Privacy Policy

Last updated: August 22, 2026

Introduction

Kachi AI, Inc. ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI visibility and attribution platform at kachi.ai.

Information We Collect

Information You Provide

Account information (name, email, company)
Contact form submissions
Communication preferences

Information Collected Automatically

Server access logs for analytics processing
Usage data and feature interactions
Device and browser information
A randomly generated visitor identifier, stored in the kachi_vid cookie and set by our content delivery network, used to distinguish repeat visits in our own traffic analytics. It is set only after you consent to analytics, and is expired if you withdraw that consent — see Cookie Policy
Analytics data (only with your consent — see Cookie Policy)

Third-Party Integrations

When you connect integrations like Google Analytics 4 or Google Search Console, we access data according to your authorization and the permissions you grant.

How We Use Your Information

Provide and maintain the Kachi AI, Inc. platform
Process and analyze server logs for AI visibility metrics
Generate reports and dashboards
Communicate with you about your account
Improve our services and develop new features
Comply with legal obligations

Lawful Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we process your personal data on the following lawful bases under Article 6 of the GDPR:

Contract performance — Processing necessary to deliver the Kachi AI, Inc. platform and fulfil our agreement with you.
Legitimate interests — Processing necessary for our legitimate interests, such as security monitoring, fraud prevention, and improving our services.
Consent — Where you have given explicit consent, for example to allow analytics cookies.
Legal obligation — Where processing is necessary to comply with a legal obligation.

Data Security

We implement enterprise-grade security measures including encryption in transit (TLS 1.2+) and at rest (AES-256), access controls and MFA, regular security audits, and secure AWS infrastructure.

Data Retention

Account data — Retained for the life of your account and deleted within 30 days of an account deletion request.
Server log data — Raw edge event logs are deleted after 30 days. The normalised form used for reporting is deleted after 60 days. Aggregated statistics derived from them, which do not identify you, may be kept longer.
Analytics data (GA4) — Event-level data is deleted after 2 months. User-level data is deleted after 14 months. These are the retention settings configured on our Google Analytics property.
Contact form submissions — Retained for 1 year, then deleted automatically.
Billing records — Retained for 7 years as required by applicable tax and accounting laws.

Your Rights

Depending on your location, you may have rights regarding your personal data including access, rectification, erasure, data portability, restriction, right to object, and right to withdraw consent. To exercise any of these rights, email [email protected].

International Data Transfers

Kachi AI, Inc. is based in the United States. Where we transfer personal data from the EEA or UK to ourselves, we rely on Standard Contractual Clauses (SCCs) to ensure an adequate level of protection. Google LLC, which operates Google Analytics, self-certifies under the EU-U.S. Data Privacy Framework and its UK Extension, so transfers to Google rely on that adequacy decision rather than on SCCs.

Third-Party Services

We do not sell your data. Current third-party processors include Amazon Web Services (AWS) for cloud hosting, Cloudflare as our content delivery network and edge network (which serves kachi.ai and sets the kachi_vid cookie on our behalf), and Google Analytics 4 for website analytics (loaded only with your consent).

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children.

California Privacy Rights (CCPA / CPRA)

California residents have rights to know, delete, correct, and opt out of sale. We do not sell or share your personal information. To exercise your rights, contact [email protected]. We will respond within 45 days.

Contact Us

If you have questions, email [email protected].