Privacy Policy

Policy KVC-PRIV-001 · Version 1.2 · Effective November 7, 2026

1. Purpose & Scope

This Privacy Policy explains how Kairovant Venture Capital, LLC, a California limited liability company ("Kairovant", "we", "us"), collects, uses, shares and protects personal information, how long we keep it, and the choices and rights people have.

It applies to:

• visitors to Kairovant websites and people who contact us;
• founders and companies who send us information about their business, directly or through a partner;
• users of Kairovant OS, our software service that helps angel groups and other investors receive, organize and screen information about private companies (the "Service"), including the members of a subscribing organization ("Customer") and founders who submit through a Customer's link ("Submitters");
• people named in materials submitted to us or to the Service, such as company team members.

Two roles in Kairovant OS. For the content a Customer and its Submitters put into the Service ("Customer Content"), we act as the Customer's service provider (a "processor" under European law): we process it only on the Customer's instructions and our Terms of Service. For everything else in this policy, including account, billing, website and support information, and any submission shared with Kairovant, we decide how it is used and act as a "business" or "controller".

2. Information We Collect

We collect only what we need. We do not ask for, and our systems are designed not to use, sensitive characteristics such as race, ethnicity, religion, health, sexual orientation, citizenship or immigration status, or biometric information.

Under California law these are identifiers, commercial information, professional information, internet activity, and inferences limited to the screening signals described in section 4. The only sensitive personal information we handle is sign-in credentials, used only to sign you in.

3. How We Use Information

4. Artificial Intelligence & Automated Processing

Kairovant OS uses AI to read submitted materials and produce screening signals, summaries, open questions and evidence citations. We limit it as follows:

• Assessment only. Outputs are signals, not investment advice or recommendations. A person makes every decision about any company or founder. Our systems make no decision on their own that has legal or similarly significant effects on anyone.
• Only the submitted materials. Each screening uses only the materials submitted to that Customer, in that Customer's segregated store. One Customer's content is never used to screen another Customer's companies.
• No protected characteristics. We do not use or infer age, gender, race, ethnicity, nationality, religion, disability, health, family status or appearance.
• No biometrics. No face or voice recognition, voiceprints, or inference of emotion or personality. If a founder provides a recording with consent, only its transcript is used.
• Consent for extra sources. Where we would use information that needs a founder's consent, such as contacting references or using a recording, we ask the founder directly. Declining does not count against them.
• Human review and correction. A founder can ask to see the information held about them and have errors corrected (section 9).

AI outputs can be incomplete or wrong and are labeled as AI-assisted wherever they appear.

5. How We Share Information

Within a Customer's group. Customer Content is visible to the Customer's authorized users according to the roles its administrators set. It is never visible to other Customers.

Service providers. We use a small number of providers, each under a written contract with confidentiality and security commitments, and each processing information only to provide its service to us.

We keep this list current and add a provider to it before that provider receives Customer Content.

Sharing a submission with Kairovant (opt-in). When submitting a company through Kairovant OS, a Submitter may tick a box allowing Kairovant to review that company for our own investment consideration. The box is never pre-ticked, a Customer can switch the option off, and the Submitter can withdraw consent at any time. If the box is not ticked, our investing activities do not receive or use that submission.

Other disclosures. We may disclose information when the law or valid legal process requires it, to protect the rights, safety or property of Kairovant, our users or others, or to a successor in a merger, acquisition or sale of the relevant business, which remains bound by this policy for information already collected. We do not share personal information with advertisers or data brokers.

6. Google Sign-In & Google User Data

If you choose "Sign in with Google", we request only the basic scopes openid, email and profile. Through them we receive your Google account identifier, name, email address, whether the email is verified, and a link to your profile picture. We do not request access to Gmail, Google Drive, Calendar, Contacts or any other Google service.

