What we collect when you use this site, why we collect it, and what you can ask us to do about it.
Last updated: 5 September 2026
KiKi is a product of Automaxion LLC (“KiKi”, “we”, “us”), a limited liability company registered in the State of Wyoming, USA. Automaxion LLC is the data controller for the personal data described in this policy.
For anything in this policy, including any request under §8, contact privacy@withkiki.ai. That address reaches a person and is the fastest route to us.
Our registered postal address is available on request from the same address, and is also a matter of public record with the Wyoming Secretary of State.
We apply the standards of the UK and EU General Data Protection Regulation to every visitor, wherever they are. Where your local law gives you stronger rights, those apply too.
Two things: what you type into the audit form, and standard website analytics. We do not buy data about you, we do not build advertising profiles, and we do not track you across other websites.
Please do not send confidential business information, credentials, or payment details through this form. It is an enquiry form, not a secure channel.
We use Google Analytics 4 to see which pages are read and whether the audit form is used. IP addresses are anonymised before storage. We do not use analytics to identify you, and we do not use it for advertising.
Google Analytics sets cookies — see §6.
The form carries a hidden field that a person never sees but an automated script usually fills, and we limit how many submissions one connection may make in an hour. Your IP address is used for that limit in memory only, at the moment of the request — it is not written to disk, not stored with your enquiry, and not passed on to anyone.
The form is also protected by Cloudflare Turnstile, a privacy-focused alternative to CAPTCHA. It performs a background check to confirm you are not a bot. Cloudflare receives your IP address and limited browser information to run that check. Turnstile does not track you across websites and is not used for advertising. See Cloudflare’s privacy policy.
| Data | Purpose | Lawful basis |
|---|---|---|
| Your form submission | To reply to your enquiry and, if you asked for it, run the audit | Steps taken at your request before entering a contract (Art. 6(1)(b)), and our legitimate interest in responding to business enquiries (Art. 6(1)(f)) |
| How you reached us | To understand which of our own marketing efforts work | Legitimate interest in running our business efficiently (Art. 6(1)(f)) |
| Analytics | To understand and improve how the site performs | Your consent (Art. 6(1)(a)), asked before anything loads — see §6 |
| IP address, transiently | Rate limiting and the anti-bot check, to keep the form usable | Legitimate interest in securing our service (Art. 6(1)(f)) |
When you submit the form, it is sent over an encrypted connection to our own automation service, which records it in a private spreadsheet, notifies our team in a private Slack channel, and emails it to us. If that service is unavailable, the enquiry is emailed to us directly instead, so that it is never silently lost.
Only people working on KiKi can see it. We do not sell it, rent it, or use it for advertising.
We use these providers to run the site and handle enquiries. Each processes data only on our instructions.
| Provider | What they handle | Where |
|---|---|---|
| Cloudflare | The anti-bot check on the form | Global network |
| Google (Analytics) | Website analytics | EU / US |
| Google (Sheets, Gmail) | Recording and emailing enquiries | EU / US |
| Slack | Notifying our team of a new enquiry | EU / US |
| Our automation service | Routing enquiries between the above | Self-hosted by us |
| Our hosting provider | Serving this website | United States / global edge |
Automaxion LLC is a US company, and the providers above are US-based or transfer data to the US. If you are in the UK or the EU, your data therefore leaves your country when you contact us.
We apply UK and EU data protection standards to that data wherever it sits.
For the transfer to us, we rely on the European Commission’s Standard Contractual Clauses, and on the UK International Data Transfer Addendum for visitors in the United Kingdom. Automaxion LLC is not certified under the EU–US Data Privacy Framework, so we do not rely on that framework for our own receipt of your data.
For the transfers to the providers listed above, we rely on whichever mechanism each provider offers — in practice their own Standard Contractual Clauses, and for some, their certification under the EU–US Data Privacy Framework.
You can ask us for a copy of the safeguards that apply by emailing privacy@withkiki.ai.
This site sets no cookies of its own. The only cookies are Google Analytics’, and they are not set unless you agree to them.
When you first arrive you are asked. Nothing analytics-related loads until you choose, declining is exactly as easy as accepting, and if you decline nothing about the site changes for you. Closing the banner without choosing is treated as declining.
You can change your mind at any time: . Withdrawing is as easy as giving it, and takes effect immediately — we clear the analytics cookies and stop sending data.
Cloudflare Turnstile may set a short-lived cookie as part of the anti-bot check on the audit form. That one is strictly necessary to stop the form being abused, so it does not require consent, and it carries no analytics or advertising purpose.
There are no advertising cookies on this site, and we do not track you across other websites.
Enquiries are kept for 24 months from your last contact with us, then deleted from the spreadsheet, Slack, and our inbox. Twenty-four months reflects how long a business conversation in this market realistically takes; if you ask us to delete your data sooner, we will.
Analytics data is retained by Google for 14 months. Your IP address, used only for rate limiting, is discarded within the hour.
You can ask us to:
Email privacy@withkiki.ai and we will respond within one month. There is no charge.
If you think we have handled your data badly, you can complain to your local data protection authority. In the UK that is the Information Commissioner’s Office; in the EU it is the authority in your country of residence.
The site is served over HTTPS. Enquiries travel over encrypted connections, and the services holding them require multi-factor authentication. Nothing you submit is written to the web server itself — it passes straight through to the services named in §5.
No system is perfectly secure. If a breach ever affects your data, we will tell you and the relevant authority as the law requires.
This is a business site. It is not directed at children, and we do not knowingly collect their data.
If we change this policy we will update the date at the top of the page. If a change materially affects how we use data you have already given us, we will contact you.