Privacy policy

Krypton AI prepares investor relations work for public companies. This policy explains what personal information we collect through kryptonai.io, the client portal and the Krypton AI Notetaker, how we use it, and the choices you have.

In this policy, "Krypton AI", "we" and "us" mean Krypton AI, Inc.

Information you give us. When you send us your ticker, book a call or write to us, we collect what you share. This is usually your name, work email, company, ticker and any notes you add.

Client material. When your company works with us, your team may send us filings, drafts, decks, meeting notes, requests and messages. We process this material for your company under our agreement with it. If that agreement conflicts with this policy, the agreement wins.

Services you connect. If you connect a calendar, forward investor relations email or pick files to import, we receive what that connection allows and nothing more.

Public and licensed data. To find investors for our clients, we use public and licensed sources, such as regulatory filings and the professional details of portfolio managers and analysts. We use only business information, such as name, firm, role and holdings, and we keep a record of our outreach.

Technical data. Our hosting providers log basic technical data when you visit, such as your IP address, browser type, the pages you view and the time of your visit.

• To provide, secure and improve our service, and to prepare and deliver the work you ask for.
• To answer your questions and schedule calls.
• To communicate with you about your work and our service.
• To meet our legal obligations and protect our rights.

We may use public information, such as filings, press releases and public web pages, freely in our work. Unpublished client material, including material non-public information, is kept confidential and used only for that client's work.

We do not sell personal information. We do not use one client's material to train models for anyone else. Every draft is reviewed by our team before it reaches you.

Ask. Ask, in the client portal, answers a question about your company from its public documents. To answer it, we send your question to an embedding provider to search those documents, and your question and the passages found to an AI model provider to write the answer. Neither provider uses your question to train its models. We do not save your question or the answer, unless you choose to send the question to us as a request. Ask's answers are not drafts: they are written by AI from the sources they cite, and our team does not review them.

Follow-ups. After a meeting with an investor or analyst, we can draft a follow-up email for your executive to send. To write it, we send an AI model provider the person's name, title and firm, the meeting date, why we contacted them, the subjects of our earlier emails to them, and any notes you add, never their email address. The provider does not use it to train its models. Our team reviews every draft before you see it, and nothing is sent until you send it from your own email.

Briefings. When you make a briefing on a fund or analyst, we send an AI model provider the person's name, title and firm, why we contacted them, and figures from public filings and our records (their holdings or ratings and your company's reported results) to write the questions they may ask. We never send their email address or the text of any email. The provider does not use it to train its models. The briefing is made for you when you ask, and our team does not review it first.

Meeting feedback. When you add your own notes from an investor meeting, we send them, with the meeting's title, date and the investor's name, to an AI model provider, which reads them into feedback for you. Every line quotes your notes. The provider does not use them to train its models. We do not review this feedback before you see it.

Signal storylines and claims. Signal groups public social media posts about your company and its peers into storylines, and checks claims made in those posts against the company's SEC filings. For this we send the words of public posts, without who wrote them, and public filings to an embedding provider and an AI model provider, never your own material or our records. Storylines and checked claims appear on Signal without review first, and our team can remove any claim.

Signal sentiment. To score how people feel about your company and its peers, we send public posts about them (each post's words, its source, its author's public handle and its date) to an AI model provider, which gives each a score. We never send your material, your contacts or your company's own posts. The provider does not use them to train its models. The score is shown to you as it is read, and our team does not review it first.

Signal news and corrections. Signal also reads financial news about your company and its peers from free public sources (Stock Analysis, Yahoo Finance, SEC 8-K filings and the newsletters we follow) and keeps each story's headline, first lines, link and publisher. News is scored like a post. The claim check also reads your company's own press releases and its own public posts beside its filings, so those go to the AI model provider too, and a verdict that rests on them says so. When you or our team mark a post's score or a storyline's tone wrong, we keep the correction, who made it and the post's words. The post's words and the side given are sent to the AI model provider as examples when it scores later posts, including posts about other companies, never who made the correction or for which client.

