kezoPrivacy Policy
This policy explains what personal data Fini LLC ("Kezo", "we") collects through kezo.si and the Kezo service, why, and your choices. The short version: we collect little, we don't sell it, and we don't use tracking cookies.
1. Who we are
Fini LLC, a Delaware limited liability company, operates kezo.si and is the controller of the personal data described here. Contact: hello@kezo.si.
2. What we collect
- Contact and early-access requests: your name, email address, website, and anything you write to us, through our contact form or by email.
- Account and service data (when you use the product): account details, the website content you ask Kezo to learn from, conversation logs between your customers and your agent, and billing information processed by our payment provider.
- Your customers' details: when a customer asks your agent for a person, or confirms their email to see their own orders or billing, we process their email address, name and conversation for you. One-time verification codes are stored only as a hash and expire after 10 minutes.
- Connected tools: access keys you connect (such as Shopify, Stripe, Zendesk, Freshdesk or Intercom) are encrypted and used only to look things up or act for your business, as you configure. Refunds always wait for your approval.
- Imported data: help-centre articles, saved answers and past conversations you choose to import from another tool.
- Your customers' details: when a customer asks your agent for a person, or confirms their email to see their own orders or billing, we process their email address, name and conversation for you. One-time verification codes are stored only as a hash and expire after 10 minutes.
- Connected tools: access keys you connect (such as Shopify, Stripe, Zendesk, Freshdesk or Intercom) are encrypted and used only to look things up or act for your business, as you configure. Refunds always wait for your approval.
- Imported data: help-centre articles, saved answers and past conversations you choose to import from another tool.
- Technical data: standard server logs kept by our hosting provider (such as IP address, browser type and pages requested) for security and reliability.
We do not use advertising or analytics cookies. The site stores your light or dark theme choice in your own browser only.
3. How we use it
- To reply to you and provide early access.
- To provide, secure and improve the service you've asked for.
- To send service messages such as account and billing notices.
- To comply with legal obligations.
Legal bases (where GDPR or UK GDPR applies): performing a contract with you, our legitimate interest in running and securing the service, and your consent where we ask for it.
4. AI processing
To answer your customers, Kezo sends relevant excerpts of your content and the customer's message to AI model providers through their business APIs. We choose providers that do not use business API data to train their models. We never use your content to train models of our own for other customers.
5. Who we share it with
We don't sell personal data. We share it only with service providers who process it for us, under appropriate agreements: hosting and database (Supabase, Cloudflare), email delivery (Resend, Google Workspace), AI models (Anthropic) and payment processing; and, only when you connect them, the tools you choose (such as Shopify, Stripe, Zendesk, Freshdesk or Intercom). We also share data where the law requires it.
6. Retention
We keep contact requests for up to 24 months unless you become a customer. Customer data is kept while your account is active and deleted within 30 days after you close it or delete an agent, except where the law requires us to keep it longer.
7. Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal data, object to or restrict processing, and withdraw consent. Account holders can export conversations and delete their account themselves in the dashboard (Settings). California residents have the right to know and delete, and we do not sell or share personal information for cross-context advertising. Email hello@kezo.si and we'll respond within 30 days. You can also complain to your local data protection authority.
8. International transfers
We're based in the United States and our providers may process data in other countries. Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.
9. Security and children
We protect data with encryption in transit and access controls; see Security. Kezo is a business service and is not directed at children under 16.
10. Changes
If we change this policy we'll update the date above, and for significant changes we'll notify customers by email.