Privacy Policy

1. Introduction

​

Kiarra AI (“Kiarra”, “we”, “our”, "kiarra.ai" or “us”) is owned and operated by BCO Agency (“BCO”), based in Sydney, Australia.

This Privacy Policy explains how we collect, use, and protect your information when you use our website, chatbot, and related services (“Services”).

​

By accessing or using Kiarra AI (www.kiarra.ai), you agree to this Privacy Policy.

​

2. Information We Collect

​

We may collect the following types of information:

​

• Personal Information — such as name, email address, phone number, and company details when you submit forms, activate a trial, or contact our team.

• Usage Data — including pages visited, chatbot interactions, and other analytics information to improve performance.

• Chat Data — messages and content shared through Kiarra for training, support, and service optimisation.

• Payment Information — securely processed through our third-party provider Stripe. Kiarra AI does not store full payment details.

​

3. How We Use Your Information

​

We use your data to:

​

• Deliver, operate, and maintain our Services.

• Train, personalise, and optimise Kiarra AI’s responses.

• Provide support and communicate with you.

• Process payments, invoices, and renewals.

• Ensure compliance with applicable laws and security standards.

​

We may also anonymise data for analytics and product improvement.

​

4. Data Processing and Integrations

​

Kiarra AI operates through secure, industry-standard platforms including Zapier, OpenAI, and various CRM, booking, and communication integrations (e.g., HubSpot, Calendly, Google, etc.).

Data shared with these tools is processed according to their respective privacy policies and under data protection agreements (DPAs) that comply with GDPR and SOC 2 requirements.

​

5. Legal Basis for Processing (GDPR)

​

If you are located in the European Economic Area (EEA), we process your personal data under one or more of the following bases:

​

• Your consent,

• To perform a contract,

• To comply with legal obligations, or

• For our legitimate interests, such as service improvement.

​

6. Data Retention

​

We retain personal information only as long as necessary to fulfil the purpose for which it was collected or as required by law. You may request deletion at any time.

​

7. Data Security

​

We follow industry best practices to protect your information. This includes:

​

• SOC 2–compliant infrastructure,

• Encryption in transit and at rest, and

• Access controls to prevent unauthorised use.

​

8. Data Transfers

​

Your information may be transferred and stored securely outside your country (including the US, EU, or Australia), following GDPR and SOC 2 standards.

​

9. Your Rights (GDPR & Global Privacy Laws)

​

You may request to:

​

• Access, correct, or delete your data,

• Withdraw consent,

• Restrict processing, or

• Request data portability.

​

To exercise these rights, contact privacy@bco.agency.

​

10. Cookies & Tracking

​

We use cookies and analytics tools (e.g., Google Analytics) to improve user experience. You can manage cookies through your browser settings.

​

11. Children’s Privacy

​

Kiarra AI is not intended for users under 16 years of age.

​

12. Updates to This Policy

​

We may update this Privacy Policy from time to time. Any changes will be reflected with a new “Effective Date.”

​

13. Contact Us

​

For privacy inquiries:
BCO Agency
Sydney, Australia
privacy@bco.agency

​

​