Signal monthly reports. Each month Signal makes a PDF of the month before from the same public posts and filings. To write its summary paragraph we send an AI model provider only the report's computed figures (counts, shares and the titles of storylines), never your own material, our records or anyone's name or email address. The report is kept in private storage for your company's members. If you turned on Signal alerts, we email you a link to download it.

Signal response drafts. For the storylines about your company that matter, Signal drafts posts for each platform, an investor FAQ entry, a press release draft, an earnings call prep pack and posts in your chief executive's voice, and sets the key points of your latest SEC release beside what public posts say. For this we send the words of public posts, without who wrote them, public SEC filings and your own published releases, call transcripts and decks to an AI model provider, never your private uploads or our records. Drafts appear on Signal without review first. Nothing is ever posted or sent for you, and our team can remove any draft.

We share personal information only in these cases:

• With service providers that help us run Krypton AI, such as hosting, database, email, calendar, meeting recording and AI model providers. They work under contract and may use the data only to serve us.
• When the law requires it, or to protect the rights and safety of Krypton AI, our clients or others.
• As part of a merger, acquisition or sale of assets. We will tell you if this happens.
• With your consent.

We never share one client's material with another.

When you send our booking form, a service provider checks that a browser rather than a script sent it. If we cannot match your ticker and work email to a listed company, we email that address a link to confirm the request. We count visits to our public pages without cookies and without identifying you. To measure our LinkedIn ads, our public pages, but not the client portal, load LinkedIn's Insight Tag, which may set cookies and which LinkedIn handles under the LinkedIn privacy policy. It tells us how many people from our ads visited or sent us their ticker, never who they are. You can turn it off in your LinkedIn advertising settings. When you send us your ticker, we keep the page you sent it from, the website that sent you to our site (such as a search engine or an AI assistant) and, if you came from an ad, the ad's campaign tags and LinkedIn's click reference.

The notetaker records only the meetings you choose. Connecting a Google or Microsoft account lets it list your upcoming meetings. Nothing is recorded until you press Record on a meeting, and the notetaker then joins as a named participant everyone can see.

Deleting a recording removes the recording and its transcript, not merely our reference to them, and cannot be undone. Disconnecting stops the notetaker and cancels every recording not yet held. To delete recordings you have kept, email notetaker@kryptonai.io.

Krypton AI's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we access. Your email address, to identify your account. Your calendar, read-only, to list your meetings and record the ones you approve. Only the Drive files you pick, to prepare your company's own work. Krypton AI never writes to your calendar, never creates or edits an event and never invites anyone.

Who we share it with. Only the service providers that run the notetaker and the portal, and only as far as each needs to do its part. We do not sell it or use it for advertising, and it is never used to train AI models.

How we protect it. Access is read-only and limited to what you choose. It is encrypted, kept separate for each company and reachable only by staff who need it. You can disconnect at any time, or revoke access at myaccount.google.com/permissions, and ask us to delete what we hold.

We operate in the United States. Your information may be processed there, or where our providers operate. When we move personal information across borders, we use the safeguards the law requires.

We keep personal information as long as we need it for the purposes above, or as long as the law requires. We keep client material for the term set in our agreement with your company.

We protect personal information with technical and organizational measures, including access controls, encryption and required two-step sign-in. No system is perfectly secure, so we cannot promise absolute security.

Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or limit how we use it. These rights come from laws such as the GDPR in the EU and UK and the California Consumer Privacy Act.

To make a request, or to ask us to stop contacting you, email contact@kryptonai.io. We will answer within the time the law sets, and we will not treat you differently for using your rights. If your request is about client material, we may pass it to the client that controls it.

Krypton AI is a business service. It is not meant for children, and we do not knowingly collect personal information from anyone under 16.

Our site links to other sites, such as LinkedIn and Google. Their own privacy policies apply when you use them.

We may update this policy. When we do, we will post the new version here and change the date at the top, and tell clients before any material change.

Email contact@kryptonai.io with any questions about this policy or your personal information.