Privacy Policy

1. Who We Are And What This Covers

This Privacy Policy explains how Endai Marketing Growth Inc., a Delaware corporation that provides Kyōsey AI ("we", “us”, “our”), handles information in connection with Kyōsey AI. That includes the Kyōsey AI web application, the client portal, the Kyōsey connector for Claude and this website (together, “Kyōsey”). Capitalized terms not defined here have the meaning given in our Terms & Conditions.

Two roles. For information about our own customers and website visitors (such as account, billing and contact details), we decide how the information is used. For Customer Data, meaning the data our customers put into Kyōsey or let Kyōsey access, we act on our customer’s behalf as a service provider, or “processor”. If you are a client of an agency that uses Kyōsey, the agency decides how your data is used, and you should contact the agency first about it.

2. Information We Collect

Information you give us

• Account details: name, work email, company, role and the settings you choose.
• Content you create in Kyōsey: chat messages, uploaded files and images, notes, tasks, comments, KPIs, campaign plans, reports and drafts.
• Demo requests, VIP waiting-list sign-ups and messages: the details you enter in our “Book a demo” form, and those you give when you join the VIP waiting list (your name, email address, phone number, company, website, company size and monthly ad budget). We use them to arrange demos, send your invitation to Kyōsey and follow up with you.
• Billing details. Payments are handled by our payment processor, and we do not store full card numbers.

Information from accounts you connect

When you connect a platform, Kyōsey reads the data you authorize it to access so that it can work for you. Depending on what you connect, this can include:

• advertising data from Google Ads, Microsoft Advertising, ChatGPT Ads, Meta (Facebook and Instagram), TikTok, Pinterest and LinkedIn, such as campaigns, ads, keywords, audiences, spend and results;
• analytics and search data from Google Analytics 4, Google Search Console, Google Tag Manager, PageSpeed Insights and Google Merchant Center;
• store and lead data from Shopify and CallRail, such as orders, products, calls and form submissions;
• CRM data from HubSpot, such as contacts, companies, deals, lead stages and form submissions; and
• Google Workspace data from Gmail, Google Calendar, Google Drive, Docs, Sheets, Google Meet transcripts and Google Chat, used for example to debrief client meetings, keep relationship logs and save drafts.

Your own calendar, email and files, if you allow them

Each person who signs in to Kyōsey may connect their own workspace (their calendar, email and files) in Settings → Connections or on the Dashboard’s Calendar tab, and may be asked for it when they sign in with Google or Microsoft. A workspace is connected for one business: someone who works in several connects it in each one where they want it used, and a workspace connected in one business is never read in another (signing in keeps it only for someone who works in a single business). You choose what to allow: Google lets you untick any of the three, such as your files, and with Microsoft, if your company does not let you allow your email and files, you can connect your calendar alone. These permissions are yours, kept apart from your business’s connections, and you can remove them at any time.

• Your calendar (Google Calendar or Outlook calendar). Kyōsey reads your events when you open the Calendar tab, to show them to you beside your business’s top 3 priorities, and when you ask Kyō about your schedule, or to add or change an event, in your chat. It adds an event to your calendar, such as a meeting or an appointment, only when you ask Kyō and confirm it. It moves, renames or cancels an event only when you ask and confirm the change, and only an event you organize: one you were invited to stays the organizer’s. The people invited get your calendar’s own invitation, update or cancellation. Your events are shown to you alone, and the Calendar tab does not store them.
• Your email and files (Gmail and Google Drive, or Outlook mail and OneDrive), if you allowed them. Kyō reads them only when you ask her in your chat, for example to find what someone wrote to you or to read a document, and only what your request needs. She can save an email as a draft in your mailbox for you to send; she never sends email. What she reads to answer you goes to our AI model provider (section 4) and becomes part of that conversation, like anything else you share in a chat. Kyōsey never reads your email or files on a schedule, or without your asking. When you open a presentation or document Kyō made in Google Slides or Docs, Kyōsey saves it to your Google Drive, in a “Kyōsey AI” folder, and keeps that one copy up to date when you open a later version. If you changed the copy in Google, Kyō reads it before her next change so your changes are kept, and nothing you wrote is replaced before she has. She moves it to your Drive’s trash only when you ask her and approve, and you can restore it from there for 30 days. With Google, this uses a permission that reaches only the files Kyōsey made, never your other files.

