Privacy Policy

This Privacy Policy describes how Appsmith, Inc. ("Kite," "we," "us," or "our") collects, uses and shares information when you visit kite.ai, use Kite, contact us or connect another service. It also covers information Kite receives through an assistant connection, including ChatGPT when that connection is enabled for your team. The assistant handles information you provide to it under its own privacy terms.

1. Information we collect

We collect information in a few different ways.

Information you provide to us. We may collect your name, email address, business or company name, prompts or other information entered into website forms or product entry fields, messages you send us, and information you provide when requesting support, a demo or a code export.

Information collected automatically. When you use our website, we may collect IP address, browser type and version, device type, operating system, pages viewed, links clicked, referring page or URL, time spent on pages, approximate country derived from IP, and technical identifiers such as cookies.

Information from analytics providers. Our website analytics tools may collect page views, page paths and URLs, clicks and button interactions, prompt submissions, video engagement, category or tab selections, device and browser information, and traffic source and referral data.

When you use Kite, we receive the requests you submit and store messages, replies and work created in your Kite team conversations. We associate a request with your Kite account and the team selected for it. Eligible members of that team can read its Kite web and assistant-connection conversations.

When you use an enabled third-party assistant connection, its calls can give Kite the text of your request, the Kite team ID you select and, when you continue an existing Kite conversation, that conversation's ID. The connection can show the assistant service the IDs and names of teams you are eligible to use and your role in each. Kite also records your Kite user ID and the connecting client's ID for these calls. The connection has no separate field for your full assistant chat history or file attachments. The request text can still contain personal information, earlier conversation text or links to files that you or the assistant include.

If your team connects another service to Kite, we may receive information that service makes available for a request, within the access granted to the connection. The information available depends on the service, its permissions and the work requested.

2. How we use information

We use the information described above to operate, maintain and improve our website; understand page and feature use; personalize parts of the experience, including region-based pricing display; respond to questions and support requests; support onboarding and product entry; measure marketing and website performance; detect and investigate abuse, fraud and security issues; comply with legal obligations; protect our rights; and enforce our terms.

We use your request, the conversation context available to Kite, and information from services your team has connected to answer you and do the work you ask for. Depending on the request and your team's permissions, that work can create drafts or reports, change a website or another connected service, and send the information needed for the change to that service. We may store the resulting conversation and work with your Kite team, and send relevant content to AI-processing services used to produce a response.

AI training. Kite does not use customer content to train or fine-tune AI models, whether Kite's own models or customers' models. We select no-training opt-outs with each of the AI providers we use.

3. Cookies and similar technologies

We and our service providers use cookies and similar technologies on our website. When you first visit, we show a consent banner that lets you accept or reject categories that are not strictly necessary. You can change your choices through the cookie preferences link in our footer.

Strictly necessary. These are required for the website to function and cannot be switched off. They support page delivery, security, load balancing, session continuity and remembering your cookie choices. We also use a short-lived country value derived from your IP address to show regional pricing. These do not require consent.

Analytics. These help us understand how visitors find and use our website. They tell us which pages are viewed, which links and buttons are clicked, where visitors come from and how long they stay. We use Google Analytics 4 for website traffic and engagement measurement; Segment to collect and route analytics events to our other tools; and PostHog for product analytics and feature flags. Session recording is disabled. Analytics cookies are only set if you accept the Analytics category.

Marketing. These measure advertising and show Kite ads on other platforms after you visit our website. They allow those platforms to recognize your browser and report whether an ad led to a visit or signup. We use the LinkedIn Insight Tag and Meta Pixel (Facebook and Instagram). Marketing cookies are only set if you accept the Marketing category. If you reject it, you may still see Kite ads, but they will not be based on your activity on our website.

4. Analytics, advertising and your choices

We use the tools listed above to measure website performance and run advertising campaigns. You can reject the Analytics or Marketing category in our cookie banner or change your choice later through the cookie preferences link in our footer; opt out of Google Analytics with Google’s browser add-on; or adjust ad settings directly with LinkedIn and Meta.

You can read more about these providers’ practices at Google, LinkedIn and Meta. We may add or change analytics and advertising tools over time. When we do, we will update this policy and the categories in our cookie banner.

5. Location-based pricing and geo information

Some pricing shown on our website may vary based on a visitor’s approximate country. Our hosting or delivery infrastructure may provide a country signal derived from your IP address. We use this for approximate country-level detection, not precise location tracking.

6. Authentication, product entry and third-party access

If you begin a product flow from our marketing site, we may preserve information such as the prompt you entered or the next page you intended to visit so you can continue after login or authentication. This may involve redirecting you through an authentication provider and passing the next destination through the login flow.

If you use Kite through an enabled assistant connection, you sign in to Kite and we check your access to the selected team for each request. The assistant handles the conversation on its own platform; Kite processes what the connection sends to us, not your entire assistant chat merely because you connect it.

When a ChatGPT connection to Kite is disconnected and its authorization is revoked, ChatGPT can no longer make new authorized requests to Kite through that connection. Disconnecting does not automatically delete conversations or work Kite already stores for your team, or copies held independently by ChatGPT. For help with disconnection or to request deletion of information Kite holds, contact support@kite.ai.

