Privacy Policy

QParticle LLC, doing business as Kyndir (“Kyndir”, “we”, “us”), provides a nurture agent for business brokers and M&A advisors at kyndir.com and in the Kyndir application (together, the “Service”). This policy covers the website and the Service.

Questions about this policy go to privacy@kyndir.com.

If you connect a Google account, Kyndir requests access through Google OAuth. This section describes that access in full. We follow it exactly, and it is the part of this policy that Google reviews.

What we request, and what we do with it

Why

We use your Google data for the features you see in the product, and for nothing else:

• To find the seller leads in your inbox who stopped replying, and to skip buyers, brokers, and automated mail.
• To build one record per seller with the facts your conversations state, each fact tied to the message it came from.
• To draft a personal follow-up for each quiet seller, using the history of that conversation.
• To answer questions you ask the chat assistant about your pipeline. An answer that reads your mailbox is shown to you alone.
• To save a draft to your Drafts folder, and to send it when you click Send.

Limited Use disclosure

Kyndir’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain terms, this is what Limited Use requires and what we commit to:

• We only use Google user data to provide or improve the user-facing features described above.
• We do not transfer Google user data to anyone except the providers that run those features (section 5), for security, or to comply with law.
• We do not use Google user data for advertising of any kind, and we do not sell it.
• No human at Kyndir reads your email, except with your explicit permission (for example, a support request), for security or abuse investigation, to comply with law, or on data we have aggregated and anonymized for internal operations.

AI models

Kyndir does not use data obtained through Google Workspace APIs to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models. Kyndir uses OpenAI models to read your mail, draft follow-ups, and answer chat questions. Every request is sent with provider-side storage turned off, so OpenAI does not keep your content to train its models. Only the bounded context a task needs is sent, never your whole mailbox.

Revoking access

You can disconnect Google from Settings inside Kyndir at any time, or revoke Kyndir’s access at myaccount.google.com/permissions. When you disconnect, Kyndir stops reading your mailbox and releases its access token. Drafts already in your Drafts folder stay in your account, under your control. The seller records and messages Kyndir already kept stay in your firm’s workspace until you delete them; section 6 explains how.

If you connect Outlook, Kyndir requests the equivalent permissions through Microsoft: read access to mail in your chosen window, write access to create drafts, send when you click Send, and read-only access to your Outlook calendar. The same uses, the same limits, and the same AI commitments apply as for Google data. Junk, deleted items, drafts, and the outbox are never read.

Fathom and Fireflies are optional note-takers. If you connect one, Kyndir reads the recordings’ summaries, transcripts, and action items to add what was said on a call to the seller’s record. Kyndir reads one mailbox per person, and does not connect to a CRM today.

• Account information. Your name and work email, through Clerk, our sign-in provider, and the firm you belong to with your role in it.
• Your firm. What you sell, who you serve, how you write, your email signatures, and the documents and spreadsheets you upload to give Kyndir context. When you ask Kyndir to research your firm, it reads your public website.
• Usage information. Which drafts you open, edit, send, and rate, your chat questions, and the credits each task used, so Kyndir can learn your preferences and so we can fix what is not working.
• Website analytics. kyndir.com uses Google Analytics to count visits and see which pages are read. You can block analytics cookies in your browser.
• Demo bookings. If you book a demo, the scheduling provider (Calendly) collects your name, email, and the time you choose under its own privacy policy.
• Correspondence. Anything you send us by email.

We share data only with the providers we need to run the Service, under contracts that limit them to that purpose. We do not sell personal information and we do not share it with data brokers or advertisers.

We may also disclose data when the law requires it, to protect the rights or safety of Kyndir or our users, or as part of a merger or acquisition, in which case this policy continues to apply to your data.

What we keep

• The messages that support a seller record: sender, recipients, subject, date, and body. The message's HTML and inline images are kept the first time you open it in Kyndir.
• Mail that a scan judged not to be about a sale: only its id and sent date, never its content, so the next scan can skip it.
• The facts, drafts, calendar entries, meeting notes, and documents Kyndir built or you uploaded, each tied to the firm.
• Your firm's workspace is shared by its members. Raw mailbox content, chat answers that read mail, and calendar entries are private to the person whose account they came from.

Where and how

Data is stored with Convex on servers in the United States. Data is encrypted in transit with TLS and at rest by our hosting provider. Access to production systems is limited to the people who operate the Service, and email content is never written to logs. Each firm’s data is isolated by a tenant key that every read and write checks.

How long we keep it

• While your firm exists. Kyndir keeps what it built for as long as your firm has a workspace, so drafts can use the full history of a conversation.
• Start over. An admin can wipe everything the scans produced from Settings, and keep the firm, its members, and its settings.
• Delete the firm. An admin can delete the firm from Settings by typing its name. Kyndir revokes every connected account, drops the firm’s sign-in organization, and removes every row and file the firm owned. Deletion starts at once and finishes within 30 days.
• Backups. Removed from our hosting provider’s backups within 90 days.
• Account information. Kept for as long as you have an account, then deleted within 30 days, except records we must keep for tax or legal reasons.

Asking us to delete

If you cannot use the options above, email privacy@kyndir.com from the address on your account. We confirm deletion in writing.

Wherever you are, you can ask us to show you the personal information we hold about you, correct it, delete it, or export it. Residents of California, the European Economic Area, the United Kingdom, and other regions with privacy laws have these rights by statute, plus the right to object to certain processing and the right to complain to a regulator. We answer every request within 30 days. We do not discriminate against anyone who exercises these rights.

• Your contacts’ data. The seller leads in your inbox are your contacts. You are the controller of that data and Kyndir processes it on your instructions. You are responsible for having the right to use it.
• Children. The Service is for business use. We do not knowingly collect data from anyone under 18.
• International transfers. If you use Kyndir from outside the country where our servers are, your data is transferred there. We use standard contractual safeguards where the law requires them.
• Changes. If we change how we use Google user data or make any other material change, we will notify you by email before the change takes effect and update the date at the top of this page.

QParticle LLC, doing business as Kyndir
3960 W. Point Loma Blvd, Ste H354
San Diego, CA 92110, United States
privacy@kyndir.com