KIBO.IS Privacy Policy

1. Introduction & Overview

KIBO ("KIBO.IS", "we", "us", or "our") operates the KIBO Enterprise Privacy Operations Platform. We are committed to processing data in compliance with global data protection laws, including the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), Quebec Law 25, Canada’s PIPEDA, and the US Health Insurance Portability and Accountability Act (HIPAA).

2. Information We Collect

We collect information to provide, secure, and improve our services:

• Account Data: Full name, business email, organization name, authentication credentials, and billing details.
• Platform Telemetry: Anonymized audit logs, performance metrics, and consent logs necessary for service reliability.
• Customer Content: Data uploaded or synced into the platform for DSAR processing or privacy management. Customer Content remains strictly owned by the Customer.

3. AI Data Processing & Zero Model Training Guarantee

Crucial Guarantee: Customer Content processed through KIBO’s AI Privacy Copilot is strictly isolated. We NEVER use customer data, PII, or internal documents to train public, foundational, or multi-tenant AI models. Zero data leakage is guaranteed.

4. Data Subject Rights

Depending on your jurisdiction, you possess the right to access, rectify, port, erase (Right to be Forgotten), or restrict the processing of your personal data. To submit a Data Subject Request, please visit our Intake Portal or email privacy@kibo.is.

5. Subprocessors & Data Transfers

KIBO transfers data strictly to vetted subprocessors holding SOC 2 Type II or ISO 27001 certifications. View our full Subprocessor List.

6. Contact Our Data Protection Officer (DPO)

For questions or formal inquiries, contact our Data Protection Officer at: dpo@kibo.is.