Privacy Policy

Kabo plugins and connected tools

Kabo is provided by DEALISM PTE. LTD. This policy also covers Kabo plugins and tools connected through the Model Context Protocol (MCP). When you connect a client, Kabo uses OAuth to obtain your permission for the access shown on the consent page. The client manages its access and refresh credentials; do not paste passwords, verification codes, or tokens into a conversation or tool input.

For a tool request, Kabo receives the arguments sent by your client, such as a topic, public creator or video URL, selected content, or an identifier for a previous analysis. Kabo processes the requested public evidence, metrics, transcripts, analysis results, and any files you explicitly submit for that feature, and returns the tool result to the connected client. Kabo's MCP tools do not request your full conversation history. The client may include tool inputs and results in your conversation under its own privacy policy.

In the public ChatGPT and Codex integration, your client runs the research workflow using Kabo’s instructions and individual data tools. Kabo retrieves and may store public evidence, candidate sets, data jobs, transcripts, frames and video analyses. The client prepares the research answer; the plugin does not send that workflow to Kabo’s web agent. Public research does not automatically access private connected-account analytics or files.

Separate from tool-call usage metadata, Kabo stores account-linked data retrieval records, including the query or account researched, result summaries and selected public results. We use these records to provide results, investigate failures and understand service use. These records can contain public names, handles and source URLs.

When requested, evidence may be delivered through a signed download link valid for ten minutes. Anyone holding that link can read the specified evidence until it expires. Temporary evidence exports use a one-day storage lifecycle policy; this does not change retention of the underlying evidence. Downloaded copies are controlled by the recipient.

We keep account-linked tool usage records, including the tool name, time, duration, success or failure, and error category, to operate the service, enforce usage limits, and investigate failures. Application logs and server-generated tool-call usage records exclude tool input and output bodies. Some installed clients also submit a completed research report as a skill-completion event; Kabo retains at most 16,384 characters of that report. Research evidence, candidate sets, analyses, and artifacts may also be saved to provide the requested feature and let you retrieve its results.

Requested inputs and content may be processed by our hosting, database, public-data retrieval, and AI-processing service providers as needed for the tool you use. Public research does not grant access to a creator's private analytics. Authorizing Kabo does not authorize it to publish or delete content on a social platform unless a separately described feature explicitly requests that action and permission.

What we collect

When you sign in with Google, we receive your name, email address, avatar, and Google account identifier. We never receive or store your Google password.

Kabo reads your connected creator account data only after you explicitly authorize it. We also store necessary product settings, authorization records, and security logs.

When you use the website, Google Analytics receives a cleaned page URL, referring website or campaign tags, approximate location, browser and device information, engagement time, and Kabo interaction events. We do not send form entries, creator handles, prompts, generated results, passwords, authorization codes, or tokens to Google Analytics.

When you arrive on Kabo from another site, the website stores a first-party cookie with the page you landed on (path only, without query parameters), the referring website's domain, the utm_source tag, and the time. If you create an account, Kabo saves this landing-page record with your account so we can see which pages bring new users. It is removed when you delete your account.

When you go through the setup screens after signing in to Kabo's web app, Kabo records which steps you reached, whether you connected an account and on which platform, and which suggested first action you chose, with the time of each. We use these records to understand where new users get stuck. They do not include anything you type, and they are removed when you delete your account.

Kabo's free tools also keep a random anonymous browser identifier and per-tool usage counts in local storage, and send Kabo the event name, tool, time, and cleaned page path. This first-party telemetry does not include your tool input or generated result.

If you allow optional OpenAI ad measurement, OpenAI may receive a fixed event name, a random event ID, the safe Kabo page where the event occurred, and OpenAI ad-attribution references stored by its pixel. Kabo does not send your name, email address, account ID, prompts, tool inputs, or results with these events.

How we use it

This information is used to create and protect your account, provide the beta profile and video workflows you choose to use, and improve Kabo's reliability. Trend Radar and competitor-signal features are product previews; if they become available, related data processing will apply only when you choose to use them. Kabo does not sell personal information, and does not use your content or account data to train models served to other customers.

We analyze product usage to improve Kabo. For this purpose, we keep account-linked records of the features you use, when you use them, and the client you use (such as the website, mobile app, or desktop client). These usage records do not contain chat message text, IP addresses, or raw user-agent strings. We delete them when you delete your Kabo account and retain the raw records for no longer than two years.

Email we send

Kabo may email you in four categories. Account and service notices cover sign-in codes, a report finishing, and credit changes. These notices are part of running your account and are not optional. Usage reminders tell you what changed this week on an account you analyzed. Product updates and content ideas cover product news and suggestions for what to make next. Research invitations cover interviews and surveys.

Usage reminders, product updates, and research invitations are off until you opt in. You can turn each one on or off in Email preferences. Every email in those three categories includes a one-click unsubscribe for that category only. Unsubscribing from one category does not stop the others, and it does not stop account and service notices. Account and service notices do not include a marketing unsubscribe.

Questions about these emails: info@kabo.sh.

Storage, sharing, and security

Data is stored in access-controlled cloud services. We disclose only what is needed to vendors that provide hosting, databases, monitoring, and similar capabilities, and require them to protect it under contract.

Google Analytics may use first-party cookies or similar identifiers to distinguish visits and sessions. Google processes the resulting website analytics as our service provider; we disable Google signals and ad-personalization signals in the website tag.

The OpenAI measurement pixel loads only after you choose to allow it, and never loads on Kabo sign-in, dashboard, account, device, consent, OAuth callback, private Agent, embedded tool, fragment, or unapproved query-string pages. A strict set of ad-attribution parameters may remain on a public page. Registration is reported only from Kabo's server after a new account is created with valid consent and an OpenAI attribution reference; the browser does not send a registration conversion.

We use transport encryption, least-privilege access, and key isolation, but no system can promise absolute security.

Plugin retention and disconnection

Research candidate copies and raw retrieval evidence have a 30-day retention policy. Account deletion removes the candidate copies through Kabo's deletion process. Raw retrieval evidence is a separate audit archive and may remain until the 30-day retention period ends, including after account deletion. Other account-linked records and analysis results are kept while needed to provide the account and requested features, subject to deletion requests and applicable retention obligations.

Disconnecting a client does not itself delete stored data or revoke other clients. Revocation stops token renewal, but an already issued access token can remain valid for up to two hours. Work already started may finish. Contact info@kabo.sh for help with access or deletion, and use the deletion guide below for account removal and retention exceptions. Copies delivered to a client remain subject to that client’s controls.

Your choices

You can disconnect a connected platform at any time. You can also contact us to access, correct, or delete your account and related personal information, except for records we are legally required to keep. Withdrawing authorization does not affect processing already performed under a valid grant.

You can limit analytics cookies through your browser settings or use Google's Analytics opt-out browser add-on. Blocking analytics does not affect Kabo's core features.

Clearing Kabo's site data resets the anonymous free-tool identifier and local usage counts.

OpenAI ad measurement is off until you choose to allow it. Your choice is stored for 180 days. You can review, change, or withdraw it below without affecting Kabo's features. Withdrawing it stops future browser measurement, revokes queued server-side registration measurement, and removes stored OpenAI attribution references. If the revocation service is temporarily unavailable, Kabo keeps a no-identity pending flag on this browser and retries; if you signed out, sign back into the same Kabo account to finish the withdrawal before switching accounts on a shared browser. It cannot undo an event already processed, and a request already in flight may finish.