Privacy policy
Last updated: 31 October 2026. This is a translation of the French policy, which prevails.
KAi is a service published by LEADS CORPORATION (a French simplified joint-stock company, RCS Lyon 977 588 805, 354 rue du Doyen Georges Chapas, 69009 Lyon, France), acting as data controller. Contact: qrey@leads-corp.fr.
This policy explains which data KAi processes, why, for how long, who can access it, and what your rights are. It covers the KAi service, the customer space and the accounts you choose to connect to it.
1. What KAi is
KAi is the executive's memory for their AI assistant. It keeps a map of your entities (companies, household, contacts, advisers, contracts), your rules and your ways of working. When you ask your AI assistant a question (Claude, ChatGPT or another), the assistant queries KAi, which reads your connected sources on demand (calendar, mailbox, files, bank) and returns what answers your question. KAi does not copy your documents: it records where they are and reads them when you ask.
2. Data we process
| Data | Purpose | Retention |
|---|---|---|
| Your sign-in email address, your name, your password (hashed, never readable), your device sessions | Sign you in and secure access | Until your space is closed |
| Your map: the records you confirm (entities, contacts, rules, situations, deadlines) | Provide the service | Until closure, after export |
| Documents you entrust to KAi (templates) and those it produces at your request | Produce your documents in your format | Until closure, or earlier at your request |
| Credentials for the accounts you connect (encrypted refresh tokens) | Read your sources on demand | Until you disconnect |
| The log: date, tool and nature of every read and every action | Accountability, abuse detection | Until closure |
If you sign in with Google or Microsoft, KAi receives your email address, verified by them, and nothing else: no access to your data until you connect your accounts in My accounts.
We never record health data, identity numbers or payment card numbers: a filter rejects them on entry, including in the log.
3. Google user data
If you connect a Google account from your space, Google asks for your consent for each access. KAi requests full access to Calendar, Drive and Gmail short of permanently deleting emails, and limits itself to the use below: nothing is sent to a third party without your yes, no permanent deletion, except a draft, bank access is read-only (section 4), all is logged. Here is what it requests, why, and what it does with it.
| Scope requested | Use, and nothing else |
|---|---|
| Account email address | Know which account is connected, and show it to you. |
| Calendar, full access | Read your events (title, time, location, attendees) to prepare your day, check a time slot, spot a conflict; create an event and invite your contacts, or change the time, title, location or reminders of an existing event, only after you explicitly approve the proposed event or the change shown (before and after). KAi never deletes an event. |
| Gmail, full access short of permanently deleting emails | Find a thread or an attachment, identify contacts waiting for a reply (KAi reads headers and short excerpts, and an attachment only when you ask for it); save a draft in your mailbox or send an email from your address, only after your word-for-word yes on the proposed text; tidy your mailbox (archive, mark as read, label, trash, which Gmail empties in 30 days, unsubscribe), on your yes. KAi never permanently deletes one. |
| Gmail, settings and filters | A filter for your future emails (archive, mark as read, label; no trash, no forward), on your yes. Nothing else. |
| Drive, full access | Read a file to answer or fill a template; file KAi's output in a "KAi" folder (an unsent version replaces the last), and files sent to it, not kept; edit other documents on your yes, passage by passage; Drive keeps it. KAi deletes none of your files. |
How we use this data
- On-demand reads. KAi reads your Google data at the moment you ask a question, and returns only what answers it, to your AI assistant, in the conversation you are having. It builds no copy of your emails, files or events.
- What we store. Only the refresh token issued by Google, encrypted in your space, so that we do not ask for your consent at every question. Short-lived access tokens are kept in memory only, for the duration of the read.
- What we never do. Sell your data. Transfer it to third parties for their own purposes. Use it for advertising or creditworthiness. Use it to develop, improve or train any artificial intelligence model, ours or anyone else's. Let a human read it, unless you ask us in writing for support, or the law requires it.
- Your AI assistant. KAi's answers are displayed in the assistant you chose and connected yourself (for example Anthropic's Claude or OpenAI's ChatGPT). That assistant is your provider, under your own agreement: check in its settings that your conversations are not used to train its models.
- Google commitment. KAi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting
From your space, "Disconnect" revokes access at Google and deletes the token immediately. You can also remove access from your Google Account permissions page (myaccount.google.com/permissions).
4. Other connected accounts
The same rules apply to any account you connect: Microsoft 365, bank (Qonto, read-only through a key you create yourself, no order or transfer possible), and others to come. The list of requested accesses is shown to you before each connection.
5. Where your data is, and how it is protected
- Hosted in France (Scaleway, Paris), encrypted backups in the Netherlands (Amsterdam), erased within 30 days after a deletion.
- One storage space per customer, encrypted with a key specific to that customer. No database or index shared between customers.
- Encryption in transit (TLS) and at rest. Access by explicit consent and time-limited tokens.
- A log of every read and every action, available in your space.
- Every outgoing action (email, event, document) and any tidying require your explicit approval. Bank access is read-only.
6. Who has access
You, through your space and your AI assistant. LEADS CORPORATION does not access the content of your space, except at your written request for support, or under a legal obligation. Our technical sub-processors only handle encrypted data:
| Sub-processor | Role | Location |
|---|---|---|
| Scaleway (France) | Hosting, encrypted storage, sending sign-in codes by email | Paris; backups in Amsterdam |
We transfer no data outside the European Union. We never sell or rent any data.
7. Retention and deletion
- You can cut off, export (Markdown and PDF) or delete your space at any time.
- On closure, your records are returned to you, then deleted with your written consent. Backups disappear within 30 days. A deletion certificate is provided.
- Some records have a retention period set by you or by law (accounting documents, personnel files): KAi purges them when due and logs it.
8. Your rights
Under the General Data Protection Regulation you have the right to access, rectify, erase, restrict, object to and port your data. Write to qrey@leads-corp.fr: we reply within one month. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).
9. Cookies
Your space uses only a session cookie, required for sign-in and protection against request forgery. No advertising cookie, no third-party analytics.
10. Changes
Any change to this policy is dated at the top of the page. If it changes how your Google data is used, we inform you before it applies and ask for your consent again where required.