Chats with Kyō

If an agency works for your business, Kyōsey also looks, once a day, for work in what your people tell Kyō in their chats, for the Projects & Priorities the agency keeps for your business. What it finds is shown only to the staff who work on your business (ours, or your agency’s), and nothing becomes a priority until one of them keeps it. Your business’s people see the priorities the agency shares with them, and change none of them.

This data can include personal information about other people, such as the people in your emails, meetings, calls or customer lists. You are responsible for having the right to share it with Kyōsey (see our Terms).

Information collected automatically

• Usage and log data: pages and features used, actions taken, AI token usage and cost, errors, IP address, browser and device type.
• Audit records of important actions, such as campaigns created, settings changed and who did them.
• Cookies needed to sign you in and keep Kyōsey secure (see section 10).

Client portal users

If an agency invites you to its client portal, we process your email address and the one-time sign-in codes we send you, along with the information the agency chooses to share with you.

3. How We Use Information

We use information to:

• provide Kyōsey. That includes reading your connected accounts, answering questions, analyzing performance, generating reports, emails and campaign plans, refreshing KPIs, showing your calendar beside your priorities, reading your own calendar, email and files when you ask Kyō (section 2), finding work for your business’s Projects & Priorities in the chats described in section 2, and taking the actions you approve in your connected platforms;
• keep Kyōsey secure, keep audit trails, and detect and investigate misuse, such as attempts to get into other people’s accounts or to use Kyōsey for illegal purposes, including by suspending or closing the accounts involved;
• provide support and respond to your requests;
• arrange the demos you ask for, send your invitation to Kyōsey if you join the VIP waiting list, and follow up with you about them;
• bill for subscriptions and AI usage;
• send service messages, such as sign-in codes, security notices, billing notices and changes to Kyōsey or our terms;
• send you marketing emails about Kyōsey and our other products, offers and events, which you agree to when you create an account and can stop at any time (see section 9);
• monitor Kyōsey’s performance, reliability and cost — for example response times, errors and usage volumes — and fix problems;
• understand and improve how Kyōsey is used, using aggregated or de-identified usage information (for example, which features are used and how many tokens they consume), never the content of your data; and
• meet legal obligations and enforce our terms.

Our own marketing uses only your account contact details, such as your name, email address and company, never Customer Data. We do not use Customer Data or your account details for advertising, and we do not build profiles of you for marketing by others. Visits to this website may be measured, and used for our own ads, with cookies you can refuse (section 10).

4. How AI Processing Works

Kyōsey uses AI models to do its work. To answer a question or produce a report, Kyōsey sends the relevant part of your request and the data it needs to our AI model provider, currently Anthropic (Claude), through Anthropic’s commercial API. The response comes back to Kyōsey and is shown to you.

• No training on your data. Neither we nor our AI model provider uses your Customer Data to train AI models.
• Limited human access. Our staff do not read your Customer Data except when you ask us to (for example, for support), when needed for security or to investigate abuse, or when the law requires it.
• AI can be wrong. AI output can be inaccurate. Please review it before you rely on it, as our Terms explain.

5. Who We Share Information with

In Kyōsey (the web application and the client portal) we do not sell your data, rent it, or share it with third parties for their own purposes, and we share none of it with advertisers or data brokers. Our public website is the exception: its cookies, which you can refuse, are the last item below. We disclose information only in these cases:

• Service providers that help us run Kyōsey, under contracts that require them to protect it and use it only to provide their services to us:
  • AI model provider: Anthropic (Claude), to generate Kyōsey’s responses, and Google’s Gemini, to make pictures when you ask for one;
  • TypeSafe, to suggest which Kyōsey expert should take a chat message;
  • hosting, storage and infrastructure providers;
  • Google Cloud services for sign-in, for spam protection (reCAPTCHA) on the client portal, and for reading help articles aloud;
  • email and text-message delivery (for example, Twilio for sign-in codes sent by text, where enabled); and
  • our payment processor.
• Connected platforms, at your instruction. When you approve an action, such as creating a campaign in Google Ads, Kyōsey sends the data needed for it to that platform.
• People you choose. This includes the members of your team in Kyōsey, according to the roles and permissions you set, and your clients through the client portal, limited to what you choose to share.
• Legal reasons. We disclose information when required by law or legal process, or when needed to protect our rights, property or safety, or those of our customers or others. That includes reporting suspected illegal activity to the authorities.
• Business transfers. If we are involved in a merger, acquisition or sale of assets, information may transfer as part of it, subject to this policy.
• Our public website’s cookies, if you allow them. Analytics and advertising partners, such as Google, Meta or LinkedIn, receive information about your visits to this website — for example the pages you view — through cookies, and may use it for their own purposes, such as showing you ads (section 10). This never includes Customer Data or anything from inside Kyōsey.

