Kelo AI | Privacy Policy

Overview

KeloAI ("we," "us," or "our") provides a platform that lets businesses build and deploy AI-powered assistants. This Privacy Policy explains what information we collect when you use our platform, our website, or interact with an assistant built on KeloAI, and how we use, share, and protect that information.

This policy applies to KeloAI account holders (our "customers"), visitors to our website, and end users who interact with assistants deployed by our customers. Where our customers act as the data controller for their end users, we act as a data processor on their behalf — see How we share information below for more detail.

Information we collect

Account information

Name, email address, company details, and billing information you provide when you create an account or subscribe to a plan.

Content you upload

Documents, knowledge base articles, and any other content you upload to configure your assistant, along with credentials or configuration details for any third-party systems you choose to connect.

Conversation data

Messages exchanged between end users and assistants deployed on the platform, including timestamps and basic technical metadata (such as IP address and browser type) needed to operate and secure the service.

Usage data

Information about how you interact with our platform — pages visited, features used, and actions taken — collected automatically to help us understand and improve the product.

How we use information

To provide, operate, and maintain the KeloAI platform
To process payments and manage subscriptions
To power assistant responses, including retrieving relevant content from your knowledge base and connected systems
To provide customer support and respond to inquiries
To monitor, secure, and improve the reliability of the platform
To comply with legal obligations
To communicate with you about updates, security notices, or changes to our terms or policies

AI processing & your data

KeloAI assistants generate responses by retrieving relevant content from your knowledge base and, where configured, your connected systems, then using that content to produce an answer. We do not use customer content to train models for the benefit of other customers, and your data is logically separated from other organisations on the platform.

Conversation logs are retained to help you review assistant performance and improve your knowledge base, and can be deleted on request — see Data retention.

How we share information

We do not sell your personal information. We may share information in the following circumstances:

With service providers who help us operate the platform (for example, hosting, payment processing, and email or messaging delivery), under contractual confidentiality obligations
With systems you choose to connect to your assistant, strictly as configured by you
To comply with a legal obligation, court order, or valid government request
In connection with a merger, acquisition, or sale of assets, with notice provided where required by law
With your consent, or at your direction

Data retention

We retain account information and content for as long as your account is active. Following account closure, we retain data for a limited period to allow for recovery and to meet legal or accounting obligations, after which it is deleted or anonymised. You can request earlier deletion of specific data by contacting us — see Contact us.

Security

We use industry-standard technical and organisational measures to protect your information, including encryption in transit, access controls, and regular review of our security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. To exercise any of these rights, contact us using the details below. If your data was provided to an assistant deployed by one of our customers, you may also need to contact that organisation directly, as they control how their assistant is configured and used.

International data transfers

KeloAI is based in Kenya and may process and store information in other countries through our service providers. Where we transfer personal information across borders, we take steps to ensure it receives an adequate level of protection consistent with this policy and applicable law.

Children's privacy

KeloAI is not directed at individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the platform before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at privacy@kelo.co.ke .