Privacy Policy
Last updated: May 2026
1. Who we are
K.I.N.D AI (Pty) Ltd ("KIND") operates the KIND AI Platform. We are a responsible party under POPIA and, where applicable, a data controller under GDPR. Registered address: South Africa.
Contact: privacy@kind.ai
2. Data we collect
Client account data: name, email, company, country, billing details. Used to provide and bill for the service.
Lead data: names, emails, job titles, company details of B2B leads sourced via Apollo. Processed on behalf of clients in accordance with the POPIA Compliant Process document.
Usage data: platform activity, API calls, feature usage. Used for service improvement and billing accuracy.
3. How we use your data
- Deliver and improve the Platform
- Process payments via Paystack
- Comply with legal obligations (POPIA, GDPR, ECTA)
- Send service communications (not marketing without consent)
- Generate AI-powered features using Anthropic's Claude API
4. Data hosting & transfers
Client and platform data is hosted on Supabase (PostgreSQL database hosted on AWS in the EU region — eu-west-1, Ireland). AI features use Anthropic's API (US-based). Payments are processed by Paystack (Nigeria/South Africa).
Where data is transferred outside South Africa or the EU, KIND ensures appropriate safeguards are in place (SCCs for GDPR, POPIA section 72 conditions for cross-border transfers).
5. Your rights
Under POPIA: right to access, correct, delete your personal information; right to object to processing; right to lodge a complaint with the Information Regulator (South Africa).
Under GDPR (EU/UK users): right to access, rectification, erasure, portability, restriction, object to processing; right to lodge a complaint with your national supervisory authority.
Under CCPA (California, US): right to know, delete, opt-out of sale of personal information. KIND does not sell personal information.
To exercise any right: privacy@kind.ai — we respond within 30 days.
6. Lead data & opt-outs
Lead data is sourced via Apollo.io, which maintains its own consent infrastructure. KIND's platform enforces a permanent opt-out blocklist — any lead who requests to not be contacted is blocked across all clients and never re-surfaced, unless they explicitly opt back in.
7. Retention
Client account data: retained for the duration of the contract + 5 years for legal compliance. Lead data: retained while the client account is active + 1 year. Opt-out blocklist: permanent (by law — deleted data cannot serve as a blocklist). Signed agreements: permanent record.
8. Cookies
The Platform uses essential cookies only (session management, authentication). No advertising or tracking cookies are used.
9. Changes
Material changes to this policy will be notified to clients by email 30 days before taking effect.
10. Contact
Data protection enquiries: privacy@kind.ai
General enquiries: hello@kind.ai