Privacy Policy
This policy explains how The Kingfisher Network LLC ("Kingfisher," "we," "us") collects, uses, stores, and shares information when you use Kingfisher at thekingfishernetwork.com.
Information we collect
Account information: your name, email address, and basic profile information from Google Sign-In, plus the team you choose in Settings.
Google data: with your permission, the Google data described in the Google user data section below.
Usage information: how you use Kingfisher, such as pages viewed, coordinations created, drafts generated, and time spent in the app. We use this to operate and improve Kingfisher. It does not include the content of your emails or documents.
How we use information
We use information to provide Kingfisher's features, keep your account secure, provide support, and understand how the product is used so we can improve it.
Google user data
This section explains how Kingfisher accesses, uses, stores, and shares data received from Google APIs. Where it conflicts with other sections of this policy, this section governs.
What we access
With your permission, Kingfisher accesses email metadata from Gmail (senders, recipients, dates, and thread information; never message content or subject lines) and calendar events. If you choose to connect meeting notes in Settings, Kingfisher also reads Google Docs linked from your calendar meetings with partner organizations. Meeting notes access is optional and is never requested when you first sign in. If you have connected Drive, you can also import an event attendee list from a Google Sheet you select; Kingfisher reads only that spreadsheet. Attendee names and emails in any uploaded or imported list are discarded immediately after matching; we keep only the event name, date, and the partner companies that matched.
How we use it
We use this data only to provide the features you see in Kingfisher: your partner map, relationship history, meeting context, and AI drafted coordination messages. For in-person meetings, Kingfisher shows a city-level label (for example, New York) derived from the meeting's location, and whether a meeting was virtual. Full addresses are never stored; we keep only city labels and meeting counts. To suggest meeting times between colleagues, Kingfisher uses each colleague's calendar availability (free or busy only); the details of their events are never shown to anyone or stored. If someone in your organization adds a person's personal email address to a partner (for example, a partner's staff member who uses Gmail), Kingfisher attributes emails and meetings with that exact address to that partner; no other personal email addresses are stored. To show a partner's company name, Kingfisher reads the title of that company's public homepage, using a request that contains only the company's web address and nothing about you.
Sharing within your organization
If you sign in with your organization's email domain, relationship information from your connected account (such as which organizations you have met or emailed with, and when) is visible to other Kingfisher users in your organization. Some decisions you make in Kingfisher, such as dismissing a company or responding to a coordination request, may be shown to colleagues in your organization, sometimes as a count (for example, "2 colleagues dismissed this"). This information is never shown to users outside your organization. If you sign in with a personal email address (such as Gmail), your data is private to you and is not shared with any other user, unless you choose to join an organization by invitation, as described below.
Organizations you join by invitation
You can create an organization, or be invited to one by the person who runs it, using any email address. You join only after you choose Join on a screen that tells you who will see what: your activity with the partner companies on that organization's map is visible to its members, and everything else stays private. "Activity" means counts of your meetings and email threads with those companies and the date of your last contact, never the content of your email or meetings. A partner is on an organization's map only because a member added it from their own map. Members of an organization see each other's names. Coordination requests and messages you send inside an organization are visible to the members involved, and when a member suggests a meeting time, Kingfisher uses members' free or busy times only, never the details of their events. You can belong to more than one organization; each has its own map and we never combine information between them. You can leave at any time and your activity stops being visible immediately. An organization's administrator can delete the organization, which removes its map, its member list and the coordination threads shared inside it. If you disconnect your account, we remove you from your organizations. When someone is invited to an organization, we keep the invited email address and whether the invitation was accepted or declined until the invitation is removed or the organization is deleted. During the beta, Kingfisher's team receives a notice when an administrator invites someone, containing the administrator's and the invitee's email addresses and the organization's name, so we can manage access.
AI processing
To draft messages, relevant context is sent to Anthropic through its commercial API solely to generate the draft you requested. This context can include the partner company's name, your name and the name of the colleague you are writing to, the titles of related calendar meetings and linked documents, and short excerpts of meeting notes you have connected. Meeting note content is read at the moment you request a draft and is never stored by Kingfisher; we store only a reference to which document is linked to which meeting. Anthropic's commercial terms prohibit it from training models on that content. We do not use Google user data to develop, improve, or train generalized AI or machine learning models.
Sharing with service providers
We do not sell Google user data or use it for advertising. We share it only with service providers needed to run Kingfisher (Railway for hosting and our database, Anthropic for AI drafting, and Resend for delivering Kingfisher's service emails), under obligations consistent with this policy. Kingfisher personnel do not read your Google data except with your explicit consent, for security investigations, or where required by law.
Storage, retention, and deletion
Kingfisher stores: your account details (name, email, team); your Google access credentials, encrypted; relationship data derived from your calendar and email headers (partner company domains, meeting and email counts, contact dates, and city-level meeting labels); decisions you make in Kingfisher (dismissals, coordination threads and messages, and outcomes); event touches and imported event records (event name, date, and matched partner companies only); references to linked meeting notes (document and meeting IDs, never document content); notifications; organizations you create or join (the organization's name, its members, and the partner companies added to its map); and product usage counts. We keep this data while your account is active.
You can disconnect Kingfisher at any time in Settings or at myaccount.google.com/permissions; disconnecting revokes access and deletes your data, except coordination threads shared with colleagues, which remain with your team with your name removed. You can also request deletion by emailing privacy@thekingfishernetwork.com, and we will delete it within 30 days. Residual copies in database backups are deleted within 30 days as backups expire.
Limited Use
Kingfisher's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Security
We use industry standard measures to protect your information. All connections use HTTPS. Your Google access credentials are encrypted at rest with AES-256-GCM, and access to production systems is restricted. No system is perfectly secure.
Your choices
You can disconnect your Google account, dismiss companies from your partner map, or request deletion of your data at any time.
Children
Kingfisher is a business product and is not intended for anyone under 18.
Changes to this policy
If we change how we use Google user data, we will notify you and ask for your consent before using your data in the new way. We will post other updates on this page with a new effective date.
Contact
Questions: privacy@thekingfishernetwork.com