Privacy Policy

Who I am and what this covers

Kindwork is done-for-you sphere management for solo United States real estate agents. An assistant named Kit runs the client's outreach and keeps their contact records current, and the client approves the work from their phone over Telegram. I run all of the underlying infrastructure. This policy covers two groups of people:

• Website visitors. Anyone who browses getkindwork.com, books a call, or contacts me.
• Clients. Real estate professionals who sign up for the Kindwork service, connect their accounts, and let me run their sphere.

Where a section applies to only one group, I say so.

Information I collect

From website visitors

• Information you give me. When you book a call or email me, I receive your name, email address, any scheduling details, and whatever you choose to write. Bookings are handled by Calendly, a third-party scheduling service.
• Information collected automatically. Like most websites, my hosting provider records basic technical data such as your IP address, browser type, device information, referring page, and the pages you view. This helps keep the site running and secure.
• Visitor analytics. The site runs a third-party visitor-analytics pixel (Leadsy) that helps me understand which businesses and visitors are interested in the service. See Cookies and tracking for what it does and how to opt out.

From clients using the service

• Account and setup information. Your name, business details, billing information, and the preferences you share when I set up your assistant.
• Your sphere and CRM data. The contacts, notes, relationship details, transaction information, voice notes, and business-card photos you provide so Kit can manage your outreach. This may include personal information about your own contacts, which you are responsible for having the right to share with me.
• Google account data. If you connect a Google account, the service accesses limited Google data through the permissions you grant. This is covered in detail in the next section.
• Messages with Kit. The text, voice, and image messages you exchange with your assistant over Telegram, and the approvals you give.

Google user data and Limited Use

This section explains exactly how the Kindwork service accesses, uses, stores, and shares data from your Google account. It applies to clients who choose to connect Google.

What you authorize, and why

When you connect Google, you are shown Google's own consent screen and asked to grant these permissions:

• Send email (gmail.send). Send the emails you have reviewed and approved, from your own address. This does not grant access to read your mailbox.
• Create drafts (gmail.compose). Create draft emails for you to review before anything is sent, such as a new-client intake message. Drafts stay in your account until you approve them.
• Manage calendar events (calendar.events). Create, update, read, and delete calendar events when you ask, and read upcoming events so your assistant can remind you of them.

How your Google data is accessed and stored

• Sign-in and tokens. You sign in with Google directly. I never see or store your Google password. The secure access tokens that let the service act on your behalf are held and refreshed by Nango, a third-party authorization provider, and are not stored on my website.
• Where content lives. The records the service works with, such as your contacts and a log of the emails Kit sends, are stored in Airtable, which I administer on your behalf. Calendar events remain in your Google Calendar.
• How it is used. Google data is used only to provide the features you see: sending the emails you approve, keeping your calendar current, and reminding you of upcoming events. It is not used for any unrelated purpose.

Human access

Kindwork is a done-for-you service that you engage me to operate on your behalf, so a human (me) does run and support the system. My access to your data is limited to what is necessary to set up, operate, support, and troubleshoot the service you asked me to run. I do not read your Google data for any other purpose, I do not sell it, and I do not use it to serve advertising or to train generalized AI models.

Limited Use commitment

Kindwork's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can review or revoke the service's access at any time from your Google Account permissions page. You can also ask me to disconnect and delete your data by contacting me at the address below.

How I use information

I use the information described above to:

• Provide, operate, and support the service and your assistant.
• Send the outreach and other emails you approve, from your address, and keep your calendar and contact records current.
• Set up your account, take payment, and provide receipts.
• Respond to your questions and provide support.
• Keep the website and service secure, prevent abuse, and fix problems.
• Understand interest in the service and improve how I explain and deliver it.
• Comply with legal obligations.

How I share information

I do not sell your personal information. I share information only in the ways described here.

Service providers

I rely on a small set of trusted providers to run the service. They may process your information only to perform work for me and under obligations to protect it. The main ones are:

• Nango holds and refreshes the secure authorization tokens for your connected accounts.
• Google provides the Gmail and Calendar APIs the service calls on your behalf.
• Airtable stores your contact records and activity logs.
• n8n is the automation platform that runs your assistant's workflows.
• Telegram is the messaging app you use to talk to Kit and approve work.
• AI model providers (through OpenRouter, with providers that currently include Anthropic, OpenAI, and Google) draft and process content so Kit can do its job. See AI and automated processing.
• Stripe processes payments. Your full card details are handled by Stripe, not stored by me.
• Calendly handles call bookings from the website.
• Vercel hosts the website.

