Privacy Policy

Last updated: June 8, 2026

Template notice: This is a starting policy. Have it reviewed by qualified legal counsel before relying on it for compliance (e.g., GDPR, CCPA).

Kasakua ("Kasakua", "we", "us") is a product of Busyaccess. This policy explains what information we collect, how we use it, and the choices you have. It covers two groups: customers (businesses with a Kasakua account) and end users (visitors who chat with a customer's widget).

1. Information we collect

Account data — name, email, business name, and authentication details you provide at sign-up.
Configuration & content — widget settings, branding, knowledge base (FAQs, documents, website content) you add.
Conversation data — messages exchanged between end users and the assistant, and any contact details an end user provides (e.g., for lead capture or handoff).
Billing data — handled by our payment processor (Stripe); we do not store full card numbers.
Usage data — basic logs and metrics needed to operate and secure the service.

2. How we use information

To provide, operate, and improve the service.
To generate AI responses using the AI provider you connect (e.g., OpenAI, Anthropic) or your n8n workflow.
To capture leads and route conversations to your team as you configure.
To process payments, prevent abuse, and provide support.

3. Sharing & subprocessors

We do not sell your data. We share it only with service providers that help us run Kasakua, including: Supabase (database & auth), AWS (hosting), Stripe (payments), and the AI provider you choose (e.g., OpenAI, Anthropic) or n8n endpoint you connect. Conversation content may be sent to your configured AI provider to generate responses.

4. Data retention

We retain account and conversation data while your account is active and as needed to provide the service. You can request deletion as described below.

5. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. Customers can request an export or deletion of their account data, and end users may contact the relevant business (the data controller for their conversations). To make a request, email privacy@kasakua.com.

6. Security

Traffic is encrypted in transit (HTTPS). Each business's data is isolated to its own account. No method of transmission or storage is 100% secure, but we work to protect your information.

7. Cookies

We use essential cookies/local storage to keep you signed in and to operate the widget. We do not use third-party advertising cookies.

8. Children

Kasakua is not directed to children under 13, and we do not knowingly collect their personal data.

9. Changes

We may update this policy. Material changes will be reflected by the "Last updated" date above.

10. Contact

Questions? Email privacy@kasakua.com.