Privacy Policy

Last updated 7 September 2026

kholect is built by virtualverselabs (Pty) Ltd (“we”, “us”), 29 Kerk Street, Newtown, Johannesburg, 2001, South Africa. This page explains what data we process, why, and what rights you have over it — both as a user of kholect, and as a person whose business appears as a lead inside someone else's workspace.

What we collect about you (the account holder)

When you sign in with Google, we receive your name, email address, and profile photo from Google — we don't see or store your Google password. We store this alongside your workspace, billing, and usage data for as long as your account is active.

What we collect about leads

Lead data (business name, contact details, public signals) comes from two places: public business listings (Google Places, OpenStreetMap) that a customer's workspace discovers, or leads a customer adds manually. Every lead record carries a consent basis — either “legitimate interest” (the standard basis for B2B outreach to publicly-listed business contact information) or explicit opt-in recorded by the customer. We do not buy or sell contact lists, and we don't scrape data that isn't publicly available.

How lead data is used

To score fit and intent, draft outreach, and let a workspace contact the lead directly. Every outbound send is checked against consent and suppression records first — a lead who has unsubscribed, bounced, or complained is blocked from receiving further email regardless of consent basis.

AI processing

Lead scoring and copilot drafting send a minimal set of fields to our AI provider (name, domain, location, and public signals) — never raw email content or passwords. AI-generated scores and rationale are stored against the lead record.

Data retention and deletion

We retain account and lead data for as long as the workspace is active. If you're a lead who wants your data removed or wants to opt out of further contact, use the unsubscribe link in any email you receive, or contact us using the details below and we'll route the request to the relevant workspace.

Your rights

Under POPIA, you can ask what personal information we hold about you, ask us to correct or delete it, object to its processing, or lodge a complaint with the Information Regulator. See our POPIA Notice for how to do that.

Contact

Questions about this policy: contact@virtualverselabs.com.