Privacy Policy
Privacy Notice for Little Kat
This Privacy Notice for Interstellar8, LLC ("we," "us," or "our") describes how and why we may access, collect, store, use, and share your personal information when you use our services, including when you visit littlekat.co, use Little Kat through app.littlekat.co, or contact us about the product.
Little Kat is an email-first scheduling assistant that helps users coordinate meetings through real email threads. Users may sign in with Google, connect Google Calendar so Little Kat can check availability, suggest times, send scheduling replies, and create, update, or remove calendar events, while the web app lets users review case history, actions, and account setup.
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use the Services. For privacy questions, use our contact form or email bot@littlekat.co.
Last updated April 5, 2026
Summary of Key Points
This summary provides key points from our Privacy Notice. You can find more detail about each topic in the full sections below.
What personal information do we process? We process personal information depending on how you interact with the Services, including information you provide to us, information received from Google if you sign in with Google or connect Google Calendar, information contained in scheduling-related email threads that include Little Kat, and certain technical and usage information collected automatically.
Do we process sensitive personal information? We do not intentionally process sensitive personal information.
Do we collect any information from third parties? Yes. If you sign in with Google or connect Google Calendar, we receive certain identity, authentication, and calendar information from Google. We may also receive information about participants and messages from the real email threads in which Little Kat is included.
How do we process your information? We process your information to provide, improve, and administer the Services, authenticate your account, coordinate meetings, communicate with you, protect the service, and comply with law.
When and with whom do we share personal information? We may share information with service providers such as Google, OpenAI, Mailgun, hosting providers, database providers, and analytics providers, as well as in legal or business transfer situations described below.
How do we keep your information safe? We use reasonable technical and organizational measures designed to protect personal information, but no system can guarantee perfect security.
What are your rights? Depending on where you live, you may have rights to access, correct, export, or delete personal information we maintain about you.
How do you exercise your rights? The easiest way is through our public data request page, by using our contact form, or by contacting us directly.
1. What information do we collect?
Personal information you disclose to us
In short: We collect personal information that you provide to us when you register on the Services, express interest in obtaining information about us or our products, participate in activities on the Services, or otherwise contact us.
The personal information we collect may include:
- Names
- Email addresses
- Contact or authentication data
All personal information that you provide to us must be true, complete, and accurate.
Sensitive information. We do not intentionally process sensitive personal information.
Google sign-in and connected Google services
If you choose to sign in with Google or connect Google Calendar, we receive certain profile, identity, authentication, and calendar data from Google. Depending on the permissions you grant, that may include your name, email address, account identifier, the connected calendar identifier, free-busy availability, event details needed for scheduling, and OAuth authorization data required to maintain the connection.
We use that information only for the purposes described in this Privacy Notice. We do not control, and are not responsible for, how Google uses information on its own services. We recommend reviewing Google's own privacy notice.
Information automatically collected
In short: Some information, such as your IP address, browser, device characteristics, referring URLs, timezone, and usage events, is collected automatically when you visit, use, or navigate the Services.
This information does not necessarily reveal your specific identity, but it may include device and usage information such as your IP address, browser type, operating system, language preferences, usage timestamps, pages viewed, searches, interactions with the Services, error reports, and system configuration information.
Like many businesses, we also collect information through cookies and similar technologies. You can learn more in our Cookie Policy.
- Log and usage data. Service-related, diagnostic, usage, and performance information automatically recorded when you access or use the Services.
- Device data. Device and application identifiers, browser type, operating system, and similar technical information.
- Location data. Approximate location information derived from IP address, account timezone, browser locale, or similar signals rather than precise GPS tracking.
Google API Services disclosure
Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
2. How do we process your information?
In short: We process your information to provide, improve, and administer the Services, communicate with you, protect the Services, and comply with law. We may also process your information for other purposes with your consent or another valid legal basis.
We process personal information for a variety of reasons, including:
- To facilitate account creation and authentication and otherwise manage user accounts.
- To deliver and facilitate delivery of services to the user.
- To respond to user inquiries and offer support.
- To send administrative information, such as updates to terms or policies.
- To enable user-to-user communications in scheduling workflows.
- To protect the Services, including fraud monitoring, abuse prevention, and security review.
- To evaluate and improve our Services, products, marketing, and user experience.
