Kirx Pilot Privacy Policy

The short version

• We do not sell personal information or use it for advertising.
• We do not use your calls or messages to train AI models.
• Our website has no ad trackers, analytics trackers or session recording.
• When you call or text a business that uses Kirx, an AI assistant answers and says so. Calls are recorded and transcribed.
• Reply STOP to stop texts. Email team@kirx.com to see or delete your information.

1. Who controls your information

You contacted a business that uses Kirx. That business decides how your information is used. Kirx handles it for the business as its service provider. Send requests to the business, or to us and we will pass them on and help.

You own or work at a business using or joining Kirx, or you visited our website. Kirx controls that information. Send requests to team@kirx.com.

2. What we collect

Website and waitlist. Standard server logs (IP address, browser, time), one browser setting that keeps the cookie notice closed, your phone number, your business name, your place on the list, any referral link, and records of the verification codes we texted you.

Businesses and staff. Business name, address and phone numbers, owner and staff names and roles, the Google account name and email used to sign in, your services, prices, hours and schedule, your instructions to Kirx, and your messages and feedback to us.

Clients of a business. Your phone number or messaging account, the name you give, call audio and transcripts, messages, your appointments and changes to them, whether you opted out, and whether messages were delivered.

Connected booking systems. When a business connects Square, Vagaro or a similar system, we receive its services, staff, hours, availability, appointments and client contact records. So Kirx AI can help you the way the front desk would, we also keep your preferred name, your birthday (Kirx AI only knows when it is close, never the date), the details the business records about you (such as hair type), your visits from the past 12 months, and, only if the business turns this on, its staff’s notes about you. Kirx AI uses notes to look after you and never repeats them.

Loyalty points and gift cards. When you ask, Kirx AI looks up your loyalty points and the balance of gift cards linked to you in the business’s booking system. We read them at that moment and do not store them. Kirx AI is given only a gift card’s last four digits, never the full number, and it cannot redeem points or spend a balance.

Service records. What Kirx AI did in each conversation, with results, timing and errors.

We do not create voiceprints, use voice or face recognition, collect precise location, or ask for government IDs, card numbers or medical details. Please do not share them with Kirx AI. We do not collect payment information during the pilot.

3. How we use it

We use personal information to answer calls and messages, to book, change and cancel appointments, to send confirmations, reminders and replies, to tell you your loyalty points or gift card balance when you ask, to show a business its conversations and schedule, to verify phone numbers and run the waitlist, to keep Kirx secure, fix errors and improve it, and to comply with the law. We do not use it for advertising, marketing profiles of clients, or automated decisions with legal or similar effects.

4. AI, recording and model training

AI. Calls and messages are answered by an AI system. It says it is an AI assistant at the start and whenever you ask. You can ask for a person at any time.

Recording. Calls are recorded and transcribed, and messages are stored. Kirx AI says so at the start of each call. If you do not want that, end the call and contact the business another way.

How it works. Conversation content is sent to our AI providers to produce each reply. Replies are generated by a model from Anthropic. On calls, speech recognition and the spoken voice run through Vapi and the speech providers selected in it.

Model training. Kirx does not use calls or messages to train AI models, and Anthropic does not train its models on them under its commercial terms. Vapi’s terms allow it to use call data, in a form that does not identify the caller or the business, to improve its own speech recognition and call handling.

Review. Authorized Kirx staff may review conversations to fix problems, check quality and prevent abuse.

Mistakes. Kirx AI asks you to confirm before it books or changes an appointment. It can still be wrong, so check your confirmation.

5. Who we share it with

We do not sell personal information or share it for advertising. We share it only with:

• The business you contacted, which sees its own clients’ conversations, recordings, transcripts and bookings, and its connected booking system.
• Providers that run Kirx for us: Anthropic (AI replies), Vapi (calls, recording and speech), Blooio (iMessage and SMS, including verification codes), Meta (WhatsApp), Neon (database), Railway and Vercel (hosting), and Google (sign-in).
• Authorities or others when the law requires it, or to protect rights and safety.
• A successor, if Kirx is reorganized, moved to an affiliated company, or acquired. This policy continues to apply.

6. Text messaging

We do not sell, rent or share mobile phone numbers, text messaging opt-in data or consent with third parties or affiliates for marketing or promotional purposes. All other categories of sharing in this policy exclude text messaging originator opt-in data and consent. That information is not shared with any third party. Our messaging providers receive numbers only to deliver messages for us. Message frequency varies. Message and data rates may apply. Reply STOP to stop and HELP for help.

7. Cookies and tracking

Our website uses no advertising cookies, third-party analytics, tracking pixels or session replay. We store one preference so the cookie notice stays closed, and the dashboard uses a sign-in token. Because we do not track you across sites, there is nothing for a Do Not Track or Global Privacy Control signal to turn off.

8. How long we keep it

• Call recordings: 30 days.
• Transcripts, messages and bookings: while the business uses Kirx, then deleted within 30 days.
• Profile details copied from a connected booking system (preferred name, birthday, notes and other details): while the business keeps it connected. We delete them when the business disconnects it or deletes you there. Past visits are kept like other bookings.
• Loyalty points and gift card balances: not stored.
• Waitlist details: until your business joins or you ask us to remove you.
• Opt-out records: kept so we can keep honoring them.
• Server logs and backups: up to 90 days.

9. Your rights

Wherever you live in the United States, you can ask us to show you, correct or delete your personal information, and you can stop texts by replying STOP. Email team@kirx.com with the phone number you used and, if you are a client, the business you contacted. We confirm requests with a code sent to that number, answer within 45 days, charge nothing, and never treat you differently for asking. If you are a client, we work with the business to answer. An agent may ask for you with proof of authority. If we say no, reply to appeal and we will answer within 45 days. You may also contact your state attorney general.

State disclosures. In the last 12 months we collected identifiers (name, phone number, email, IP address), appointment records, birthdays and the details a business records about its clients, call audio, transcripts and messages, website and dashboard logs, and staff names and schedules. We collected them from you, the business and its booking system, for the purposes in Section 3, and disclosed them only to the recipients in Section 5. We did not sell personal information or share it for cross-context behavioral advertising, including that of anyone under 16. We use sensitive information only to provide the service.

10. Appointment and health-related data

Some states, including Washington and Nevada, protect “consumer health data,” which can include an appointment for massage or another wellness service. We handle the service you book, its date and time, the business and staff member, and anything you tell Kirx AI about your booking. We get it from you, the business and its booking system, and use it only to handle your request. Only the business, its booking system and the providers in Section 5 receive it. We do not sell it, use it for advertising, or geofence health facilities. You can ask us to confirm, show, delete or stop using it through Section 9. We act as a processor for the business. Kirx is not a health care provider and is not intended to handle medical records.

11. Children

Kirx is for businesses and adults. It is not directed to children under 13, and we do not knowingly collect their information. A parent or guardian should book for a child. Email team@kirx.com if you believe a child gave us information, and we will delete it.

12. Where data is processed

Kirx is offered only in the United States, and data is stored there. Kirx is operated by a company in Thailand, and our team there accesses data to run and support the service. Where Thailand’s Personal Data Protection Act applies, you have the rights it provides, including access, correction, deletion, objection and withdrawal of consent, and you may complain to the Office of the Personal Data Protection Committee.

13. Changes and contact

We post updates here and change the date above. For material changes we give notice before they take effect.

team@kirx.com
Bowers Innovation Co., Ltd. (Kirx), 118/9 Rama VI Road, Phaya Thai, Bangkok 10400, Thailand