Privacy policy

This page explains what personal information we hold when you use this website, get in touch or work with us, what we do with it, and the choices you have. If anything is unclear, email us at contact@kiriai.co.uk.

Who we are

kiri is the trading name of Kiri AI Limited, a company registered in England and Wales (company number 17537991), with its registered office at 1 Heaton Grange, Longtail Hill, Bowness-on-Windermere, Windermere, LA23 3JD. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), it's the controller of the personal information described on this page.

When you get in touch

Enquiries you send us. The form on this site asks for your name, the name of your practice and a way to reach you. When you press send, the form goes from this website to Cloudflare, which hosts the site, and Cloudflare emails it to our inbox. Nothing is stored on this website. If sending fails, the form opens a message in your own email application addressed to us instead, and what we receive is the email you choose to send.

Emails and conversations. If you email us, or we go on to speak by phone or in person, we keep a record of that correspondence and of what we discussed, in our email and in our own customer records system, so we can follow up properly.

Call bookings. If you book a call through the booking link on this site, the booking page is run by Google Calendar, which we use as part of Google Workspace. The name, email address and anything else you enter go into Joe's calendar so the call can take place. The booking page is on Google's own site, so Google's privacy policy applies to your visit there.

Technical information. This website doesn't use analytics tools, advertising trackers or tracking cookies. Cloudflare, which hosts the site, may keep standard server logs, such as the IP address and browser type of each request, for security and to keep the site running.

What we use it for, and why we're allowed to. We use what you give us to reply to you, to have the conversation you asked for, and to keep track of what's been discussed. Our legal basis is our legitimate interest in answering enquiries you've started and in running our business. Where a conversation moves towards an agreement, it's also to take the steps you ask us to take before entering into a contract.

If we contacted you first

We sometimes email, message or write to owners and partners of UK accountancy practices about working with kiri. To do that we use your name, your role and your firm's details from public sources such as Companies House, your firm's website and your LinkedIn profile, and we keep a record of what we've said to each other. Our legal basis is our legitimate interest in finding practices to work with. If you'd rather we didn't contact you, reply to say so or email contact@kiriai.co.uk, and we won't again. We keep a short note of your name and the date you asked, so that we don't.

When we map your practice's workflows

While we sit with your team, we see how the work is done, and some of what we see is about your staff and your clients. We sign a confidentiality agreement with your practice before we visit, and what we see and note is governed by it. We keep our notes, and the report we write from them, in our own systems, seen only by the four founders. We don't take copies of your clients' records unless your practice agrees to it in writing. If you go on to a pilot, our agreement with your practice sets out what kiri's software holds, where, for how long, and when it's deleted.

Who handles it for us

These providers process personal information on our behalf and under our instructions:

• Google, which runs our email, calendars, files and video calls (Google Workspace).
• Amazon Web Services, which hosts our customer records and kiri's software in London, and runs the AI models kiri uses.
• Cloudflare, which hosts this website and delivers its enquiry form to our inbox.
• Slack, where the team talks about its work.
• Anthropic, whose AI assistant, Claude, helps us research firms, draft our messages and write up what we've mapped.

We also share information with professional advisers such as lawyers and accountants, bound by confidentiality, where their involvement is needed, and with regulators, courts or law enforcement where the law requires us to. We don't sell personal information, use it for advertising, or share it with anyone for their own marketing.

Where it's stored

Our customer records and kiri's software are in Amazon Web Services in London. Some of the other providers above store or process information outside the United Kingdom, such as Slack and Anthropic in the United States. Where that happens, we rely on the safeguards UK law recognises, such as adequacy regulations, the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum, so that your information gets an equivalent level of protection.

How long we keep it

We keep enquiries and our records of the people we've written to while we might still work together, and so that we know who we've already spoken to. If you ask us to delete your information, we will, unless we need to keep it for a legal reason, and we'll keep only the short note described above.

Your rights

Under UK data protection law you have the right to ask for a copy of the information we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and in some cases to have it transferred to you or someone else. You can exercise any of these by emailing contact@kiriai.co.uk. We'll respond within one month.

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put it right with you first.

Cookies

This website doesn't set cookies or use similar technologies for analytics, advertising or tracking, which is why you won't see a cookie banner. If that ever changes, we'll update this policy and ask for your consent before any such cookies are used.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.