Website privacy policy.

What this policy covers

This policy describes what data kairoi.io (the website) collects, how it’s used, and the choices you have about it. It applies to anyone who visits the site or fills out a form on it.

This website is operated by Elfanbaum Consulting 2 LLC, a Delaware limited liability company doing business as Kairoi. This policy covers information collected through the website and its forms. Information handled as part of a client engagement may be covered by the applicable engagement agreement or a separate privacy notice.

The short version

• We collect what’s needed to talk with you about working together, and not more than that.
• We never sell or rent your data.
• We use HubSpot to manage contact records, Microsoft Azure to host the site, Microsoft 365 for email, and, only if you agree, Google Analytics to see how the site is used. Each is described below.
• You can ask us what we have on you, ask us to correct it, or ask us to delete it. We honor those requests.
• If a security incident affects your information, we’ll investigate promptly and let you know as the law requires.

If something below isn’t clear, email info@kairoi.io and ask. We’d rather answer than have you guess.

---

Information you give us

When you submit a contact form

We collect what you put in the form: typically your name, work email, company, what you’re trying to figure out, whether you work at an investment firm, portfolio company, or mid-sized business, and, optionally, your role. Along with your answers, the form records the page you submitted it from and your IP address.

We use this information to respond to you, to understand which content brought you in, and to keep a record of our conversation in our contact-management system (CRM).

When you request a portfolio AI assessment

The assessment form asks for your name, work email, firm, and role; whether the assessment is for your own firm or a portfolio company; that company’s name, industry, size, and lifecycle stage; how far along it is with AI; and, optionally, your goal for the assessment and any other context you want to share. It doesn’t accept attachments. Like the contact form, it also records the page you submitted it from and your IP address.

We use your answers to prepare for a conversation about the assessment, and we keep them in our CRM. Please don’t include sensitive personal information or confidential business information unless we have agreed on a secure way to receive it.

When you email us directly

If you email info@kairoi.io or one of our team members directly, we keep your email like any other email, in our inbox, accessible to the people on our team who handle correspondence. We’ll respond using the same address.

---

Information collected automatically

Server logs

Our hosting provider (Microsoft Azure) keeps technical logs to help operate and protect the website: your IP address, the page requested, the time, and information about your browser and device. We review them when needed to investigate errors or suspicious activity, and they’re kept only for a limited period.

Cookies, and your choice

The site asks before it sets any analytics cookie. On your first visit, a banner asks whether we may use Google Analytics. Nothing from Google Analytics loads until you choose Accept. If you choose Decline, or don’t answer, it never loads.

You can change your answer at any time with “Cookie settings” at the bottom of every page. Declining after you’ve accepted stops Google Analytics and removes its cookies from your browser.

We remember your answer in a first-party cookie called kairoi_consent. It holds only your answer and lasts six months, after which we ask again.

If your browser sends a Global Privacy Control signal, we treat it as Decline: the banner doesn’t appear and Google Analytics doesn’t load.

The site doesn’t set advertising cookies, and we don’t load any other third-party trackers: no HubSpot tracking code, no Facebook Pixel.

Page statistics (Google Analytics)

If you accept, Google Analytics records the pages you view, the site that referred you, your browser, operating system and device type, your approximate location (country, region and city), and how you use each page, such as how far you scroll and how long you stay. It sets two cookies, _ga and one beginning _ga_, holding a random identifier so it can tell a returning visitor from a new one. They last 13 months.

Google works out your approximate location from your IP address but doesn’t log or store the address itself. We look at reports on how the site is used, not at individual visitors. We’ve turned off Google’s advertising features, so this data isn’t used for ads. Google may process it in the United States, under the EU-U.S. Data Privacy Framework. Google explains how it handles it in How Google uses information from sites or apps that use our services.

Our own first-party cookie (kairoi_visitor)

When you submit a form on this site (whether the contact form or the portfolio AI assessment) we set a small first-party cookie called kairoi_visitor that stores your name, work email, company or firm, and role. The next time you fill out a form on the site, those fields prefill so you don’t retype them.

