, and technical information such as IP address, browser type, and request identifiers.

Payment details are collected and processed by Stripe. Kiso CRM receives billing status, subscription identifiers, and limited payment metadata, but does not store full card numbers.

How we use information

We use information to provide and secure the service, route calls and messages, maintain customer timelines, enforce messaging consent, process subscriptions, respond to support requests, diagnose problems, prevent abuse, and comply with law. We do not sell personal information.

Providers and disclosures

We use service providers where necessary to operate Kiso CRM, including Telnyx for phone and messaging services, Stripe for billing, xAI for AI-assisted drafts and analysis, Anthropic as an alternate AI provider, and infrastructure providers for hosting and data storage. These providers process information under their own terms and privacy obligations. We may also disclose information when required by law, to protect people or the service, or as part of a business transaction with appropriate safeguards.

Cookies and analytics

Kiso CRM uses essential browser storage for sessions, security, theme preferences, and your analytics choice. Optional website analytics load only after you select “Allow analytics.” You can reset that choice by clearing this site's local storage.

Retention and security

We retain information while an account is active and as reasonably necessary to provide the service, resolve disputes, maintain legitimate business records, and meet legal obligations. We use administrative and technical safeguards designed to protect information, but no system can guarantee absolute security.

Your choices

Workspace administrators can update or delete many records in the product. Depending on where you live, you may also have rights to access, correct, delete, or receive a copy of personal information. Customers who received a message can reply STOP to opt out of further automated texts.

Contact us

Questions or privacy requests can be sent to privacy@kisocrm.com. We may update this policy as the service changes and will post the updated effective date here.