Privacy Policy

1. Introduction

Kansoforce Inc ("Kansoforce," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (kansoforce.ai) or use our Agentic AI Platform services.

This policy applies to all users of our website and platform, including individual consumers (B2C) and business customers and their authorized users (B2B). Where our practices differ between these groups, we note the distinction explicitly.

2. Data Controller and Processor Roles

Understanding our role in handling your data is important:

• As a Data Controller: Kansoforce acts as the data controller for personal information collected through our website, marketing activities, account registration, and customer relationship management. We determine the purposes and means of processing this data.
• As a Data Processor: When our enterprise customers use the Kansoforce Agentic AI Platform to process data on behalf of their own clients or operations, Kansoforce acts as a data processor. In this capacity, we process data solely on the instructions of our customers (the data controllers) and in accordance with our Data Processing Agreement (DPA). Enterprise customers may request a copy of our DPA by contacting legal@kansoforce.ai.

The remainder of this Privacy Policy primarily addresses our role as a data controller. Processing activities performed in our capacity as a data processor are governed by the applicable DPA with each enterprise customer.

3. Information We Collect

3.1 Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Register for an account or request a demo
• Fill out a contact or sales enquiry form
• Subscribe to our newsletter or marketing communications
• Use our platform services
• Participate in surveys, promotions, or events
• Communicate with our support team

This information may include your name, email address, phone number, company name, job title, billing information, and any other information you choose to provide.

3.2 Automatically Collected Information

When you access our website or platform, we automatically collect certain information, including:

• Device information: Browser type and version, operating system, device type, screen resolution
• Network information: IP address, approximate geographic location (city/region level)
• Usage data: Pages visited, time spent on pages, click patterns, referral URLs, search queries
• Cookies and tracking technologies: As described in Section 11 below

3.3 Service Data vs. Customer Data

We distinguish between:

• Service Data: Information we collect about you as a website visitor or customer for our own business purposes (marketing, account management, support, billing). This policy governs Service Data.
• Customer Data: Data that our enterprise customers input, upload, or process through the Kansoforce Agentic AI Platform. Customer Data is processed in accordance with the applicable DPA and our customer's instructions, not this Privacy Policy.

4. Legal Basis for Processing

We process your personal information only when we have a valid legal basis to do so. The legal bases we rely on include:

• Consent: Where you have given us clear consent to process your personal information for a specific purpose (e.g., subscribing to our newsletter, accepting non-essential cookies). You may withdraw your consent at any time by contacting us or using the unsubscribe mechanism provided.
• Contractual Necessity: Where processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract (e.g., providing platform services, processing payments, account management).
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Our legitimate interests include improving our services, fraud prevention, network security, and direct marketing to existing customers.
• Legal Obligation: Where processing is necessary to comply with a legal obligation to which we are subject (e.g., tax reporting, responding to lawful government requests).

5. How We Use Your Information

We use the information we collect for the following purposes:

Purpose	Legal Basis
Provide, maintain, and improve our services	Contractual necessity, Legitimate interests
Process transactions and send related information	Contractual necessity
Send promotional communications	Consent, Legitimate interests (existing customers)
Respond to your comments, questions, and requests	Contractual necessity, Legitimate interests
Monitor and analyze usage patterns and trends	Legitimate interests
Detect, prevent, and address fraud and technical issues	Legitimate interests, Legal obligation
Comply with legal obligations	Legal obligation

6. Information Sharing and Third Parties

We do not sell your personal information. We may share your information in the following circumstances:

• Platform Infrastructure Providers: The Kansoforce Agentic AI Platform relies on cloud hosting and infrastructure services to operate. These include Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure, and Alibaba Cloud (AliCloud). These providers process data on our behalf under strict contractual obligations and are essential for delivering the platform.
• Tenant-Configured Service Providers: Our platform enables tenants (businesses or individual consumers) to connect and configure their own third-party services and integrations, such as CRM systems, email providers, payment processors, and customer support tools. When a tenant connects a third-party service, data sharing with that service is governed by the tenant's own agreements with the third-party provider. Kansoforce acts as a data processor facilitating the integration on the tenant's instruction and is not responsible for the privacy practices of tenant-selected third-party services.
• Kansoforce Operational Services: We may use a limited number of third-party services for our own operational purposes, such as website analytics and transactional email delivery. A current list of our sub-processors is available upon request by contacting privacy@kansoforce.ai.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred. We will notify you before your personal information becomes subject to a different privacy policy.
• Legal Requirements: When required by law, regulation, legal process, or enforceable governmental request, or to protect our rights, privacy, safety, or property.
• With Your Consent: When you have given us explicit permission to share your information for a specific purpose.

7. Automated Decision-Making and AI Processing

As an Agentic AI Platform, we want to be transparent about how automated processing applies to your data:

• Platform Services: Our AI agents may process data automatically as part of delivering platform services. When acting as a data processor on behalf of enterprise customers, the use of automated decision-making is governed by the applicable DPA and our customer's privacy obligations to their end users.
• Website and Marketing: We may use automated tools to personalize your experience on our website, recommend content, or segment marketing audiences. These activities do not produce legal effects or similarly significant effects on you.
• Your Rights: Under GDPR and similar regulations, you have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. If you believe an automated decision has significantly affected you, contact us at privacy@kansoforce.ai to request human review.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Regular security assessments, penetration testing, and audits
• Role-based access controls and multi-factor authentication
• Employee training on data protection and security awareness
• Incident response and breach notification procedures

Our platform maintains SOC 2 Type II compliance and follows ISO 27001 standards. For more details on our security posture, visit our Trust Center.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected. Our specific retention periods are:

• Account data: Retained for the duration of your account and for 2 years after account closure, unless a longer period is required by law.
• Transaction and billing records: Retained for 7 years to comply with tax and accounting obligations.
• Marketing and communication preferences: Retained until you withdraw consent or unsubscribe, plus a suppression record to honor your opt-out.
• Website analytics data: Retained in aggregated or anonymized form for up to 26 months.
• Support correspondence: Retained for 3 years after resolution to improve service quality.
• Customer Data (processor role): Retained and deleted in accordance with the applicable DPA and customer instructions.