Legal and safety

I may disclose information if required by law, subpoena, or legal process, or where I believe in good faith that disclosure is necessary to protect rights, safety, or property, or to investigate fraud or abuse.

Business transfers

If the business is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy. For Google user data specifically, any such transfer will comply with the Limited Use requirements described above.

AI and automated processing

Kit uses AI models to do its work, such as drafting outreach emails in your voice, transcribing your voice notes, reading a business card photo, and preparing your daily summaries. To do this, relevant content is sent to the AI providers listed above for processing. I take steps intended to prevent your data from being used to train these providers' general models, and I do not use your Google data to train AI models. AI-generated drafts are prepared for your review, and you approve what gets sent.

Cookies and tracking

The website uses a limited set of cookies and similar technologies, including a third-party visitor-analytics pixel. It does not use advertising or retargeting cookies. For the full list and your choices, see the Cookie and Tracking Notice.

How long I keep information

I keep information for as long as I need it to provide the service to you, and after that only as long as reasonably necessary for legitimate business or legal reasons, such as records of payment. When you stop being a client, I will make your data available for export and then delete it within a reasonable period on request. Website visitor logs and analytics data are kept for a limited time in the ordinary course.

How I protect information

I use reasonable technical and organizational measures to protect information, including reputable providers, access controls, and keeping credentials out of stored records. You sign in to Google directly, so I never handle your password, and connection tokens are held by a specialist provider. No method of transmission or storage is completely secure, so I cannot guarantee absolute security.

Your data: ownership, portability, and exit

You own your data. I run the infrastructure that operates your service, and the contacts, notes, and records you put into it remain yours. There is no long-term lock-in. You can ask for an export of your data in a common format at any time, and when you leave I will provide your data for export and then delete it from the systems I administer, keeping only what I am required to retain.

Your privacy rights

Depending on where you live, you may have rights over your personal information, including the right to access the information I hold about you, to correct it, to delete it, and to opt out of certain uses. To exercise any of these, contact me using the details at the end of this policy. I will not discriminate against you for exercising your rights.

Your California privacy choices

If you are a California resident, the California Consumer Privacy Act, as amended, may give you additional rights. This section explains my practices and how to exercise those rights.

Categories of information

In the past twelve months, I have collected these categories of personal information: identifiers (such as name, email address, and IP address); commercial information (such as the service you purchased and billing details); internet and network activity (such as how you use the website); professional information (such as your real estate business details); and, for clients, the contact and relationship data you place into the service. I collect this from you directly, from your use of the website, and from the accounts and providers you connect.

How I use and disclose it

I use these categories for the business purposes described in How I use information, and I disclose them to the service providers described in How I share information so they can perform services for me.

Sale and sharing

I do not sell your personal information for money. The website's third-party visitor-analytics pixel may involve disclosing online identifiers in a way that some laws treat as "sharing" or a "sale." You can opt out. I honor the Global Privacy Control (GPC) browser signal as a request to opt out of this activity, and you can disable the pixel using the methods in the Cookie and Tracking Notice or by contacting me. I do not knowingly sell or share the personal information of anyone under 16.

How to exercise your rights

California residents may request to know, delete, or correct their personal information, opt out of sale or sharing, and limit the use of sensitive personal information. You can submit a request in either of two ways: email me at ben@getkindwork.com with "Privacy Request" in the subject, or write to me at the mailing address below. I will verify your request and respond as required by law. You may use an authorized agent to submit a request on your behalf.

Business outreach and email

I contact real estate professionals about the service using business contact information, including details from third-party data providers. If you receive an email from me, you can opt out at any time by using the unsubscribe link or by replying to ask me to stop, and I will honor it. Every commercial email includes a valid mailing address.

Children's privacy

Kindwork is a business service and is not directed to children. I do not knowingly collect personal information from anyone under 18. If you believe a child has provided information to me, contact me and I will delete it.

A United States service

Kindwork is based in and operated from the United States, and the service is intended for United States clients. If you access the website or service from outside the United States, you understand your information will be handled in the United States.

Changes to this policy

I may update this policy from time to time. When I do, I will change the "Updated" date at the top and, for material changes, take reasonable steps to let clients know. Your continued use of the website or service after an update means you accept the revised policy.

How to contact me

For any question about this policy or your information, or to make a privacy request, contact:

• Kindwork (a California sole proprietorship)
• Email: ben@getkindwork.com
• Mailing address: 7 South School Street, Apt 204, Lodi, CA 95240