Kibu Privacy Policy

Effective Date: December 5, 2024

Kibu (“Kibu”, “we”, “our” or “us”) provides a secure end-to-end encrypted collaboration tool (the “Kibu Platform”) that allows small groups of users (“Pods”) to authenticate and to securely share information and content within the Pod or to share such information and content publicly at the Pod’s discretion.

Kibu is committed to transparency in our processing of information. This Privacy Policy describes how we collect, use, disclose, and protect information from and about you through our website Kibu.io and any other website or mobile application that links to this Privacy Policy (the “Site”), the Kibu Platform,  and any other interactions (e.g., customer support, events, our social media pages, and other communications) that you may have with us (all of these offerings collectively referred to herein as the “Services”).

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR INFORMATION. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, PLEASE DO NOT USE THE SERVICES.

1. SCOPE OF THIS PRIVACY POLICY

Please note that Kibu serves as a “data controller” of information when we collect information from and about visitors to our websites (“Site Visitors”), prospective users (“Prospects”),as well  individuals who create a profile on the Kibu Platform that is not associated with a Customer account(“Users”), collectively referred to herein as “you.”

In providing our Services, we may also process certain information about Users on behalf of organizations that have contracted to use the Kibu Platform under a written agreement with us (“Customers,” and such users “Authorized Users”). In such circumstances, our Customers are the data controllers and we are the “data processor” or “service provider,” depending on applicable law. This means that our Customers are responsible for processing information in accordance with their own privacy policies and practices, and otherwise complying with applicable data protection laws. When we act as a data processor, we will only process information about Authorized Users according to the Customers' instructions and the applicable data processing agreement we have in place with our Customers, or as otherwise required by applicable law. In such circumstances, if you have any questions about the processing of your information or would like to make any requests regarding your information, please contact the Customer for assistance.

2. THE INFORMATION WE COLLECT

We collect, store, and use certain information from or about you for the purposes described below.

INFORMATION YOU PROVIDE TO US

We collect a variety of information that you provide directly to us. For example, we collect information from you through:

  • Your registration to use the Services

  • Your use of the Services

  • Your participation in product demos and webinars

  • Your communications with our support and other internal teams (e.g., you email, video chat, open a support ticket, file a feature request, tweet at us, etc. for customer support)

  • Requests or questions you submit to us via online forms, email, or otherwise

  • Your participation in surveys, research, sweepstakes, or contests

  • When you attend our conferences or events or interact with us at other conferences or events

  • When you sign up for our newsletters or other communicate with us through forms and forums on the Services

The types of data we collect directly from you include:

  • Name (which may or may not be your legal name, at your discretion)

  • Log-in authentication information (to authenticate your use of the Services, we use identity public keys and/or device public keys so we can uniquely identify you for the purposes of access verification)

  • Any other information you choose to directly provide to us in connection with your use of the Services

INFORMATION WE COLLECT THROUGH AUTOMATED MEANS

Information About Use of the Services. When you use the Kibu Platform, we collect limited metadata regarding your device used to access the Kibu Platform, such as: the device name; relevant operating system type; host name; IP address; cryptographic identity public key; cryptographic public key(s); user agent (where applicable); language settings; date and time of access to the Kibu Platform; logs describing connections and containing statistics about data sent to and from other devices; and version of the Kibu Platform you installed.

We also collect other certain information relating to a user’s Pod(s) such as Pod IDs, pending Pod user account data, Pod message data including number, size, type, and author; Pod membership history, and Pod broadcast history. This information is needed to provide the Services to you. 

Certain information used to provide the Services to you will only be stored locally and will not be transmitted to our servers, including users' private keys and avatars, unencrypted Pod messages, and certain operating system permissions information such as biometric access, camera access, and local file access.  

Please note that Kibu does not process, or have the ability to access, User Content (as defined below) transmitted through the Services, which is fully end-to-end encrypted, unless your Pod chooses to broadcast User Content, as explained more immediately below.

Broadcasted Pod Data. Every Pod you join through the Kibu Platform will have an Administrator (who is the individual who first created the Pod) and voting rules regarding admission of new members to the Pod, the addition of new Administrators, and whether content created in your Pod ("User Content") can be publicly broadcast outside of the Pod and Services to anyone with whom a link to such User Content is shared.  If your Pod votes to allow User Content to be broadcast, such User Content will be viewable and accessible by anyone with the link to such User Content.  Broadcasted User Content will also be stored on Kibu's servers, and Kibu will have the ability to view and access such content.  You should not vote to broadcast User Content that your Pod does not want to be made available publicly.

Site Information. When you use our Site, we automatically collect certain information about your device and how you use the Site, including your IP address, browser type, browser language, operating system, the state or country from which you accessed the Services, software and hardware attributes (including device IDs), referring and exit pages and URLs, platform type, the number of clicks, files you download, domain names, landing pages, pages viewed and the order of those pages, the amount of time spent on particular pages, the date and time you used the Services, error logs, and other similar information. From your IP address, we may be able to infer your general location (e.g., city/state or postal code).

