The controller of your data is Mauricio Zúñiga Cuéllar, an individual, Colombian tax ID (NIT) 94.060.281-1, domiciled at Calle 3D # 66 - 47, Cali, Colombia. Contact: insight@kaistrategylab.com.
Account data: email, name, password (stored as an irreversible hash), language and, if you provide them, gender, birth year, country and time zone.
Content you register: sources, notes, highlights, application context (role, projects, goals, decisions, habits), artifacts and actions.
Usage and billing data: technical records of AI usage (tokens and costs, never the content of prompts), credit movements and payments.
Providing the service (including AI artifact generation), managing your account and payments, sending transactional emails (verification, password recovery, receipts), handling support and improving the product with aggregated metrics.
OpenAI (United States): receives your source material (title, author, notes, highlights), your application context and — if you use assisted capture — the voice notes and page photos you upload, to generate artifacts and highlights. It never receives your email or account data.
Amazon Web Services — SES (United States): sends transactional emails; it receives your email and your name.
Resend (United States): backup channel for the same transactional emails; it receives your email and your name.
dLocal Go, a product of the company dLocal: processes payments on its hosted checkout; we never see or store your card or payment-method data.
Puente Kai (optional): if you link your account with other products of the Kai Strategy Lab family — Kai Career Elevate or Kai News, from the same owner —, your email travels to confirm the link and only the material you decide to send crosses (closed actions, principles, artifacts or highlights). It arrives on the other side as a suggestion you also accept yourself. You can unlink anytime in Profile → Connections.
We do not sell your data or share it with third parties other than the processors listed.
(a) Know, update and rectify your personal data.
(b) Request proof of the authorization granted for the processing.
(c) Be informed, upon request, of the use given to your data.
(d) File complaints before Colombia's Superintendencia de Industria y Comercio (SIC) for breaches of the data-protection regime. Write to us first: almost everything is solved there, and the law also requires completing that step with us before going to the SIC (article 16).
(e) Revoke the authorization and/or request the deletion of your data when there is no legal or contractual duty to keep it.
(f) Access, free of charge, your personal data that has been processed.
To exercise any of these rights write to insight@kaistrategylab.com. We answer inquiries within a maximum of 10 business days and claims within a maximum of 15 business days, as the law requires.
We encrypt connections (TLS), store passwords as hashes and restrict access to data. We keep your data while your account exists; when you delete it, your personal data and content are erased, except for billing records the law requires us to keep.