Privacy Policy

Kernous is a real-time AI sales assistant that helps reps close more deals by surfacing the right insight from their playbooks, compliance docs, and past calls in the moment. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Kernous you agree to the practices described here. If you do not agree, please don't use the service. We aim for plain language; reach out at privacy@kernous.com if any of this is unclear.

• Audio recordings of sales calls when you choose to record. Captured locally in the browser and streamed to our speech-to-text provider for live transcription.
• Transcripts — both the raw output from speech-to-text and the AI-polished version surfaced in your session history.
• Account information you provide: email address, full name, and any organisation details you enter at sign-up.
• Session metadata: duration, conversation language, communication style, region, persona, and similar tags you set when starting a session.
• Knowledge library content you upload (PDFs, markdown, links) so Kernous can retrieve relevant snippets during your calls.
• Aggregated usage analytics — session counts, feature adoption, error events. Used to improve the product; not sold or shared for advertising.

• To provide real-time AI coaching during your calls — surfacing battlecards, talk tracks, and Solution Map matches based on what's being said.
• To generate post-call artifacts: summaries, deal rooms, CRM-paste blobs, talk-track suggestions for your next call.
• To improve the product. We may use de-identified aggregates to refine the AI models we ship; we do not train third-party models on your raw data.
• To authenticate your account, send service emails, and bill you (when paid plans are enabled).

We rely on a small number of trusted vendors to operate the service. Each sub-processor is bound by contract to handle your data securely.

• Deepgram — Speech-to-text. Audio is streamed to Deepgram for live transcription; Deepgram's retention defaults are configured to minimise storage.
• OpenAI — Large language models for AI suggestions, post-call summaries, and talk tracks. We send only the data needed for each prompt; OpenAI's data-processing addendum is in place.
• Daily.co — Video call infrastructure for our video-call session mode (Mode A). Daily.co does not retain call media beyond the session unless explicitly configured.
• Supabase — Primary database and authentication, hosted in Supabase US-East. All your data lives here.
• Vercel — Web hosting and edge functions. Serves the Kernous web app globally.
• Stripe — Payment processing when you upgrade to a paid plan. Card data never touches Kernous servers.

• Audio recordings are deleted within 30 days unless you specifically request retention for compliance reasons.
• Transcripts are retained for the life of your account so you can revisit past calls and re-generate artifacts.
• Knowledge library content is retained until you delete it from the dashboard.
• Account data is deleted within 30 days of account closure. Some aggregated analytics may persist in anonymised form.

• Right to access, correct, or delete the data we hold about you (GDPR Articles 15-17 / CCPA §1798.100).
• Right to data portability — request a machine-readable export of your sessions, transcripts, and knowledge library.
• Right to opt out of certain processing — for example, you can disable manager analytics sharing in /settings.
• To exercise any right, email privacy@kernous.com. We aim to respond within 30 days.

Kernous is operated from the United States. Our database (Supabase) is hosted in US-East and our AI providers (OpenAI, Deepgram) process data on US infrastructure. If you use Kernous from outside the US — including from Japan, Taiwan, Hong Kong, Singapore, or anywhere in the EU — your data is transferred to and processed in the US. Where required (e.g. GDPR), we rely on Standard Contractual Clauses with our sub-processors. Contact us if you need a copy of the relevant contracts.

Kernous uses a single essential authentication cookie (`kernous_access`) to keep you signed in. We do not run third-party analytics or advertising trackers, and we do not place cookies for cross-site profiling. If we add product analytics in future, this policy will be updated and you will be notified before any new tracking begins.

Kernous is a B2B sales tool intended for working adults. The service is not directed to children under 16 and we do not knowingly collect personal information from anyone in that age group. If you believe a child has provided us information, contact privacy@kernous.com and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated by email to your account address and surfaced as an in-app banner the next time you sign in. Continued use after the effective date of an updated policy means you accept the new terms.

Questions, requests, or complaints about this policy or your data? Email privacy@kernous.com. We aim to respond within 7 business days.