A few specifics:

• The cookie is first-party: it’s set by kairoi.io, not by a third-party service, and only kairoi.io reads it, to prefill forms.
• It contains only the four identity fields above. No portfolio-company details, no message text, no submission history.
• It lasts 90 days from the most recent form submission. After that it expires and is gone.
• It’s not used for advertising, analytics, or anything other than form prefill.
• It’s only set when you submit a form, and there’s no consent prompt for it. If you’d rather not have it, you can clear it in your browser’s cookie settings at any time (look for kairoi.io). A later submission will set a new one.
• If you change your name, email, firm, or title in a later submission, the cookie updates to match.

The cookie lives in your browser, so only you can remove it. Asking us to delete your data removes the records we hold, but it can’t reach into your browser.

---

How we use this information

We use the information described above to:

1. Respond to you and continue conversations you started.
2. Understand which content on our site is bringing the right kind of inquiries, so we can write more of what’s working.
3. Maintain a record of our interactions in our CRM, so the next conversation starts where the last one left off.
4. Operate, secure, and debug the website itself.

We do not use it to:

• Share with marketing networks or ad platforms.
• Build profiles for anyone other than ourselves.
• Train AI models on you. (We work in AI, but not on data we collect from website visitors.)

---

Who we share this with

We use service providers to host the website, manage inquiries, and handle email. The main providers that may process website information are listed below.

We don’t sell, rent, or trade your information.

If a circumstance arose where we were legally required to disclose your information (a court order, a valid government request), we’d evaluate the request, push back if appropriate, and tell you about it unless we were specifically prohibited from doing so.

---

Your choices

Send any of these requests to info@kairoi.io. Starting the subject with “Privacy request” helps us route it, but isn’t required. You can:

• Ask what we have on you. We’ll tell you what we hold and where it lives.
• Ask us to correct something. Tell us what’s wrong and we’ll fix it.
• Ask us to delete it. We’ll remove what we hold, except where we’re legally required to keep something.
• Remove the prefill cookie. Clear kairoi_visitor in your browser at any time.
• Change your cookie choice. Use “Cookie settings” at the bottom of any page. Declining removes the Google Analytics cookies, and Global Privacy Control works the same as declining.
• Opt out of email follow-up. Reply to any of our emails with “please remove me” and we’ll stop reaching out.

Before we share or delete records, we may need to confirm that the request comes from you. We’ll handle requests promptly, and if we can’t fulfill one, we’ll tell you why.

We offer the access, correction, and deletion options described here to everyone. Depending on where you live and whether a particular privacy law applies to our business, you may have additional rights. Contact us using the details below to make a request or ask about your rights.

---

How long we keep this

• Contact and assessment submissions: kept in our CRM while we have a working or potential working relationship with you. We periodically review inactive records and remove the ones we no longer need.
• kairoi_visitor first-party cookie: expires 90 days after your most recent form submission.
• Server logs: kept for a limited period, then deleted.
• Page statistics: Google Analytics deletes its detailed records after 14 months, and its cookies expire after 13. Declining removes the cookies straight away.
• Your cookie choice (kairoi_consent): expires six months after you answer the banner.
• Email correspondence: kept as long as the conversation is active or relevant to the relationship.

When you ask us to delete information, we delete it from the systems we control, unless we’re legally required to keep it. Copies in routine backups may remain until those backups expire.

---

Security

We use technical and organizational safeguards designed to protect information, including encrypted connections and access controls. We also review the service providers we rely on. No website or online service can be guaranteed completely secure.

Our providers publish their own security and compliance documentation: HubSpot in its Trust Center, Microsoft in its Trust Center, and Google in its privacy policy.

---

Security incidents

If a security incident affects personal information we hold, we’ll investigate promptly and notify affected people and regulators as required by law. When we notify you, we’ll explain what happened, what information was affected, what we’ve done in response, and any steps you should take.

---

Children

This site is not intended for or directed at people under 16. We don’t knowingly collect data from anyone under 16. If you believe we have, email info@kairoi.io and we’ll delete it.

---

Changes to this policy

If we change this policy, we’ll post the new version on this page and update the effective date at the top. Earlier versions are available on request.

---

Contact us

For any privacy question, request, or concern:

Email: info@kairoi.io

We’ll respond promptly. If a request takes longer to resolve, we’ll tell you why and what to expect.