Privacy Policy

Effective Date: April 9, 2026

Kasisto, Inc. (“Kasisto,” “Company,” “we,” “us,” or “our”) operates artificial intelligence software platforms, conversational AI technologies, and related digital services (collectively, the “Services”).

This Privacy Policy describes how we collect, use, disclose, and protect Personal Information when individuals access or interact with our Services, including:

• Kasisto websites
• Kasisto AI software platforms
• Kasisto mobile and web applications
• AI conversational systems powered by Kasisto
• Communications with Kasisto

By accessing or using the Services, you acknowledge that you have read and understand this Privacy Policy.

Notice at Collection.
We collect Personal Information only as reasonably necessary to operate our Services and business operations.

Categories of Personal Information Collected In the preceding twelve (12) months, Kasisto may have collected:

• Identifiers – name, email address, IP address, device identifiers
• Commercial information – account details, subscriptions, transaction records
• Internet activity – usage logs, browsing activity
• Device information – operating system, device type, browser type
• Geolocation data – approximate location derived from IP address
• Professional information – employer name, job title, business contact information
• Inferences – analytics insights derived from usage patterns
• Sensitive Personal Information – authentication credentials or security information

Sources of Personal Information We collect information from:

• users directly
• interactions with our Services
• automated technologies such as cookies
• service providers and enterprise customers
• authorized third-party integrations
• publicly available sources

Purposes for Collecting Personal Information Personal Information may be used to:

• operate and maintain the Services
• authenticate users
• process transactions
• provide customer support
• improve system functionality
• perform analytics and research
• personalize user experiences
• prevent fraud or misuse
• comply with legal obligations
• enforce contractual rights

Disclosure of Personal Information In the preceding 12 months, we may have disclosed Personal Information to:

• service providers
• cloud infrastructure providers
• analytics vendors
• cybersecurity providers
• professional advisors
• corporate affiliates

Sale or Sharing of Personal Information Kasisto does not sell Personal Information for monetary compensation. Kasisto does not knowingly sell or share Personal Information of individuals under 16.

Use of Sensitive Personal Information Sensitive Personal Information is used only where necessary for:

• account authentication
• fraud prevention
• maintaining service security

Data Retention Personal Information is retained only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, and enforce agreements.

AI Platform Data Processing Kasisto provides AI technologies to enterprise customers. In many cases Kasisto processes data as a service provider or processor on behalf of those customers. Enterprise customers determine how end‑user data is collected and used.

Cookies and Tracking Technologies We use cookies and similar technologies to maintain sessions, analyze usage, and improve service performance.

Data Security Kasisto maintains administrative, technical, and organizational safeguards including encryption, access controls, monitoring systems, and vendor security reviews.

California Privacy Rights California residents may have the right to:

• know what Personal Information we collect
• request deletion of Personal Information
• request correction of inaccurate information
• opt out of sale or sharing of Personal Information
• limit use of Sensitive Personal Information
• receive non‑discriminatory treatment for exercising rights

Exercising Privacy Rights Requests may be submitted by emailing: info@kasisto.com

Authorized Agents California residents may designate an authorized agent to submit privacy requests on their behalf subject to verification requirements.

Children’s Privacy Our Services are not directed to children under 13 and we do not knowingly collect Personal Information from children under 13.

International Data Transfers Personal Information may be transferred to and processed in the United States or other jurisdictions where our service providers operate.

Third‑Party Services Our Services may link to third‑party websites or services. Kasisto is not responsible for the privacy practices of those third parties.

Changes to this Privacy Policy Kasisto may update this Privacy Policy periodically. Updated versions will include a revised effective date.

Contact Information Kasisto, Inc.

Email: info@kasisto.com