To collect Site information, we and our service providers may use “cookies” or similar tools that track, measure, and analyze the behaviors and usage patterns of our Site Visitors. Cookies are small data files that can be stored on your browser and device so we can recognize you when you return. We use cookies for analytics purposes, to deliver certain features of the Site, to help us understand how users engage with the Site, and to improve your experience with the Site. You may set your web browser to notify you when you receive a cookie and to accept or refuse certain cookies. However, if you elect not to accept cookies, some functionality and areas of the Site may be restricted. To learn how to manage your cookies, please follow the instructions from your specific browser, or if accessing the Site via a mobile device, refer to the manufacturer’s instructions.

INFORMATION WE COLLECT FROM OTHERS

From time to time, we may collect information about Prospects from other sources, including partners, data enhancement services, conferences, and other industry events or other purposes that we explain to you at the time of collection, to the extent permitted by applicable law. We use this information to supplement the information that we collect directly from Prospects in order to better understand our Prospects’ interests and to provide them with more relevant information, and to improve our analytics and advertising.

When you “like” or “follow” us on Facebook, LinkedIn, X, or other social media sites, we may collect some information from you including your name, username, email address, and any comments or content you post relevant to us.

3. HOW WE USE YOUR INFORMATION

We use your information for various purposes depending on the types of information we have collected from and about you, to:

  • Provide you with access to and to administer our Services

  • Respond to your requests for information and provide you with more effective and efficient customer support

  • Contact you by email, postal mail, or phone with news, updates, information, promotions, surveys or contests relating to the Services or other services that may be of interest to you, in accordance with applicable legal requirements related to such communications

  • Customize the content you see on our Site

  • Engage in analysis and research regarding use of the Services and improve our Services

  • Secure our Services and resolve technical issues being reported

  • Comply with any procedures, laws, and regulations which apply to us where it is necessary for our legitimate interests or the legitimate interests of others

  • Establish, exercise, or defend our legal rights where it is necessary for our legitimate interests or the legitimate interests of others

Aggregate/De-Identified Information. We may aggregate and/or de-identify information collected through our Services so that such information can no longer be linked to you or your device (“Aggregate/De-Identified Information”). We may use such information for any purpose, including without limitation for research, and may also disclose such data with any third parties, including our third-party partners.

4. LEGAL BASES FOR USE OF YOUR INFORMATION

The legal bases for using your information as set out in this Privacy Policy are as follows:

  • Where we need to perform the contract we are about to enter into or have entered into with you for the Services

  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests

  • Where we need to comply with a legal or regulatory obligation

  • Where we have your consent to process your information in a certain way

SITE ANALYTICS AND ADVERTISING

ANALYTICS. We may use third-party web analytics services (such as those of Segment Analytics) with our Services to collect and analyze usage information through cookies and similar tools; engage in auditing, research, or reporting; assist with fraud prevention; and provide certain features to you. To prevent Segment Analytics from using your information for analytics, you may use the Segment consent management tool by emailing us using the Contact Us information below. If you receive email from us, we may use certain analytics tools, such as clear GIFs to capture data such as when you open our message or click on any links or banners our email contains. This data allows us to gauge the effectiveness of our communications and marketing campaigns.

ONLINE ADVERTISING.  In using the Site, we allow select third party advertising technology partners to place cookies or other tracking technologies on the browser of your device. These third parties (e.g., ad networks and ad servers) may use this information to serve relevant content and advertising to you as you browse the Internet, and access their own cookies or other tracking technologies on your browser to assist in this activity. If you are interested in more information about these online advertising activities, and how you can generally control cookies from being put on your computer to deliver tailored advertising, you may visit the Network Advertising Initiative’s Consumer Opt-Out link, the Digital Advertising Alliance’s Consumer Opt-Out link, or Your Online Choices to opt-out of receiving tailored advertising from companies that participate in those programs.

We do not control these opt-out links or whether any particular company chooses to participate in these opt-out programs. We are not responsible for any choices you make using these mechanisms or the continued availability or accuracy of these mechanisms. Please note that if you use these mechanisms, you may still see advertising on the Internet, but it will not be tailored to you based on your online behavior over time.

Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. We are committed to providing you with meaningful choices about the information collected on our Services for third party purposes, and that is why we provide the variety of opt-out mechanisms listed above. However, we do not currently recognize or respond to browser-initiated DNT signals.

5. HOW WE DISCLOSE YOUR INFORMATION

We will disclose your information for limited purposes as follows:

  • Service Providers. We provide access to or disclose your information to select third parties who help us deliver our Services or perform services on our behalf, including content and features, analytics, research, customer support, data storage, security, web hosting, fraud prevention, and legal services.

