Privacy Policy

Last Updated: November 24, 2025

This Privacy Policy explains how KYTH LLC ("Kyth," "we," "us," or "our") collects, uses, and shares personal information when you visit our websites, use our platform and mobile applications, or otherwise interact with us (together, the "Services").

This Privacy Policy is incorporated by reference into our Kyth Customer Agreement.

1. Who We Are and Contact Details

KYTH LLC
1201 Peachtree Street, N.E., Suite 100
Atlanta, GA 30361, USA
Email: hello@kyth.ai

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, Kyth is the "controller" of your personal data when we decide how and why it is processed in connection with our Services (subject to any DPA where we act as processor on behalf of a Customer).

2. Information We Collect

We collect the following categories of information:

Account & Contact Information

Name, email address, organization, role, and password. Billing contact information and subscription details.

Customer Data / Inputs

Content you upload or provide to the Services (e.g., client lists, candidate lists, spreadsheets, notes, and any other Customer Data you or your organization submit to Kyth Chat or other tools).

Usage & Log Data

IP address, device and browser characteristics, operating system, pages viewed, time spent, links clicked, and other usage metrics; log data about interactions with Kyth Chat (e.g., timestamps, token counts, tools called).

Cookies & Similar Technologies

Cookies, pixels, and similar technologies used for authentication, preferences, analytics, and security.

Public / Third-Party Data

Publicly available and licensed data about attorneys, firms, jobs, and related market information, collected from third-party sources and integrated into the Kyth platform.

Support & Communications

Information you provide when contacting support, responding to surveys, or participating in beta programs.

3. How We Use Personal Information

We use personal information for the following purposes:

  • Providing the Services: To create and manage accounts, authenticate users, provide Kyth data and Kyth Chat features, and maintain the platform.
  • Personalization & Product Improvement: To understand usage patterns and improve search relevance, user experience, workflows, and AI performance (using Usage Data as aggregated / de-identified analytics).
  • Billing & Administration: To process payments, send invoices, and manage subscriptions.
  • Security & Abuse Prevention: To detect, prevent, and respond to security incidents, fraud, and misuse.
  • Legal & Compliance: To comply with applicable laws, respond to lawful requests, and enforce our agreements.
  • Marketing & Communications: To send information about new features, updates, and events, where permitted by law. You can opt out of marketing communications at any time.

4. Legal Bases for Processing (EEA/UK)

Where GDPR or UK GDPR applies, we rely on the following legal bases:

  • Contractual necessity: To provide and operate the Services and fulfill our agreements with you or your organization.
  • Legitimate interests: To improve and secure the Services, understand usage, and market to existing customers, where those interests are not overridden by your rights.
  • Consent: For certain cookies, marketing communications to non-customers, or optional features where we ask for your consent.
  • Legal obligations: To comply with applicable laws, regulations, or court orders.

5. How We Share Information

We may share personal information with:

  • Service providers / sub-processors who help us operate the Services (e.g., cloud hosting, analytics, payment processing, and AI model providers).
  • Your organization, if you use a business email or are part of an enterprise subscription (administrators may access usage information and some Customer Data).
  • Professional advisers, such as lawyers, auditors, and insurers, under confidentiality obligations.
  • Government authorities, where required by law or legal process.
  • Business transferees, in connection with a merger, acquisition, financing, or sale of all or part of our business.

We do not sell personal information in the sense of "selling" under CCPA/CPRA; nor do we rent or share Customer Data or Kyth Prompts for unrelated advertising.

6. International Transfers

Kyth is headquartered in the United States, and personal information may be stored or processed in the U.S. or other countries where we or our service providers operate. Where required, we rely on appropriate safeguards for international transfers, such as:

  • Standard Contractual Clauses adopted by the European Commission; and/or
  • Other legally recognized transfer mechanisms.

Details of our sub-processors and transfer mechanisms are available in our Trust Center: https://trust.delve.co/kyth.

7. Security and Compliance

Kyth is GDPR-compliant and maintains administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of personal data, aligned with SOC 2 Type II controls. We adhere to applicable data protection regulations and industry best practices. No system can be 100% secure, but we continuously improve our security practices and monitor for vulnerabilities.

GDPR Monitored by Delve

8. Data Retention

We retain personal information:

  • For as long as you have an active account;
  • For a reasonable period thereafter for backup, audit, and legal purposes; and
  • As required by law.

When a Customer terminates its subscription, we typically retain Customer Data in backups for up to 90 days, and may retain certain records longer for legal or accounting reasons, as set out in the Kyth Customer Agreement.

9. Your Rights

Depending on your location, you may have rights to:

  • Access and obtain a copy of your personal data;
  • Request correction of inaccurate or incomplete data;
  • Request deletion ("erasure") of your data;
  • Object to or request restriction of certain processing;
  • Request data portability;
  • Withdraw consent where processing is based on consent.

To exercise these rights, contact us at hello@kyth.ai. We may need to verify your identity. You also have the right to lodge a complaint with your local data protection authority.

10. Cookies and Tracking

We use cookies and similar technologies for authentication, preferences, analytics, and security. You can manage cookies through your browser settings and (where implemented) our cookie banner or preference center.

11. Age Eligibility

Our Services are intended for users 18 years of age and older. We do not knowingly collect personal information from individuals under 18.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-product notice. Continued use of the Services after changes become effective constitutes your acceptance of the revised Policy.

Questions

For questions about this Privacy Policy, please contact us at hello@kyth.ai.