Privacy Policy

This Privacy Policy explains how Kinn, operated by Exii ("Kinn", "we", "us"), collects, uses, and protects information when you use our relationship-mapping product (the "Service"). We follow the principle of data minimization: we aim to collect only what we need to provide the Service.

1. Information we collect

Information you give us

• Account and waitlist details — such as your name, email address, and any goal or context you share when signing up or joining the waitlist.
• Goals and notes — the goals you set and context you enter to help Kinn find relevant people and organizations.
• Support and contact messages — information you send when you contact us.

Information from sources you connect

When you connect a provider, we access and store a minimized set of relationship information:

• Email — relationship and contact information from the email accounts you connect, such as who you correspond with. We do not store the content of your emails for this purpose.
• Professional network — connection and relationship information from professional networks you link.
• Professional and organization details — information about people and organizations, such as role, employer, and industry, used to help identify who is relevant to your goals.

Information we collect automatically

• Usage and device data — such as log data, IP address, browser type, and interactions with the Service, used to operate, secure, and improve it.
• Cookies and similar technologies — see our Cookie Policy.

2. How we use information

• To provide, maintain, and improve the Service;
• to map relationships you already have and surface warm paths, relevant people, and organizations for your goals;
• to authenticate you and secure your account and data;
• to communicate with you about the Service, including launch access;
• to prevent fraud and abuse, enforce our Terms, and comply with legal obligations.

We do not sell your personal information.

3. Legal bases (EEA/UK)

Where the UK GDPR or EU GDPR applies, we process personal data on the following bases: performance of a contract (to provide the Service); your consent (for example, connecting a provider or optional cookies); our legitimate interests (to secure, operate, and improve the Service); and compliance with legal obligations. Where we rely on consent, you can withdraw it at any time.

4. How we share information

We share information only as needed:

• Service providers — vendors that provide infrastructure, hosting, authentication, and related services and process data on our behalf under appropriate terms.
• Legal and safety — where required by law, to respond to lawful requests, or to protect the rights, safety, and security of Kinn, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. Data retention

We retain personal data for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with legal obligations, resolve disputes, and enforce our agreements.

6. Disconnecting and deleting

Disconnecting a source stops us from accessing it going forward, but information already imported is retained unless you delete it.

Deleting your account removes your account data. We may retain limited information where required by law.

7. Security

We use technical and organizational measures to protect your data, including access controls that keep each account's data separate. Credentials for connected sources are stored securely and are not readable by other users. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing or withdraw consent. To exercise these rights, contact us using the details below. You also have the right to complain to your local data protection authority.

9. International transfers

We and our providers may process data in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) for international transfers.

10. Children

The Service is not directed to children under 18, and we do not knowingly collect personal data from them.

11. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you. The "last updated" date above reflects the current version.

12. Contact

Questions or requests about your data? Reach us at hello@kinn.co or through our contact page.