- To identify usage trends and better understand how the Services are used.
- To comply with legal obligations and respond to lawful requests.
- To authenticate users with Google and connect their Google Calendar.
- To coordinate meetings from email and calendar context, including reading thread context, checking availability, suggesting meeting times, sending scheduling replies, and creating, updating, or removing calendar events.
- To maintain case history, action logs, account memory, and connection status so users can review what happened and manage their workspace.
5. Do we offer artificial intelligence-based products?
In short: Yes. Little Kat offers products, features, or tools powered by artificial intelligence or similar technologies.
As part of the Services, we offer AI-powered scheduling features that analyze thread context, generate scheduling plans, draft replies, and help users coordinate meetings. The terms of this Privacy Notice govern your use of those AI-powered features.
Use of AI technologies
We provide certain AI-powered features through third-party AI service providers, including OpenAI. Inputs, outputs, and relevant personal information may be shared with those providers to enable Little Kat's user-facing scheduling workflows.
Our AI products
- AI-assisted analysis of email and calendar context
- AI-generated scheduling plans and recommended next actions
- AI-generated draft emails and follow-up language
How we process your data using AI
Personal information processed through these AI features is handled in line with this Privacy Notice and our vendor agreements. We use AI only to provide or improve Little Kat's user-facing scheduling features and not to train generalized models on Google user data.
7. How long do we keep your information?
In short: We keep your information for as long as necessary to fulfill the purposes described in this Privacy Notice unless a longer retention period is required or permitted by law.
We will keep account records, scheduling cases, audit history, connection data, logs, and other personal information for as long as reasonably necessary to operate the Services, investigate incidents, enforce agreements, and comply with applicable legal obligations.
In general, no purpose in this Notice requires us to keep personal information for longer than the period during which a user has an account with us, except where retention is reasonably necessary for backups, fraud prevention, troubleshooting, legal compliance, or similar legitimate business needs.
When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it, or if that is not possible, securely store it and isolate it from any further processing until deletion is possible.
8. How do we keep your information safe?
In short: We aim to protect your personal information through a system of reasonable technical and organizational security measures.
We use security measures designed to protect the personal information we process. Those measures may include encrypted storage for sensitive credentials such as OAuth tokens, access controls, transport security, audit logging, and operational review limited to support, reliability, security, abuse prevention, and legal compliance.
However, no electronic transmission over the internet or information storage technology can be guaranteed to be one hundred percent secure, so we cannot promise or guarantee that unauthorized parties will never be able to defeat our safeguards.
9. Do we collect information from minors?
In short: We do not knowingly collect data from or market to children under 18 years of age.
By using the Services, you represent that you are at least 18 years old or that you are the parent or guardian of such a minor and consent to that dependent's use of the Services. If we learn that we have collected personal information from a child under 18, we will take reasonable steps to delete that information.
If you believe we may have collected information from a child under 18, please contact us at bot@littlekat.co.
10. What are your privacy rights?
In short: Depending on where you are located, you may review, change, export, or terminate your account and may have additional privacy rights under applicable law.
Withdrawing your consent
If we rely on consent to process your personal information, you have the right to withdraw that consent at any time by contacting us using the details in this Privacy Notice. Withdrawal does not affect the lawfulness of processing before the withdrawal.
Marketing and promotional communications
If we send marketing or promotional communications, you may opt out at any time by using the unsubscribe link in the email or by contacting us. Even then, we may still send service-related or account-related communications.
Account information
If you would like to review, change, export, or terminate your account, you can:
- Log in to your account settings and update your user account.
- Submit a request through our data request page.
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases, subject to legitimate retention needs for fraud prevention, troubleshooting, legal compliance, or similar purposes.
Cookies and similar technologies
Most browsers accept cookies by default. If you prefer, you can usually choose to remove or reject cookies in browser settings. Removing or rejecting cookies may affect certain features or services. For more information, see our Cookie Policy.
11. Controls for Do-Not-Track features
Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected.
Because there currently is not a uniform technology standard for recognizing and implementing DNT signals, we do not currently respond to DNT browser signals. Little Kat also does not currently honor Global Privacy Control browser signals.
If an industry or legal standard for online tracking is adopted that we must follow in the future, we will describe that practice in an updated version of this Privacy Notice.
