> For the complete documentation index, see [llms.txt](https://docs.kiloiot.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.kiloiot.io/trust-security-compliance/privacy-and-data-protection.md).

# Personal Data and Privacy

How to get a copy of your personal data in Kilo, fix or delete it, and what to settle before cameras record people.

Kilo uses personal data to run accounts, answer questions and operate connected devices. CHIRP USA LLC operates Kilo, and the [Privacy Policy](https://kiloiot.io/privacy-policy/) explains what the company processes and your rights. This page tells you how to use those rights in practice.

Device readings can be personal data too. A named worker's location, or a sensor that shows when someone enters a room, is information about a person even when the device itself has no name on it.

## How do I get a copy of my data or have it deleted?

Email **info \[at] kiloiot.de** (replace `[at]` with `@`) and include:

1. The account or service, and how you are connected to it, for example as a user or as an administrator.
2. What you want: a copy of your data, a correction, deletion, restricted use or another privacy right.
3. Which information it concerns. Don't attach passwords, data exports or identity documents unless asked.
4. If you are asking for someone else or for an organization, why you are allowed to. You may be asked for proportionate proof before anything is shared or changed.

Where the EU General Data Protection Regulation (GDPR) applies, you get an answer about the action taken without undue delay, normally within one month. If more time is needed, you are told why within that first month. Deletion you are entitled to happens without undue delay; the one-month answer time is not a waiting period. If a request can't be carried out, the answer explains why and where you can complain.

## Does closing my account delete my data?

Not completely, on its own. Cancelling a subscription, deleting a conversation, closing your account and asking for your data to be erased are different actions:

* **Delete my account** in [Profile Settings](/settings/profile-settings.md) sends a deletion request that the team handles; it is not immediate.
* Closing an account does not yet delete every conversation and record across all systems automatically.
* Backups expire on their own schedule, and deleted data must be kept out of use and must not come back if a backup is restored.

Ask for the outcome you need, and keep the answer. It should say what was deleted, anything that remains, why it remains and what happens next. To move or delete company data rather than your own, see [How Do I Export My Data or Leave Kilo?](/trust-security-compliance/data-export-deletion-and-switching.md)

## What happens to data I send to the AI assistant?

The AI assistant sends your messages, and the information it looks up to answer them, to the selected AI model provider. Check that provider's retention and training terms before sharing sensitive information. Disconnecting a provider does not erase what was already sent. See [AI Privacy and Security](/ai-assistant/privacy.md).

## What must I settle before cameras record people? <a href="#cameras-that-record-people" id="cameras-that-record-people"></a>

Before a camera deployment records real people, contact **info \[at] kiloiot.de** with a description of the site, the cameras, the purpose, who is recorded, who will have access and how long footage is needed, and get Kilo's confirmation that the service is ready for that use. Keep footage out of that first email.

Your organization must:

* have a lawful purpose for recording;
* complete the privacy and security assessment for the site before recording starts, including a data protection impact assessment (DPIA) where one is required;
* tell the people being recorded, for example with signs at the site;
* control who can watch and export footage;
* keep only the footage the purpose needs, for no longer than needed.

Discuss any video analytics or processing outside your site separately. General product documentation does not approve a particular camera deployment.

## Does my organization need a processing agreement?

If your organization uses Kilo to handle information about other people, such as employees, tenants or visitors, it needs a data processing agreement with Kilo. See [Does Kilo Sign a Data Processing Agreement?](/trust-security-compliance/processing-agreements.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.kiloiot.io/trust-security-compliance/privacy-and-data-protection.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.