Privacy Policy

Effective Date: April 21, 2026  |  Last Updated: April 21, 2026  |  kaido.media

1. Introduction

Kaido Media ("we," "us," or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, when and with whom we share it, and what rights you have in relation to it. This policy applies to all information collected through our Platform at https://kaido.media and any related services, tools, or communications.

Please read this policy carefully. By using our Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree, you should discontinue use of the Platform.

2. Information We Collect

2.1 Information You Provide Directly

• Account and registration data: Full name, email address, phone number, company/brokerage name, job title, real estate license number, and MLS ID.
• Payment and billing data: Billing address, subscription plan details. Card data is processed directly by our PCI-DSS-compliant payment processor; we do not store raw payment card numbers.
• User Content: All content you upload or submit to the Platform, including property images, listing data, branding assets, and other files (see Section 5 of Terms for content warranties).
• Professional credentials: Real estate license verification data if collected for compliance purposes.

2.2 Information Collected Automatically

• Device and browser data: IP address, browser type and version, operating system, device type, screen resolution, and language settings.
• Usage and analytics data: Pages visited, features used, session duration, click paths, navigation behavior, and time-on-feature metrics.
• API and technical logs: API endpoint calls, timestamps, response codes, and error logs.
• Performance data: Load times, crash reports, and diagnostic data.
• Cookie and tracking data: Data collected via cookies and similar technologies.

2.3 Information from Third Parties

• Single sign-on providers: If you use Google OAuth or similar for login, we receive basic profile data (name, email, profile photo) from that provider.
• CRM and MLS integrations: If you connect third-party platforms, we receive the data you authorize those platforms to share with us.
• Payment processors: We receive payment status, transaction IDs, and limited billing verification data.
• Advertising platforms: If you arrive via a paid advertisement, we may receive campaign attribution data from ad networks.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service provision and account management: To create and manage your account, process payments, deliver Platform features, and provide technical support.
• AI content generation: To power the Platform's AI content tools using the data and prompts you provide (your inputs are used to generate your outputs; they are not used to train our models without separate consent).
• Personalization: To customize your Platform experience, tailor recommendations, and remember your preferences.
• Communications: To send you transactional notifications (receipts, account alerts, security notifications), product updates, and, with your consent, marketing communications. You can opt out of marketing emails at any time.
• Analytics and product improvement: To analyze usage patterns, identify bugs, test new features, and improve the Platform.
• Security and fraud prevention: To detect, investigate, and respond to unauthorized access, account abuse, IP infringement claims, and violations of our Terms.
• Legal compliance: To comply with applicable laws, respond to lawful subpoenas or government requests, and enforce our Terms of Service.
• AI model training (strictly limited): We do not use identifiable User Content to train AI models without your explicit, separately obtained written consent. Aggregated, anonymized usage data may be used for internal model evaluation.

4. Legal Basis for Processing (Applicable Jurisdictions)

For users in the EEA, UK, Switzerland, and other jurisdictions requiring a legal basis for data processing, we rely on:

• Contractual necessity: Processing required to deliver the Platform under our agreement with you (Articles 6(1)(b) GDPR).
• Legitimate interests: Platform security, fraud prevention, business analytics, and service improvement, where such interests are not overridden by your rights (Article 6(1)(f) GDPR).
• Legal obligation: Compliance with applicable laws and regulatory requirements (Article 6(1)(c) GDPR).
• Consent: Marketing communications and non-essential cookies, which you may withdraw at any time (Article 6(1)(a) GDPR).

5. Sharing of Your Information

We do not sell your personal information to third parties. We may share information in the following circumstances:

• Service providers: We share data with vetted, contractually bound vendors who assist in operating the Platform, including: cloud hosting providers, AI API vendors (e.g., OpenAI, Anthropic, or equivalent), payment processors, email service providers, analytics tools, and customer support platforms. All service providers are bound by data processing agreements.
• Professional advisors: We may share information with attorneys, accountants, and auditors under binding confidentiality obligations.
• Legal requirements: We may disclose information to law enforcement, courts, or regulatory authorities where required by law, court order, or to protect our legal rights.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of assets, personal information may be transferred to a successor entity. We will provide advance notice and, where required, obtain consent before such transfer.
• With your consent: We may share your information with third parties for other purposes with your explicit, informed consent.

6. Data Retention

We retain personal data for as long as your account is active or as necessary to provide the Service. Upon account closure, we will delete or anonymize your personal data within 90 days, subject to the following exceptions:

• Legal hold: Data subject to active litigation, regulatory investigation, or legal preservation obligation will be retained until such obligation expires.
• Financial records: Transaction records may be retained for up to 7 years for tax and accounting compliance.
• Fraud prevention: Data needed for ongoing fraud prevention may be retained in an anonymized form.
• Backups: Deleted data may persist in encrypted backups for up to 180 days before being purged from backup systems.

7. Data Security

We implement industry-standard technical and organizational security measures to protect your personal data, including:

• Encryption in transit: All data transmitted between your browser and our servers is protected using TLS 1.2 or higher.
• Encryption at rest: Stored data is encrypted using AES-256.
• Access controls: Role-based access controls restrict data access to authorized personnel only.
• Multi-factor authentication (MFA): Required for all administrative and privileged access to our systems.
• Regular security assessments: We conduct periodic penetration testing, vulnerability scanning, and security audits.
• Incident response: We maintain a documented incident response procedure for data breaches.

No system is completely impenetrable. If a breach occurs that poses a significant risk to your data, we will notify you as required by applicable law.

8. International Data Transfers

Our infrastructure and service providers may be based in the United States or other countries outside your jurisdiction. If you access the Platform from the EEA, UK, or other regions with data transfer restrictions, your data may be transferred internationally. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent mechanisms under applicable law.

9. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Obtain a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data (subject to legal exceptions).
• Restriction: Request that we limit how we process your personal data in certain circumstances.
• Portability: Receive your personal data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests or for direct marketing purposes.
• Consent withdrawal: Withdraw any consent you have given at any time, without affecting prior lawful processing.

To exercise these rights, contact us at kaido.media/contact-us-form. We will acknowledge your request within 72 hours and respond substantively within 30 days (or as required by your applicable law). Identity verification may be required before we process certain requests.

10. Children's Privacy

The Platform is not directed to individuals under the age of 18 and we do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at kaido.media/contact-us-form and we will take prompt steps to delete such information.

11. Updates to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through a prominent notice on the Platform at least 14 days before the change takes effect. The "Last Updated" date at the top of this policy reflects the most recent revision. Continued use of the Platform after the effective date of changes constitutes acceptance of the updated policy.

12. Contact

Privacy Team: kaido.media/contact-us-form  |  kaido.media/privacy-policy

---

Last updated: April 21, 2026