Privacy Policy
Last updated: July 6, 2026
KAIBA is operated by GB Open Space LLC(“we”, “us”). This policy covers three situations: you visit or use the KAIBA website and product; you run a venue and use KAIBA to answer your leads; or you are a guest messaging a venue whose front desk is powered by KAIBA.
1. If you visit our site or hold a KAIBA account
We collect what you give us: your email and password when you create an account, your venue's details when you build an agent (spaces, pricing, hours, rules), and standard technical logs (IP address, browser type) needed to run and secure the service. When paid plans are active, billing is handled by Stripe; we never store your card number. We use this information to provide the service, and for nothing else. We do not sell personal information, and we do not use your data to advertise to you.
2. If you run a venue on KAIBA
Conversations between your leads and your agent, and the contact details captured from them (names, phone numbers, emails, event details), are your data. We process it only to provide the service to you: generating replies, booking tours on your connected calendar, and showing it in your dashboard. We use trusted subprocessors to do this — Anthropic (AI replies), Supabase (database), Vercel (hosting), Twilio (SMS), Meta (Instagram messaging), Google (calendar), and Resend (email notifications) — each bound to use the data only to provide their service. We do not use your leads' data to train AI models, and we do not contact your leads for our own purposes. If you close your account, we delete or anonymize your venue's conversation data on request.
Google user data (Calendar)
When you connect your Google Calendar, we access your calendar's busy times and create, update, or delete only the tour events the agent books — solely to show real availability and put booked tours on your calendar. We do not use Google user data for advertising, we do not sell it, and humans do not read it except with your permission, for security, or to comply with law. KAIBA's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Disconnecting your calendar in Settings revokes our access; deleting your account revokes it and deletes the stored tokens.
3. If you message a KAIBA-powered venue (SMS or Instagram)
When you text a venue's number or DM its Instagram, we collect your phone number or Instagram-scoped ID, the contents of your messages, and any details you choose to share (name, email, event type, date, guest count). This is used solely to respond to your inquiry — answering questions, checking real availability, scheduling tours, and following up about your event. That is the only purpose. This applies to every venue on the platform, including 1712 Studios in Seattle, the first venue KAIBA ran.
We do not sell, rent, or share your information with third parties, and we do not use it for marketing or promotional messaging. No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with anyone.
For text messages, reply STOP at any time to opt out, or HELP for help. For Instagram, you can revoke access at any time from Instagram (Settings → Apps and websites), which removes the connection and stops any further processing. We only access conversations you start with a connected account — never your follower list, media, or anything else.
Data retention & deletion
We keep conversation data only as long as needed to assist with the inquiry and for legitimate business purposes, then delete or anonymize it. Venue owners can delete their entire account and all associated data themselves in Settings → Account — it takes effect immediately. You can also request deletion by email at the address below and we'll confirm within 30 days.
Government & public-authority requests
If a public authority requests user data from us, our policy is: (1) every request is reviewed for legal validity before any response; (2) requests we believe are unlawful or overbroad are challenged through available legal means; (3) if disclosure is legally required, we disclose only the minimum information necessary; and (4) every request, our analysis, and our response are documented and retained. We have never received such a request.
Contact
Questions about this policy, or a privacy request? Email contact@hirekaiba.com.