We don't sell your data. Here's the formal version.

What "sell" and "share" mean here

Under the CCPA/CPRA:

• Sell means disclosing personal information to a third party for monetary or other valuable consideration.
• Share means disclosing personal information to a third party for cross-context behavioral advertising.

Kairo's position

Kairo does not sell personal information and does not share personal information for cross-context behavioral advertising. We do not run ads. We do not auction audience segments. We do not sync your identifiers to ad networks or data brokers.

We do engage sub-processors to deliver the service. Those are service-provider relationships, not sales or shares.

Your rights under California law

• Right to know: request the categories and specific pieces of personal information we have collected about you in the last 12 months.
• Right to delete: request that we delete personal information we have collected from you.
• Right to correct: request correction of inaccurate personal information.
• Right to portability: request a copy of your personal information in a portable format.
• Right to limit: direct us to use sensitive personal information only as necessary to provide the service.
• Right to opt out of sale or sharing: exercise the opt-out below (already in effect by default at Kairo).
• Right to non-discrimination: we will not retaliate for exercising any of these rights.

How to exercise your rights

Most requests can be completed inside the product:

• Access & export: Settings → Data & export → Download a copy of your data.
• Deletion: Settings → Account → Delete account.
• Correction: Settings → Profile / Account fields.

For anything the product tooling does not cover, email privacy@heykairo.io from the address on file. We may need to verify your identity before acting on a request. We respond within 45 days, extending once by 45 days if needed (we'll tell you in writing).

Authorized agents

You may designate an authorized agent to make a request on your behalf. We will require written proof of authorization and may contact you to verify the agent's identity.

Global Privacy Control (GPC)

Kairo honors browser-level Global Privacy Control signals as a valid opt-out request under CPRA. If your browser sends a GPC header on a visit to our marketing site, we treat that as an opt-out of sale and sharing for that browser.

Other state privacy laws

Residents of states with analogous privacy laws (e.g., Virginia, Colorado, Connecticut, Utah, Texas) have substantially similar rights. The mechanisms above apply.