When data is no longer needed, it is securely deleted or anonymized so that it can no longer be associated with you.

10. Your Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing based on legitimate interests, including profiling and direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right Regarding Automated Decisions: Not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise any of these rights, please contact us at privacy@kansoforce.ai. We will respond to your request within 30 days (or sooner if required by applicable law). We may ask you to verify your identity before processing your request.

Right to Lodge a Complaint

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has been processed unlawfully. A list of EU data protection authorities is available at edpb.europa.eu. For the UK, you may contact the Information Commissioner's Office (ICO) at ico.org.uk.

If you are located in Australia, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. For full details on the specific cookies we use, their purposes, and how to manage them, please see our Cookie Policy. Below is a summary of the types of cookies we use:

11.1 Essential Cookies

These cookies are necessary for the website to function and cannot be disabled. They include session cookies, authentication tokens, and security cookies.

11.2 Analytics Cookies

These cookies help us understand how visitors interact with our website by collecting information such as pages visited, time on site, and traffic sources. We use services such as Google Analytics for this purpose. Google Analytics uses cookies to collect anonymized usage data. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

11.3 Marketing Cookies

These cookies are used to deliver relevant advertisements and track campaign performance. They may be set by us or by third-party advertising partners. These cookies are only placed with your consent.

11.4 Functional Cookies

These cookies enable enhanced functionality and personalization, such as remembering your preferences and settings.

11.5 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies may affect the functionality of our website. You can also manage your cookie preferences through our cookie consent banner displayed when you first visit our site.

11.6 Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) setting that sends a signal to websites you visit. There is currently no universally accepted standard for how to respond to DNT signals. At this time, we do not respond to DNT signals. However, you can manage your tracking preferences using the cookie controls described above and the opt-out mechanisms provided throughout this policy.

12. Marketing Communications and Opt-Out

We may send you promotional emails about our products, services, and events. You can opt out of receiving marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Emailing us at privacy@kansoforce.ai with the subject line "Unsubscribe"
• Updating your communication preferences in your account settings

Please note that even after opting out of marketing communications, we may still send you transactional or service-related messages (e.g., account notifications, security alerts, billing information).

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including countries that may not provide the same level of data protection as your home country. When we transfer personal data internationally, we implement appropriate safeguards, including:

• Standard Contractual Clauses (SCCs): We use EU-approved Standard Contractual Clauses with our service providers and partners to ensure adequate protection for data transferred outside the EEA.
• Adequacy Decisions: Where available, we rely on adequacy decisions issued by the European Commission recognizing that certain countries provide an adequate level of data protection.
• Additional Safeguards: Where required, we implement supplementary measures such as encryption, pseudonymization, and access controls to protect transferred data.

You may request a copy of the safeguards we use for international transfers by contacting us at privacy@kansoforce.ai.

14. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collection, and the categories of third parties with whom it is shared.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes.
• Right to Limit Use of Sensitive Personal Information: To the extent we collect sensitive personal information, you have the right to limit its use to purposes necessary to provide our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise your California privacy rights, please contact us at privacy@kansoforce.ai or call us at the number listed in the Contact section below. We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.

Categories of personal information collected in the preceding 12 months: Identifiers (name, email, IP address), commercial information (transaction history), internet activity (browsing data, usage analytics), professional information (job title, company name), and inferences drawn from the above.

15. Additional US State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), and other states with applicable consumer privacy laws may have similar rights to those described in the California section above, including the right to access, delete, correct, and opt out of certain processing activities. To exercise these rights, please contact us at privacy@kansoforce.ai.

If your request is denied, you may have the right to appeal our decision. To appeal, please email us at privacy@kansoforce.ai with the subject line "Privacy Rights Appeal."

16. Children's Privacy

Our services are not directed to individuals under 16 years of age (or under 13 years of age in jurisdictions where COPPA applies). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take prompt steps to delete that information. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@kansoforce.ai.

17. Third-Party Links

Our website and platform may contain links to third-party websites, services, or applications that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit. A link to a third-party site does not constitute an endorsement by Kansoforce.

18. Data Processing Agreements

Enterprise customers who use the Kansoforce Agentic AI Platform to process personal data are encouraged to enter into a Data Processing Agreement (DPA) with us. Our DPA covers:

• The scope, nature, and purpose of data processing
• Obligations and rights of the data controller and data processor
• Sub-processor management and notification procedures
• Data security measures and breach notification timelines
• Data subject rights assistance
• Data return and deletion upon contract termination

To request a DPA or our current list of sub-processors, please contact legal@kansoforce.ai.

19. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

• Post the updated Privacy Policy on this page with a revised "Last updated" date
• Notify registered users via email for material changes that affect how we process their data
• Where required by law, obtain your consent before applying material changes to your data

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

20. Data Protection Officer

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection strategy and compliance. You can contact our DPO directly at:

Data Protection Officer
Kansoforce Inc
Email: dpo@kansoforce.ai

21. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise your rights, please contact us at:

Kansoforce Inc
Email: privacy@kansoforce.ai
DPO: dpo@kansoforce.ai
Legal: legal@kansoforce.ai
Address: 2150 N 1st St, Suite 507, San Jose, CA 95131

We aim to respond to all privacy-related enquiries within 30 days.