Kira Privacy Policy
Service: Kira (kira-ai.ru and *.kira-ai.ru)
Operator: Ilya E. Rudenko, Sole Proprietor
Privacy contact: ittrade.corp@gmail.com
Effective date: 15 October 2026
Last updated: 15 October 2026

1. Scope

Kira is a personal AI assistant available via Telegram and a web connections hub. Users may connect third-party services, including a Google account, so the assistant can help with calendar and contacts.
This Policy covers kira-ai.ru, tenant subdomains, and Google OAuth integration. If you disagree, do not connect Google or use the service.

2. Data we process

2.1 Account / messenger data

- Telegram identifiers needed to deliver messages;- conversation content with the Kira bot (text, transcribed voice, attachments as needed to fulfill requests);- assistant settings and knowledge files in your private workspace (second-brain notes, address book, etc.).

2.2 Google user data (only after you consent)

After Google OAuth consent, the service may access:
- Google Calendar — read and modify calendar events (create, update, delete meetings at your request or per agreed rules);

- Google Contacts / People API — read and, where needed, update contacts so the assistant can recognize people and help with outreach;
- Google Drive (drive.file), Google Docs and Google Sheets — access only to the files you explicitly choose in the Google Picker, or files the assistant creates at your request. The service may read and edit the content of those documents and spreadsheets (for example, add rows to your sheet or save notes to a document), but it cannot see any other file in your Drive.
The exact OAuth scopes are always shown on Google’s consent screen. We never ask for your Google password.

2.3 Technical data

- server logs (timestamps, status codes, errors) for reliability and security;
- OAuth tokens and integration secrets stored in your tenant’s protected storage, not posted in chat.

3. How we use data (Google Limited Use)

Google user data and other account data are used only to provide Kira features you requested or configured, including:
- showing and scheduling calendar events;

- finding and enriching contacts in your local address book;
- reading and editing the documents and spreadsheets you selected for the task, at your request;
- answering in chat with your context;
- security, debugging, and legal compliance.

We do not sell personal data.

We do not use Google user data for advertising.
We do not train public AI models on your Google Calendar, Contacts, Docs or Sheets content for purposes unrelated to operating your assistant.

LLM providers may receive dialogue fragments and task-necessary context solely to fulfill the current request. Providers are chosen by the operator; per-tenant key isolation continues to evolve with the product.
Kira’s use of information received from Google APIs will adhere to the 
Google API Services User Data Policy, including the Limited Use requirements.

4. Storage and security

- Each customer’s data lives in an isolated tenant on the operator’s secured servers.
- Google tokens and secrets have restricted access and are not published in chat.
- Operator staff access customer data only for support, security incidents, at your request, or as required by law.
- We apply reasonable safeguards (HTTPS, tenant isolation, access control). No Internet service can guarantee absolute security.

5. Retention and deletion

- Account and connection data are kept while you use the service or while a contract remains in force.
- You may revoke Google access anytime in your Google Account → Security → Third-party access → remove Kira. Tokens then stop working; ask support to delete local copies already stored in your Kira workspace.
- Upon written request to the contact above, we delete or anonymize account data within a reasonable time, except where law requires retention.

6. Sharing

We share data only with: you and people you authorize; infrastructure/API providers required to run the service (hosting, Telegram, Google, LLM, support email) as needed to provide the service; and authorities when legally required.

7. Children

The service is not directed at anyone under 18. We do not knowingly collect children’s data.

8. Your rights

You may request access, correction, deletion (subject to §5), withdrawal of Google OAuth consent, and restriction of processing via the contact above.

9. Changes

We may update this Policy by posting a new version with a new date. Material changes to Google data use will require new consent before such processing begins.

10. Contact

ittrade.corp@gmail.com · https://kira-ai.ru