Privacy Policy

Information you provide

• Account information, such as your name, email address, profile details, authentication information, and workspace membership.
• Workspace content, including tasks, records, comments, meetings, notes, files, invoices, reports, automations, prompts, and messages.
• Communications you send to us, including support requests, feedback, survey responses, and waitlist submissions.
• Billing and transaction information. Payment card details are handled by our payment providers and are not stored directly by Kato.

Information from connected services

If you connect a third-party service—such as an email, calendar, development, deployment, time-tracking, database, or payment service—we receive the account details, content, and activity needed to provide the integration. The information we can access depends on the provider, the permissions you grant, and your settings with that provider.

Information collected automatically

We collect device, browser, IP address, approximate location, log, diagnostic, and usage information, including the pages and features you use and the actions you take. We and our service providers may use cookies and similar technologies to keep you signed in, remember preferences, understand product use, and improve the Services.

We use information to:

• Provide, operate, maintain, and secure the Services.
• Create accounts, manage workspaces, sync connected services, and process transactions.
• Power collaboration, search, reporting, notifications, automations, and AI-assisted features.
• Personalize your experience and remember your settings.
• Monitor performance, troubleshoot issues, analyze usage, and develop new features.
• Communicate with you about the Services, security, support, billing, and product updates.
• Prevent fraud, abuse, and security incidents and comply with legal obligations.

Kato includes features that can summarize, draft, categorize, search, extract, and generate content. When you use these features, relevant prompts, instructions, workspace content, and context may be sent to AI model providers and infrastructure vendors so they can return a result and help us operate the feature.

You control what content you submit and which integrations you connect. Do not submit sensitive personal information or confidential material unless you are authorized to do so and the feature is appropriate for that information.

We may share information with:

• Service providers that support hosting, storage, authentication, analytics, communications, customer support, billing, security, and AI functionality.
• Other members and administrators of your workspace, according to your organization’s configuration and your use of collaborative features.
• Third-party services you choose to connect or direct us to interact with.
• Professional advisers, authorities, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or enforce our agreements.
• A buyer, investor, successor, or other participant in a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.

We do not sell personal information for money. We also do not share personal information for cross-context behavioral advertising.

We retain information for as long as needed to provide the Services, maintain legitimate business records, comply with law, resolve disputes, and enforce our agreements. Retention periods vary based on the type of information, workspace settings, contractual commitments, and legal requirements. Backups and security logs may remain for a limited period after information is deleted.

We use administrative, technical, and organizational safeguards designed to protect information. No system is completely secure, so we cannot guarantee that information will never be accessed, used, or disclosed without authorization.

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a copy of your personal information, or to object to or restrict certain processing. You may also have the right to appeal a decision or withdraw consent where processing is based on consent.

You can update certain account details and integration permissions in the Services. You can also unsubscribe from marketing email using the link in the message, though we may still send transactional or service-related communications.

To make a privacy request, email privacy@getkato.io. We may need to verify your identity. If your account is managed by an organization, we may direct the request to that organization.

Kato and our service providers may process information in countries other than the one where you live. Where required, we use recognized safeguards for international transfers of personal information.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us so we can take appropriate action.

We may update this Privacy Policy from time to time. We will post the updated policy here and revise the “Last updated” date. If changes are material, we may provide additional notice through the Services or by email.

Questions or requests can be sent to privacy@getkato.io.