12. Do United States residents have specific privacy rights?
In short: If you are a resident of certain US states, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have rights to access, correct, export, or delete personal information we maintain about you, and to understand how we process it.
Categories of personal information we collect
The table below shows the categories of personal information we have collected in the past twelve months. The examples are illustrative and do not limit the personal information we may process as described elsewhere in this Privacy Notice.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Real name, email address, account identifier, online identifier, Internet Protocol address, and connected Google account identifiers. | Yes |
| B. Personal information as defined in the California Customer Records statute | Name, contact information, and similar basic account records. | Yes |
| C. Protected classification characteristics under state or federal law | Age, race, ethnicity, nationality, marital status, and similar protected characteristics. | No |
| D. Commercial information | Service plan, subscription status, and similar product-account status information. | Yes |
| E. Biometric information | Fingerprints, voiceprints, face geometry, or similar biometric identifiers. | No |
| F. Internet or other similar network activity | Page visits, browser events, product usage, logs, diagnostics, and interactions with the Services. | Yes |
| G. Geolocation data | Approximate location inferred from IP address, browser locale, or account timezone. | Yes |
| H. Audio, electronic, sensory, or similar information | Audio recordings, call recordings, or video recordings created in connection with our business activities. | No |
| I. Professional or employment-related information | Business contact details, company affiliation, job title, or work context included in account data or email thread signatures. | Yes |
| J. Education information | Student records or education history. | No |
| K. Inferences drawn from collected personal information | Scheduling preferences, case memory, follow-up patterns, or operational inferences used to coordinate meetings. | Yes |
| L. Sensitive personal information | Government ID, precise geolocation, financial account credentials, health data, or other sensitive categories defined by law. | No |
How we use and share personal information
We use and share personal information as described in the sections titled What information do we collect? and How do we process your information?.
We may disclose personal information to service providers pursuant to written contracts or similar vendor terms, but we do not sell personal information and do not share personal information for targeted advertising.
Your rights
You may have the following rights, depending on applicable law:
- The right to know whether we are processing your personal data
- The right to access your personal data
- The right to correct inaccuracies in your personal data
- The right to request deletion of your personal data
- The right to obtain a copy of personal data you previously shared with us
- The right to non-discrimination for exercising your rights
- The right to opt out of targeted advertising, sale of personal data, or profiling in furtherance of decisions with legal or similarly significant effects where applicable
How to exercise your rights
To exercise these rights, you can visit our data request page, use our contact form, or refer to the contact details below.
We may need to verify your identity before completing a request. You may also designate an authorized agent to act on your behalf where permitted by law, subject to verification and proof of authorization.
Appeals and California Shine the Light
If we decline to take action on your request where an appeal right applies, you may appeal the decision by emailing bot@littlekat.co.
California Civil Code Section 1798.83, also known as the "Shine the Light" law, permits California residents to request information about categories of personal information, if any, that we disclosed to third parties for direct marketing purposes in the immediately preceding calendar year. We do not share personal information with third parties for their own direct marketing.
13. Do we make updates to this notice?
In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated date at the top of this Privacy Notice. If we make material changes, we may notify you by prominently posting a notice or by contacting you directly when appropriate.
14. How can you contact us about this notice?
If you have questions or comments about this notice, you may contact Interstellar8, LLC by using our contact form or by emailing bot@littlekat.co.
15. How can you review, update, or delete the data we collect from you?
Based on the applicable laws of your country or US state of residence, you may have the right to request access to the personal information we collect from you, details about how we process it, correction of inaccuracies, export, or deletion.
To review, update, export, or delete your personal information, please visit our data request page or manage your account through app settings.
6. How do we handle Google sign-in and connected Google services?
In short: If you choose to sign in with Google or connect Google Calendar, we may have access to certain information about you from Google.
When you use Google sign-in, we receive certain profile information from Google such as your name, email address, account identifier, and the authentication data necessary to maintain your session. If you connect Google Calendar, we also receive the calendar information you authorize us to access.
We use that information only for the purposes described in this Privacy Notice or that are otherwise made clear to you on the Services. We do not control, and are not responsible for, Google's own use of your personal information. We recommend reviewing Google's privacy notice to understand how it handles your data.