• Use: only to sign you in, create and keep your account, and show your name in the Service.
• Storage: your Google identifier, name and email are stored with your account by our sign-in provider (WorkOS) and in our user records. We do not store Google passwords or Google access tokens.
• Sharing: only with the service providers in section 5 that run sign-in and hosting.
• Deletion: removed when your account is deleted. You can also remove Kairovant's access at any time in your Google Account settings.

Kairovant's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not use it to train AI models, and do not let people read it except as needed for security, legal compliance or with your agreement.

7. Retention

We keep personal information only as long as needed for its purpose, under Kairovant's records retention schedule (RET-PLT-001). Deletion is automatic wherever possible, and backup copies expire on a rolling basis within 35 days.

A legal hold or an open dispute can extend these periods, and only for that purpose.

8. Security & Incident Response

We protect information with safeguards suited to its sensitivity, including a segregated database and file store for each Customer; encryption in transit and at rest; role-based access, short sign-in sessions, passkeys and optional two-step verification; no routine Kairovant staff access to Customer Content (access only for support the Customer requests, for security, or as the law requires, and recorded); file checks, rate limits and monitoring.

No system is perfectly secure. If an incident affects your personal information, we will notify you, and the authorities where required, within the time the law requires. Report security concerns to kos-security@kairovant.com.

9. Your Rights & Choices

We give everyone the same rights, wherever they live. In California and other US states with privacy laws, the European Economic Area, the United Kingdom and Switzerland, many of these are also legal rights.

• Know and access the personal information we hold about you, and get a copy in a portable format.
• Correct inaccurate information.
• Delete your information, subject to what the law requires us to keep.
• Withdraw consent at any time, for example to sharing a submission with Kairovant or to use of a recording. This does not affect processing already done.
• Object to or restrict processing based on our legitimate interests.
• Opt out of sale, sharing for targeted advertising, and profiling with significant effects. We do none of these, and we honor Global Privacy Control browser signals as an opt-out request.
• No discrimination for using any of these rights.

How to ask. Email kos-support@kairovant.com with the subject "Privacy request", or use your account settings for changes you can make yourself. We confirm your identity using the email address on your account or submission and ask for no more than we need. An authorized agent may ask for you with your signed permission. We respond within 30 days and may extend once where the law allows, telling you why.

Founders and Customer Content. Information in a Kairovant OS submission is controlled by the Customer that received it. You can ask that Customer directly, or ask us and we will pass your request to the Customer and help it respond. You can always ask us to correct information about you or to withdraw a consent.

Appeals and complaints. If we decline your request, you can appeal by replying to our answer; we review the decision again and answer within 45 days. You may also complain to your state attorney general or, in Europe or the UK, to your data protection authority.

10. International Transfers, Children & Cookies

International transfers. Kairovant is based in the United States, and our service providers process information in the United States and other countries. For transfers from the EEA, the UK or Switzerland, we rely on our providers' approved transfer mechanisms, such as the EU Standard Contractual Clauses, the UK addendum, or the EU-US Data Privacy Framework where a provider is certified.

Children. Our websites and the Service are for professional use by adults. They are not directed to anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

Cookies. We use only cookies and similar technologies that are strictly necessary: to keep you signed in, protect against fraud and bots, and remember settings. We do not use advertising or cross-site tracking cookies. Before adding any optional analytics or marketing cookies, we will update this policy and ask for consent where the law requires it.

11. Acceptance, Changes & Contact

Acceptance. When you create a Kairovant OS account, accept an invitation or submit a company, you confirm that you have read this Privacy Policy as part of accepting our Terms of Service. We record which version you acknowledged.

Changes. We post every update here with a new version and effective date. If a change is material, such as a new use of your information, we tell account holders in the Service or by email before it takes effect and ask for acknowledgement where the law or our Terms require. Earlier versions are available on request.

Contact. Kairovant Venture Capital, LLC, Redding, California, United States. Privacy requests and questions: kos-support@kairovant.com. Security reports: kos-security@kairovant.com.

Version History