This Privacy Policy explains how Kisnip ("we", "us", "our") collects, uses, and safeguards personal data when you use our website, dashboard, and the embeddable voice assistant (together, the "Service"). We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).
1. Who we are
Kisnip is the data controller for personal data processed about our account holders and website visitors. For any privacy questions, contact us at [email protected].
2. Data we collect
Account data
- Name, email address, and password (stored securely and hashed).
- Business details you provide (company name, website, branding, persona settings).
- Billing information processed by our payment provider, Stripe.
Conversation data
- Voice and chat conversations exchanged between website visitors and the AI assistant.
- Voice input is processed in real time to generate replies; we do not retain audio recordings after a conversation ends, only text transcripts.
- Technical data such as the page URL where a conversation took place.
Usage data
- Aggregated analytics such as conversation counts used to power your dashboard.
- Local storage on the visitor's browser to remember an ongoing conversation.
3. How we use data
- To provide, operate, and improve the Service.
- To generate AI responses (conversation content is sent to our AI provider, Google, solely to produce replies).
- To deliver transactional and confirmation emails.
- To process payments and manage subscriptions.
- To secure the Service and prevent abuse.
4. Legal bases for processing
We process personal data on the basis of contract performance (providing the Service), legitimate interests (securing and improving the Service), consent (where required, e.g. optional communications), and legal obligations (e.g. accounting).
5. Sharing & sub-processors
We do not sell personal data. We share data only with trusted sub-processors that help us run the Service:
- Google Firebase: hosting, database, and authentication.
- Google Gemini: AI response generation.
- Stripe: payment processing.
- Hostpoint: sending transactional emails.
Kisnip's use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
6. International transfers
Some sub-processors may process data outside your country. Our core hosting, database, and authentication run on Google Firebase, and data may be processed in the European Union and other regions where Google operates. Where data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
7. Data retention
We retain account data for as long as your account is active. Conversation transcripts are retained while your account is active and are not deleted automatically. When you delete your account, associated personal data is removed or anonymised within 30 days, except where we must retain it to comply with legal obligations (e.g. accounting records kept for up to 10 years under Swiss law).
8. Your rights
Subject to applicable law, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. To exercise these rights, contact [email protected]. You may also lodge a complaint with your local data protection authority.
9. Automated decisions & profiling
We do not use your personal data for automated decision-making that produces legal or similarly significant effects, nor for profiling. AI models generate conversational replies only and do not make decisions about individuals.
10. Security
We use industry-standard measures including encryption in transit, access controls, and secure infrastructure to protect personal data. No method of transmission or storage is completely secure, but we work continuously to protect your information.
11. Data breach notification
If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where required, inform affected users as soon as reasonably possible.
12. Cookies & local storage
The assistant uses browser local storage to remember an ongoing conversation, your language, and currency preferences; this is essential to the service and is not used for advertising. On our public website we also use Google Analytics to understand how visitors use Kisnip. Analytics cookies are only set after you accept our cookie banner, and you can decline at any time. We do not use advertising or cross-site tracking cookies.
13. Children
The Service is not directed to children under 16, and we do not knowingly collect their personal data.
14. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
15. Contact
Questions about this policy? Email us at [email protected].