Privacy Policy
1. Who we are
This Privacy Policy explains how KILO ("KILO," "we," "us," or "our") handles personal information in connection with the KILO website and pre-development parcel-screening tool for Hawaiʻi (the "Service"). KILO is the business responsible for that information. "Personal information" means information that identifies or could reasonably be linked with a particular individual. The parcel data the Service analyzes — tax map keys, coordinates, boundaries, and the public-records layers cited in each assessment — is public information about land, not personal information about you.
2. Information we collect
We collect only what we need to provide the Service. The categories of personal information we collect are:
- Identifiers and account information — such as your email address, and, if you sign in with a third-party identity provider, the basic profile information it returns (such as your name and profile image).
- Communications — information you send us, such as contact-form or support messages.
- Commercial and transaction information — your plan and purchases, and payment status. We do not receive or store your full payment-card number.
- Internet and usage information — your IP address and standard request metadata, the searches you run, and records of your activity within the Service.
- Approximate location — only the public-record coordinates of the parcels you assess. We do not collect your device's geolocation.
We collect this information from you, from the identity and payment providers you choose to use, and from your use of the Service. We do not knowingly collect special categories of personal information (such as health or biometric data) or government identifiers (such as a Social Security or driver's-license number). [Attorney review: confirm the CCPA/CPRA category mapping.]
3. How we use it
We use personal information to provide, secure, and improve the Service; to authenticate you and manage your account; to process payments and keep required transaction records; to respond to you and send service-related messages (we do not send marketing email without your consent); and to comply with law and enforce our Terms. We may use de-identified or aggregated information to analyze and improve the Service, and we may publish findings only in aggregate or de-identified form.
[Attorney review: where the GDPR/UK GDPR applies, confirm legal bases — contract, legitimate interests, consent, and legal obligation — and align with §7.]
4. How we share it
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising (as those terms are used under California law). We do not disclose it to marketers or advertisers. We disclose personal information only:
- to service providers that process it on our behalf to run the Service — including providers of hosting, payment processing, email delivery, mapping and geocoding, and cookieless product analytics;
- to providers you choose to interact with directly, such as your sign-in or payment provider, which handle your information under their own privacy policies;
- to public and government data sources used to fulfill an assessment, which receive only the parcel coordinates needed — never your identity; and
- as required by law, to protect rights and safety, or in connection with a business transfer.
5. Cookies and local storage
We use only strictly-necessary cookies — to keep you signed in and to secure the sign-in process — and we use cookieless, aggregate analytics. We do not use advertising or cross-site tracking cookies, and we do not fingerprint your browser. We also store a small amount of information locally in your browser to operate the Service; you can clear it through your browser at any time.
6. Retention
We keep personal information for as long as needed for the purposes described in this Policy and for the period required by law (for example, transaction records kept for tax and accounting purposes), after which we delete or de-identify it. De-identified and aggregated information, which is not linked to any individual, may be retained and used as described above. [Attorney review: confirm retention periods and criteria.]
7. Your rights and choices
Subject to applicable law and verification of your identity, you may request to access, delete, or correct the personal information we hold about you, and to know the categories of information we collect and the purposes for which we use it. Because we do not sell or "share" personal information, no opt-out is necessary. Where the GDPR/UK GDPR applies, you may also have rights to restrict or object to processing, to data portability, and to withdraw consent. We will not discriminate against you for exercising your rights. To make a request, use the contact form and identify yourself with the email address associated with your account; we will respond within the time required by applicable law. [Attorney review: confirm verification, response windows, and authorized-agent handling.]
8. Security
We use encryption in transit (HTTPS/TLS) and rely on the security of our infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a security breach affecting personal information of Hawaiʻi residents, we will provide notice consistent with HRS §487N.
9. Children
The Service is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 18; if you believe a child has provided it, contact us and we will delete it.
10. International users
The Service is operated from the United States and intended for Hawaiʻi-based users. If you access it from elsewhere, your information is processed in the United States. [Attorney review: add a transfer mechanism if EU/UK users are expected.]
11. Changes
We may update this Privacy Policy. Material changes will be posted with an updated "Last updated" date; continued use of the Service after a change constitutes acceptance.
12. Contact
Questions about this Privacy Policy, or to exercise a right under §7: use the contact form on the home page.
13. Our cultural-data commitment
As a matter of policy, KILO does not collect, derive, or surface information that would localize iwi kūpuna (ancestral Native Hawaiian remains) or other protected cultural sites, and we will not release information in a form that could be used to do so.