Privacy Policy

We collect only what we need to run the Service you have enabled:

• Account information — your name, email address, password (stored hashed, never in plaintext), workspace details, and role.
• Credentials you connect — API keys and OAuth tokens for the third-party services you choose to link (e.g. email providers, Apollo, and AI providers). These are encrypted at rest with per-workspace keys and are used solely to operate the features you turn on.
• Lead and contact data — the business-contact information you import, discover, or enrich (such as names, job titles, companies, business email addresses, and LinkedIn URLs) to run your outreach.
• Content you create — templates, campaigns, sequences, and messages; and, where you connect an inbox, the replies and conversation metadata needed to power your unified inbox.
• Usage and device data — log data, IP address, browser and device type, and actions in the Service, used for security, debugging, and product improvement.
• Payment data — handled by our payment processor. We do not store full card numbers on our servers.

If you connect a Google account, KinouLeads requests access to your Gmail through Google’s OAuth consent screen. We request only the minimum scopes needed for the features you enable:

• Send email on your behalf (gmail.send) — to send the campaigns and follow-ups you configure, from your connected mailbox.
• Read your mailbox (gmail.readonly) — to detect and display replies in your unified inbox. KinouLeads does not change Gmail labels or archive/trash Gmail messages.
• Basic identity (openid, email, profile) — to identify the connected account.

We access this data only to operate features you have turned on. We do not sell it, use it for advertising, or use it to develop, improve, or train generalized AI or machine-learning models. Human access is limited to what is strictly necessary to operate or secure the feature, to comply with law, or with your explicit consent.

You can disconnect a Google account at any time inside the Service, and you can revoke KinouLeads’s access directly at myaccount.google.com/permissions. Revoking stops all further use of your Gmail data.

• To provide, operate, secure, and maintain the Service and the features you enable.
• To send outbound email and follow-ups from the accounts you connect.
• To display replies and conversation state in your unified inbox and CRM.
• To prevent abuse, enforce our terms, and troubleshoot problems.
• To communicate with you about your account, billing, security, and support.

Legal bases (EEA/UK). Where the GDPR applies, we process personal data to perform our contract with you, to pursue our legitimate interests in operating and securing the Service, to comply with legal obligations, and — where required — with your consent.

We do not sell your personal information. We share it only:

• With subprocessors that host and support the Service (e.g. cloud hosting, infrastructure, and payment processing), under confidentiality and data-protection obligations.
• With third-party services you connect — when you use a linked provider (Apollo, an AI provider, an email provider, etc.), data flows to that provider under your account, governed by their terms and privacy policy.
• For legal and safety reasons — where required by law or to protect the rights, safety, and security of our users, the public, or the Service.
• In a business transfer — if we are involved in a merger, acquisition, or asset sale, subject to this policy.

We and our subprocessors may process data in countries other than yours. Where we transfer personal data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or an equivalent lawful transfer mechanism.

We retain your data for as long as your account is active or as needed to provide the Service. Disconnecting a provider removes its stored credentials; deleting your workspace removes its associated data. Some data may be retained for a limited period as required for legal, security, dispute-resolution, or backup purposes. You can request deletion at any time by contacting support@kinouleads.com.

Connected credentials and tokens are encrypted at rest with per-workspace keys; access is authenticated and scoped per workspace; and traffic is served over HTTPS/TLS. We apply least-privilege access controls and monitor for abuse. No method of transmission or storage is 100% secure, but we use industry-standard safeguards to protect your data and will notify affected users of a data breach as required by law.

Depending on where you live, you may have the right to access, correct, export (portability), delete, or restrict processing of your personal data, and to object to certain processing or withdraw consent.

• EEA/UK (GDPR). You may exercise the rights above and lodge a complaint with your local data-protection authority.
• California (CCPA/CPRA). You may request access to or deletion of your personal information and to know what we collect. We do not sell or “share” personal information for cross-context behavioral advertising.

To exercise any right, email support@kinouleads.com. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights.

We use essential cookies and similar technologies to keep you signed in and to operate the Service. We do not use cookies for third-party advertising. You can control cookies through your browser, though disabling essential cookies may break sign-in.

When you use KinouLeads to process the personal data of your leads and recipients, you act as the data controller and KinouLeads acts as your processor. You are responsible for having a lawful basis for your outreach, honoring opt-outs and unsubscribe requests, and complying with applicable laws (including CAN-SPAM, CASL, GDPR, and ePrivacy). A Data Processing Addendum is available on request.

The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notifying you in the Service. Your continued use after changes take effect constitutes acceptance.

Questions about this policy, your data, or a rights request? Email us at support@kinouleads.com. We aim to respond promptly.