Privacy Policy

1. Scope

This Privacy Policy applies to the Kigenix website, merchant application, pilot program, support communications, and related services (collectively, the “Service”). Kigenix is designed for businesses and their authorized representatives, not for consumer use or children.

2. Information we collect

Account and contact information

When you create an account, sign in, request a demo, or contact us, we may collect your name, business email address, profile image, authentication identifier, business name, location, role, and the contents of your message.

Google account and Business Profile data

If you choose to connect Google, Kigenix may receive basic sign-in data such as your name, email address, profile image, and Google account identifier. A separate Google Business Profile authorization may allow Kigenix to access the business accounts and locations you are authorized to manage, including location details, categories, hours, contact and website information, reviews and existing replies, and eligible performance information.

Kigenix requests access only when needed for a visible feature. Connecting Google Business Profile is optional and is separate from signing in to Kigenix.

Business, website, and public information

We may process information you provide about your business, content from your official website, and public listing information to identify inconsistencies and help explain discovery and reputation signals.

Service activity and technical information

We may collect device and browser information, IP address, timestamps, pages or features used, diagnostic events, and security logs to operate, protect, troubleshoot, and improve the Service.

3. How we use information

• Authenticate users and maintain secure merchant workspaces.
• Connect the Google accounts and business locations selected by an authorized merchant.
• Display connected reviews, business information, and eligible performance data.
• Generate user-facing summaries, consistency checks, response drafts, and recommended actions.
• Provide support, prevent abuse, investigate security issues, and maintain the Service.
• Comply with applicable law and enforce our Terms of Service.

We do not sell Google user data, use it for targeted advertising, or use it to build advertising profiles. We do not make changes to a merchant's Business Profile or publish a review reply unless that action is clearly presented and specifically approved by an authorized user.

4. Google API data and Limited Use

Kigenix's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Google-connected data is used only to provide or improve the user-facing Kigenix features described in this policy. We limit human access to circumstances where you have given specific consent, it is necessary for security or abuse investigation, or it is required by law. We do not permit advertising platforms or data brokers to access Google-connected data.

5. How information is shared

We use service providers for infrastructure, authentication, hosting, database, security, support, and—when a merchant requests a visible feature—AI processing. Google-connected data is transferred to a provider only when necessary to provide or improve that user-facing feature with the user's consent, or for a security or legal purpose permitted by Google's Limited Use requirements. Providers are contractually restricted to processing information for Kigenix and may not use Google-connected data for their own advertising or independent purposes.

Usage analytics are limited to technical and product events; Kigenix does not send Google Business Profile API content to advertising platforms or data brokers. We may also disclose information when required by law or to protect users or the Service. Google-connected data will not be transferred as part of a merger, acquisition, or asset sale without the user's explicit prior consent. We do not disclose one merchant's private workspace data to another merchant.

6. Storage and retention

Account and merchant workspace data is retained while the account is active and as reasonably necessary to provide the Service, meet legal obligations, resolve disputes, and protect the Service. OAuth credentials are stored on protected server-side systems and are not exposed in public pages.

Content obtained through Google Business Profile APIs is kept only in limited amounts needed to operate user-facing features and is refreshed or deleted within the period permitted by Google's applicable policies, generally no longer than 30 calendar days. Security logs and backups may remain for a limited additional period before routine deletion, but this does not extend storage of Google Business Profile API content beyond Google's permitted retention period.

7. Your choices and data controls

You may choose not to connect Google Business Profile. You may revoke Kigenix's Google access at any time, disconnect a business connection, or request deletion of your Kigenix account and associated data. Instructions are available on our Data Controls & Deletion page.

Disconnecting Kigenix stops future access but does not delete or change the source Business Profile, reviews, or other information held by Google.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, tenant-level authorization, protected credential storage, and monitoring. No internet service is completely secure, so we cannot guarantee absolute security.

9. International processing

Kigenix operates from the United States and may use service providers in other locations. Where required, we use appropriate safeguards for cross-border processing.

10. Changes to this policy

We may update this policy as the Service changes. We will update the effective date and provide additional notice when a material change affects how previously authorized Google user data is used.

11. Contact

For privacy questions or requests, email receive@kigenix.com. Please do not send passwords, OAuth secrets, or verification codes.