Privacy Policy

Information we collect

We collect the following categories of information:

• Account information. Your email address, and either a hashed password (if you sign up with email) or your basic Google profile (name, email, avatar) if you sign in with Google.
• Onboarding answers. The URL you paste, any notes you add about your product, the buyer hypotheses you confirm or correct, and the channels you choose to search.
• Campaign data. The leads, communities, hypotheses, drafts, and findings Kylani generates or you edit while using the product.
• Connected account tokens. If you connect Google, an OAuth token scoped to sending mail on your behalf. If you connect Stripe, an OAuth token scoped to reading your account's revenue summary. We never see or store your Google or Stripe password.
• Usage data. Basic, anonymized product analytics (via Vercel Analytics) to understand which pages are used — no cross-site tracking, no ad identifiers.

How we use it

• To generate buyer hypotheses, leads, and draft outreach messages for your campaign.
• To send messages you've explicitly approved, from your own connected Gmail account.
• To show you real revenue and reply data once you connect Stripe or start sending.
• To keep your account secure and your campaign data private to you.
• To improve Kylani's product — never to sell your data, and never to train third-party models on it.

AI processing

Kylani sends the URL, notes, and page content you provide to Anthropic's Claude API to analyze your product and draft outreach copy. That content is transmitted to Anthropic solely to generate your results and is handled under Anthropic's own API data-handling terms — it is not used to train Anthropic's models.

Sending email on your behalf

If you connect Google, Kylani requests a Gmail “send” scope so approved messages go out from your own inbox, not a shared tool inbox. Kylani never sends anything you haven't explicitly approved, and never reads your existing mail — the scope we request only allows sending.

Revenue data

If you connect Stripe, Kylani reads a summary of your account's revenue via Stripe Connect (OAuth) to show real numbers on your Map page. We don't store your Stripe API keys, and disconnecting Stripe at any time immediately stops this access.

Where your data lives

Campaign data is stored in MongoDB Atlas. The application itself runs on Vercel. Both providers are industry-standard infrastructure vendors bound by their own security and data-processing commitments; neither has any independent right to use your data.

Data retention and deletion

We keep your account and campaign data for as long as your account is active. You can ask us to delete your account and all associated data — leads, drafts, findings, and connected-account tokens — at any time by emailing deacon@kylani.app. If someone Kylani has contacted asks to be suppressed from future outreach, we honor that request immediately and keep a record of the suppression so it isn't contacted again through Kylani.

Your rights

You can access, export, correct, or delete your data at any time. Disconnecting Stripe from Settings revokes that access immediately — Google can't be disconnected from within Kylani since sending depends on it, but you can revoke its access anytime from your Google Account's connected-apps settings. To exercise any of these rights, email deacon@kylani.app.

Children's privacy

Kylani is a business tool and isn't directed at, or knowingly used by, children under 16.

Changes to this policy

If this policy changes in a way that affects how your data is handled, we'll update the date at the top of this page and, for material changes, email account holders directly.

Contact

Questions about this policy or your data — deacon@kylani.app.