7. How we share information

We share personal information with providers that help us operate our website and business, including website hosting and infrastructure, analytics, authentication, customer support, communications, security and fraud prevention. Providers acting on our behalf may use information to perform services for us under their agreements with us.

To produce replies and carry out requested work, we may send relevant request text, available Kite conversation context, and information needed from authorized connected services to AI-processing services used by Kite. If the work changes a connected service, we may send the information needed for that action to that service within the connection's permissions. The services we use to process work are distinct from services your team chooses to connect.

We do not use customer content to train or fine-tune AI models, whether our own or customers' models. We select no-training opt-outs with each of the AI providers we use.

An enabled assistant connection may receive the names and IDs of Kite teams you can use and your role in each. When you send a request through that connection, it may receive the selected team and conversation IDs, Kite's reply or progress update, titles of unfinished tasks, and a link to the Kite conversation. Reply text can contain information or links from the work. The connection's tools do not separately upload work files as attachments.

Advertising partners. If you accept Marketing cookies, we allow LinkedIn and Meta to collect information about your website visit through cookies and similar technologies to measure advertising and show Kite ads on their platforms. Some US state privacy laws treat this as a sale or sharing of personal information. You can opt out at any time using the options below. We do not knowingly do this for anyone under 16.

You can opt out by rejecting Marketing cookies, using the Your Privacy Choices link in our website footer, or turning on Global Privacy Control in your browser; we treat that signal as an opt-out for that browser and device. If you opt out, you may still see Kite ads, but they will not be based on your activity on our website.

Other sharing. We may share information if required by law, regulation, legal process or government request; to protect our rights, users or the public; or in connection with a merger, acquisition, financing or sale of assets. We may also share aggregated or de-identified information that does not reasonably identify you.

8. Legal bases for processing

If you are in the EEA, UK or a similar jurisdiction, we process personal information under one or more of these legal bases: your consent; performance of a contract; compliance with legal obligations; or our legitimate interests, such as improving the website, understanding usage and keeping our services secure.

9. Data retention and deletion

We keep personal information for as long as reasonably necessary for the purposes described here, including providing and improving our services, maintaining business and analytics records, resolving disputes, complying with legal obligations and enforcing our agreements. Retention periods may differ by data type and purpose.

Kite product data. We keep conversations and generated work until the customer's team is deleted, with no fixed retention period before then. When a customer deletes their team, we delete its data from our live systems; copies in backups are removed on the schedule below. Specific periods and deletion triggers are:

• Conversations: kept until the team is deleted. Users can archive a conversation at any time, but archiving does not delete it.
• Slack messages: messages Kite reads from a connected Slack workspace are deleted automatically within 7 days.
• Generated work (websites, files, designs): kept until the customer deletes the website or the team. Deleting a website removes its hosting and database. Deleting a team removes all of its files. Design images the user did not select are deleted after 7 days. Website databases that stay inactive for 30 days are deleted automatically.
• Agent workspaces: the temporary workspaces Kite's agents use are destroyed within 24 hours after a task ends.
• Logs: application logs are kept for about 30 days, then deleted automatically.
• Backups: backups are kept for 30 days, then deleted automatically. Data deleted from the live system is fully removed from backups within 30 days.

Disconnecting ChatGPT or another connected service does not automatically delete conversations or work already stored in Kite, or information the other service holds independently. To ask us to delete information Kite holds, contact support@kite.ai.

10. Your rights and choices

Depending on where you live, you may have rights to access your information, correct inaccurate information, delete it, object to or restrict certain processing, withdraw consent where processing is based on consent, request a portable copy where applicable, and opt out of targeted advertising or the sale or sharing of personal information.

You can change your cookie choices through the Your Privacy Choices link in our website footer. For targeted-advertising opt-outs, see Section 7.

To request access to, correction of or deletion of personal information Kite holds, including Kite conversations or work, contact support@kite.ai. Tell us which Kite account or team your request concerns. Information held independently by an assistant or another connected service may also need to be addressed through that service's privacy process.

We may need to verify your identity before fulfilling some requests. You may use an authorized agent to submit a request for you, and we may ask for proof of permission. We will respond within the time required by applicable law. If we decline your request, you may ask us to reconsider by replying to our response, and we will review the decision. We will not discriminate against you for exercising these rights; you will receive the same service and pricing whether or not you exercise them.

11. International data transfers

Your information may be processed in countries other than your own. Those countries may have different data protection laws. Where required, we take reasonable steps to use appropriate safeguards for international data transfers.

12. Data security

We use reasonable administrative, technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Children’s privacy

Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact support@kite.ai.

14. Third-party links and services

Our website may link to third-party websites or services. We are not responsible for their privacy practices, and we encourage you to review their policies before providing information to them.

An assistant or another service you use with Kite may keep its own copies of information you provide there and replies it receives from Kite. Its privacy terms govern its handling of those copies; this policy describes Kite's handling of information it receives through the connection.

15. Changes to this privacy policy

We may update this Privacy Policy from time to time. If we make changes, we will post the updated policy on this page. If required by law, we will provide additional notice.

16. Contact us

If you have questions about this Privacy Policy or our privacy practices, contact Appsmith, Inc. (Kite) at support@kite.ai. Website: https://kite.ai.