LEGAL
Privacy Policy
Last updated: [date]
Placeholder draft. Bracketed items still need to be filled in.
This Privacy Policy explains how Kagami Labs Inc. ("Kagami", "we") collects, uses, and shares personal information through kagamilabs.io, app.kagamilabs.io, and related services (the "Services"). The Services are built for business and government users.
1. Information We Collect
| Category | Examples | Source |
|---|---|---|
| Account information | Name, work email, organization, role, login credentials | You or your organization |
| Customer Data | Case notes, tags, addresses of interest, user-submitted attributions | You |
| Usage and device data | IP address, browser, pages and features used, queries run, timestamps, logs | Automatically |
| Communications | Emails, support requests, demo requests | You |
| Billing information | Billing contact and payment details (processed by our payment provider) | You |
| Public blockchain data | Wallet addresses, transactions, and related analysis | Public blockchains and third-party data providers |
2. Public Blockchain Data
The Services analyze publicly available blockchain transactions. Wallet addresses are pseudonymous, but in some jurisdictions they may be personal data when linked to an identifiable person. We process this data to provide investigation and compliance services, prevent and detect crime and fraud, and support legal claims. Outputs are investigative leads, not determinations about any individual.
3. How We Use Information
We use information to: provide, operate, and secure the Services; verify users and organizations; provide support; bill customers; improve the Services, including through aggregated or de-identified data; detect and prevent misuse; and comply with legal obligations. We do not sell personal information and do not use it for targeted advertising.
4. Legal Bases (EEA/UK users)
We rely on contract performance, our legitimate interests (providing investigation services, fraud and crime prevention, security, and improvement), legal obligations, and consent where required.
5. How We Share Information
We share information only: with service providers who process it for us under confidentiality and data protection terms; within your organization's workspace; when required by law, legal process, or to protect rights, safety, or security; and in a merger, acquisition, or sale of assets. Current service providers include [Supabase (database), Railway (hosting), Upstash (caching), Anthropic (AI-assisted report generation), GoDaddy (DNS), blockchain data providers such as Goldsky, Alchemy, Ankr, and Etherscan, payment processor TBD]. [Confirm this list before publishing.]
6. Data Retention
We keep account and Customer Data for the life of your account and up to [30] days after termination unless you request deletion sooner or we must keep it longer by law. Logs are kept for up to [12] months. Public blockchain data and derived analysis may be retained as part of our datasets.
7. Security
We use reasonable administrative, technical, and physical safeguards, including encryption in transit, access controls, and logical separation between organizations. No system is completely secure.
8. International Transfers
We are based in the United States and process data there. Where required, we use appropriate safeguards such as Standard Contractual Clauses.
9. Your Rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. California residents have rights under the CCPA/CPRA, including to know, delete, and correct, and to not be discriminated against for exercising them. To make a request, email frodo@kagamilabs.io. We will verify your identity first. Some requests may be limited where data is needed for fraud prevention, legal claims, or legal obligations. If we process your data on behalf of a customer, we will refer your request to that customer.
10. Cookies
We use essential cookies for login and security, and [basic analytics]. You can control cookies in your browser.
11. Children
The Services are not for anyone under 18, and we do not knowingly collect their information.
12. Changes
We will post updates here and notify account holders of material changes.
13. Contact
Kagami Labs Inc., [address], frodo@kagamilabs.io.