The service providers that process Customer Data are listed on our Subprocessors page, and our Data Processing Agreement sets out how we process it for our customers.

6. Google User Data

Kyōsey’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• we use Google user data only to provide and improve the user-facing features of Kyōsey that you use;
• we do not use Google user data for advertising, and we do not sell it;
• we do not use Google user data, or allow anyone else to use it, to create, train or improve any artificial intelligence or machine-learning model. Our AI model provider receives it only to answer your request, under terms that do not allow it to train on it;
• we transfer Google user data to others only as needed to provide or improve those features, for security, to comply with the law, or as part of a merger or acquisition; and
• people do not read Google user data unless you have agreed, it is needed for security or to comply with the law, or it is aggregated and anonymized for internal operations.

What Kyōsey accesses in your Google Account, and why. Only what you allow on Google’s consent screen:

• Google Ads: your campaigns, ad groups, keywords, search terms, spend and results, to answer your questions, show your Dashboard and write reports. Kyōsey makes a change, such as creating a campaign, only after you approve it, and it creates new campaigns paused.
• Google Analytics, Search Console and Merchant Center: reports and product status, to answer your questions and write reports. Kyōsey only reads them.
• Google Tag Manager: your containers’ tags, triggers and variables, to check your conversion tracking. If you ask Kyōsey to set up or change a tag, it first shows you each change, before and after. Only on your approval does it make them, in a new workspace of the container on your account, and save them as a version. It publishes that version only on a second approval, and can put back the version that was live before on another. It removes a tag only when you confirm the removal, and it never changes your container’s settings, users or other workspaces. A conversion tag it installs for ChatGPT Ads is added the same way, for you to publish yourself.
• Your own Google Calendar, Gmail and Google Drive, if you allow them (section 2): your events on your Calendar tab and in your chat, and the email and files Kyō reads, the meetings she adds to your calendar, and the drafts she saves, only when you ask her; and the presentations and documents Kyōsey saves to your Drive when you open them in Google Slides or Docs, which it keeps up to date and moves to your Drive’s trash only when you ask. Kyōsey never reads them on a schedule.
• If you connect Microsoft Advertising with your Google account (an account you opened with “Sign in with Google”): Kyōsey asks Google only for your name, email address and profile picture. Microsoft accepts that Google sign-in in place of a Microsoft account, so Kyōsey sends it to Microsoft with each request for your Microsoft Advertising data, and to no one else. Microsoft decides which of your accounts it reads.
• If you sign in to Kyōsey’s app for agencies with your Google account: Kyōsey asks to create Google Docs, Google Slides and email drafts as you, to keep the Docs and Slides it made up to date and move them to your Drive’s trash when you ask, to send the emails you choose to send from Kyōsey, and to read your Gmail, Google Calendar, Google Drive and Google Sheets, so that it can use them in the work you ask it to do.

How we keep it. Your Google login is stored encrypted and deleted when you disconnect. Calendar events are shown to you and not stored. What Kyō reads from your Google Account to answer you, such as an email, a file or a report, becomes part of that conversation and is kept with it until you delete the conversation or your account. It is kept anywhere else only if you ask Kyō to remember it. Reports, KPIs and campaign briefs built from your Google data are kept while your account is active (section 7), and backups are deleted on their regular cycle. You can ask us to delete any of it at privacy@kyosey.com.

You can disconnect them in Kyōsey (Settings → Connections), or remove Kyōsey’s access to your Google account at any time from your Google Account permissions.

7. How Long We Keep Information

We keep Customer Data for as long as your account is active and as needed to provide Kyōsey. When you remove a client, disconnect an account or close your account, we delete or de-identify the related data within a reasonable period. We keep the details from a demo request or the VIP waiting list for as long as we need them to arrange the demo, send your invitation and follow up with you, and you can ask us to delete them at any time (section 9). We keep some records longer when we need them for legal, tax, accounting, security or dispute-resolution purposes, such as invoices and billing records, and audit logs. If we close an account for a breach of our Terms, we may keep the records related to the breach for as long as we need them to protect Kyōsey and others, or as the law allows or requires. Backups are deleted on their regular cycle.