  • Your Organization. If you are an Authorized User of the Kibu Platform, we may provide your information to our Customer or Customers that have invited you to join their Pods in order to fulfill and enforce our agreements with those Customers, and to inform those Customers regarding usage, support, or training needs.

  • Protection of Kibu and Others. By using the Services, you acknowledge and agree that we may access, retain, and disclose the information we collect and maintain about you if required to do so by applicable law or in a good faith belief that such access, retention or disclosure is reasonably necessary to: (a) enforce any contracts with you; (b) respond to claims that any content violates the rights of third parties; (c) protect the rights, property or personal safety of Kibu, its agents and affiliates, its users and/or the public; and/or (d) comply with legal process (e.g. a subpoena or court order).

  • Business Transactions. In accordance with applicable legal obligations, your information may be provided to third parties in connection with a merger or acquisition (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of Kibu or our assets, or as part of a corporate reorganization or stock sale or other change in corporate control or fundamental business change, including for the purpose of determining whether to proceed or continue with such transaction or business relationship.

  • Otherwise with Your Consent or at Your Direction. In addition to the disclosures described in this Privacy Policy, we may disclose information about you with third parties whenever you consent to or direct such disclosure.

6. RETENTION OF YOUR INFORMATION

We keep your information for no longer than necessary for the purposes for which it is processed. The length of time for which we retain information depends on the purposes for which we collected and use it and/or as required to comply with applicable laws.

7. YOUR RIGHTS AND YOUR CHOICES

You have certain rights with respect to your information as further described in this section.

YOUR LEGAL RIGHTS

If you would like further information in relation to your legal rights under applicable law or would like to exercise any of them, please contact us using the information in the “Contact Us” section below at any time. Your local laws (e.g., if you are a citizen or resident of the European Economic Area or California) may permit you to request that we:

  • provide access to and/or a copy of certain information we hold about you

  • update information which is out of date or incorrect

  • delete certain information that we are holding about you

  • restrict the way that we process and disclose certain of your information

  • revoke your consent for the processing of your information

We will consider all requests and provide our response within the time period stated by applicable law and as otherwise required by applicable law. Please note, however, that certain information may be exempt from such requests in some circumstances, which may include if we need to keep processing your information for our legitimate interests or to comply with a legal obligation. We may request you provide us with information necessary to confirm your identity before responding to your request. To submit a request, please contact us using the information in the “Contact Us” section below.

As explained at the beginning of this Privacy Policy, if you are using the Kibu Platform as an Authorized User and you would like to inquire about any of the rights discussed in this section, please contact the Customer who has invited you to its Pod for assistance.

MARKETING COMMUNICATIONS

If, in accordance with applicable legal requirements, we send you marketing communications regarding our Services or the services of third parties that we believe will be interesting to you, you can ask us to stop sending such communications at any time by contacting us using the information in the “Contact Us” section below at any time. In our marketing email messages, you can also opt out by following the instructions located at the bottom of such emails. Please note that, regardless of your request, we may still use and disclose certain information as permitted by this Privacy Policy or as required by applicable law. For example, you may not opt out of certain transactional emails from us, such as those confirming your requests or providing you with updates regarding our legal terms.

8. THIRD PARTY LINKS AND FEATURES

The Services may contain links to third-party websites and features. If you choose to visit these sites and use their services, please note that we are not responsible for their content or privacy practices. The collection, use, and disclosure of your information will be subject to the privacy policies of the third-party websites, and not this Privacy Policy. We urge you to read the privacy policies of these third parties.

9. INTERNATIONAL USERS

Your information is maintained and processed by us and our third-party service providers in the United States, and may also be maintained, processed, and stored in other jurisdictions that may have different data protection laws than those in your country of residence. In the event that your information is transferred in these ways, please note that we comply with applicable legal requirements governing the transfer of information across borders. By using the Services, you agree to and acknowledge these transfers.

10. HOW WE PROTECT YOUR INFORMATION

Kibu takes a variety of technical and organizational security measures to protect the information provided to us from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. Please keep this in mind when disclosing any information to us online. If you become aware of or suspect any unauthorized use of your Kibu account, please contact us immediately using the information in the “Contact Us” section below.

11. CHANGES TO OUR PRIVACY POLICY

We reserve the right to amend this Privacy Policy at any time to reflect changes in the law, our data collection and use practices, or advances in technology. We will make the revised Privacy Policy accessible on the Services, so you should review the Privacy Policy periodically. You can know if the Privacy Policy has changed since the last time you reviewed it by checking the “Effective Date” included at the beginning of the document. If we make a material change to the Privacy Policy, you will be provided with appropriate notice in accordance with legal requirements. By continuing to use the Services, you are confirming that you have read and understood the latest version of this Privacy Policy.

12. CONTACT US

Kibu welcomes your comments and questions regarding this Privacy Policy and the collection and use of your information. If you have questions or concerns, please email us at legal@kibu.io