8. How We Protect Information

We use administrative, technical and physical safeguards appropriate to the information we handle. These include encryption in transit, encrypted storage of access tokens, access controls based on roles and per-client permissions, and audit logs. Enterprise customers run on their own dedicated Kyōsey environment. Kyōsey only reads the platforms you connect, except for the changes you approve one by one, such as creating a paused campaign or adding a conversion tag, which it makes only after you say Yes. No system is perfectly secure, but we work to protect your information and will notify you of a breach affecting it as the law requires.

9. Your Choices And Rights

• Disconnect accounts. You can disconnect any platform in Kyōsey, including your own calendar, email and files, or revoke Kyōsey’s access from the platform’s own account settings, at any time.
• Access, correction, export and deletion. You can ask us for a copy of your information, to correct it, to export your Customer Data, or to delete it, by writing to privacy@kyosey.com. We will verify your request and respond within the time the law requires.
• Marketing email. When you create an account or sign in to Kyōsey, you agree to receive marketing emails from us. You can unsubscribe at any time with the link in any marketing email or by writing to privacy@kyosey.com. Unsubscribing does not stop service messages, such as sign-in codes, security and billing notices. We send marketing by text message only if you agree to it separately: the phone number you sign in with is used for sign-in codes, not marketing. Where the law where you live requires separate consent for marketing email, we will ask for it.
• Your local rights. Depending on where you live, you may have further rights, for example under the GDPR in the European Economic Area and the UK, or under US state privacy laws such as California’s. These can include the right to object to or restrict certain processing, and the right to lodge a complaint with your data-protection authority. Apart from this website’s marketing cookies, which may count as “sharing” under those laws and which you can opt out of (section 10), we do not sell or “share” personal information as those laws define it, and we will not treat you differently for exercising your rights.
• Data we process for an agency. If your data reaches Kyōsey through an agency that uses it, please contact that agency. We will help them respond.

10. Cookies And Similar Technologies

In Kyōsey (the web application and the client portal) we use only what Kyōsey needs: a cookie that signs you in and keeps your session (and, if you choose “remember me”, keeps you signed in on that device), security checks such as reCAPTCHA on the client portal’s sign-in, and your browser’s local storage for preferences such as the theme or a message you have not sent yet. Kyōsey itself uses no analytics or advertising cookies: we measure how it is used and how it performs from our own server records (section 3).

On this website we may also use:

• Analytics: Google Analytics 4, to see in aggregate how visitors use the site; and
• Marketing: advertising and retargeting tags, for example from Google, Meta or LinkedIn, to show our ads to people who visited the site and to measure those ads.

What happens depends on where you are:

• In the United States and its territories they are on unless you opt out. The notice on your first visit has Opt out, and so does Do Not Sell or Share My Personal Information at the bottom of every page. Where advertising cookies count as “selling” or “sharing” personal information under California law or another US state’s, that is how you opt out.
• Everywhere else, and wherever we cannot tell where you are, they are off until you click Allow. If you click Decline, or ignore the question, they stay off. You can change your choice at any time with Cookie settings at the bottom of every page.

One choice covers both kinds. Until you allow them, or once you opt out, they set no cookies, and Google’s tags send Google only cookieless signals (Google’s Consent Mode). We treat a Global Privacy Control signal from your browser as an opt-out of marketing cookies everywhere, even after you click Allow or OK. Your choice is kept in your browser, so it applies on that browser only.

You can also block or delete cookies in your browser settings, though Kyōsey will not work without its sign-in cookie.

11. International Transfers

We are based in the United States, and our service providers may process information in the United States and other countries. Where the law requires, we use appropriate safeguards for international transfers, such as the European Commission’s Standard Contractual Clauses.

12. Children

Kyōsey is a business service and is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

13. Changes to This Policy

We may update this policy from time to time. We will post the new version here and update the effective date. For material changes, we will notify account holders by email or in Kyōsey before they take effect.

14. Contact Us

Kyōsey AI
c/o Endai Marketing Growth Inc.
223 Wall Street, Ste 300
Huntington, New York 11743, United States
Email: privacy@kyosey.com
Phone: 212-430-0808