Our Privacy Policy was last updated and posted on May 23, 2018. It governs the privacy terms of our Website, located at Any capitalized terms not defined in our Privacy Policy, have the meaning as specified in our Terms of Service.

Your Privacy

KISI Inc. follows all legal requirements to protect your privacy. Our Privacy Policy is a legal statement that explains how we may collect information from you, how we may share your information, and how you can limit our sharing of your information. You will see terms in our Privacy Policy that are capitalized. These terms have meanings as described in the Definitions section below.


“Non Personal Information” is information that is not personally identifiable to you and that we automatically collect when you access our Website with a web browser. It may also include publicly available information that is shared between you and others.“Personally Identifiable Information” is non-public information that is personally identifiable to you and obtained in order for us to provide you within our Website. Personally Identifiable Information may include information such as your name, email address, and other related information that you provide to us or that we obtain about you.

Information You Provide to Us

Kisi is collecting data that is necessary to determine who has access to which locations. This includes satisfying certain restrictions such as, but not limited to, a) proximity to the place, b) date and time and c) origin of the request.

We collect the following personal information from:

  • Customers: People who purchase Kisi
  • Admins: People who use Kisi for operations
  • Installers: People who install Kisi
  • Users: People who use Kisi to access

These are the personal information we collect:

  • Name (Customers, Admins, Installers, Users)
  • Email address (Customers, Admins, Installers, Users)
  • IP address (Admins, Users)
  • Profile image
  • Address if the user creates a virtual place (Users)
  • Location (Users)
  • Device identifier (Users)

The information is stored in our database. We use the information for the following purposes:

  • Name: personalization of product, identification of users
  • Email: unique identification of users
  • IP address: ensuring account/place security, blocking malicious requests
  • Profile image: personalization of product, identification of users
  • Address: customization of product
  • Location: ensuring account/place security, blocking unauthorized access attempts
  • Device identifier: ensuring account/place security by preventing account sharing between users on the same device

Automatically-Collected Information

If you are subscribed to and use our Service through a Customer Device, our Service will automatically collect other information that relates to your use of the Service through such device. Collection of this information helps us analyse your use of the Service, improve our Service, customize content and user preferences, and assist you with technical issues. The information that we and/or our third-party service provider(s) automatically collect in these ways includes the following:

  • Device Data As with most websites and technology services delivered over the Internet, our servers automatically collect information when you access or use our Service and record it in log files. This log data may include your Internet Protocol (IP) address, device type and settings, hardware MAC address, device ID number, the address of the web page visited before using the Service, error logs, browser type and settings, the date and time the Services were used, information about browser configuration and plugins, and language preferences.
  • Location Data We receive information from you that helps us approximate your location. We may, for example, use a business address submitted by your employer, or an IP address received from your browser or device to determine approximate location. We may also collect location information from devices in accordance with the consent process provided by your device.
  • Cookies In operating the Service or providing the Site, we and our service providers use Internet server logs, cookies, tags, SDKs, tracking pixels, and other similar tracking technologies. We use these technologies in order to offer you a more tailored experience in the future, by understanding and remembering your particular browsing preferences.
  • Information for California residents only: our Website collects users data via 3rd party cookies from Adroll. You can learn more about what data is collected on this page.

Information Processing

The information is processed in the following way:

  • Name: we store it and display it in the product to show who the user is, to the user themselves as well as to other users.
  • Email address: we store it and display it in the product to show who the user is, to the user themselves as well as to other users.
  • IP address: we use it to verify whether or not a request coming from the internet is. legitimate. The data is discarded once the rate limit windows for requests has advanced to the next period.
  • Profile image: we store it and display it in the product to show who the user is, to the user themselves as well as to other users.
  • Address: we store it and display it in the product to show where a place is so users can find it more easily using location services.
  • Location: we use the user’s location both offline (only evaluated on the user’s mobile device to e.g. show nearby locks) as well as in the API to ensure the user is close enough to be granted access.

The following security procedures are applied:

  • Name: data is stored encrypted at rest, and encrypted in transit
  • Email address: data is stored encrypted at rest, and encrypted in transit
  • IP address: data is stored encrypted at rest, and encrypted in transit
  • Profile image: encrypted in transits.
  • Address: data is stored encrypted at rest, and encrypted in transit
  • Location: we obfuscate the actual location by downsampling to disjoint intervals each 25 meters in width

The following countries and entities are involved in storing and processing the data:

  • Name: Heroku for processing and storage (United States), MailChimp for processing by sending emails containing name information (United States)
  • Email address: Heroku for processing and storage (United States), MailChimp for processing by sending emails containing email information (United States)
  • IP address: Heroku for processing and storage (United States), New Relic for processing by analysing software performance including origin of calls (United States)
  • Profile image: Heroku for processing and storage (United States), Google Cloud Platform for processing by uploading and storing (United States)
  • Address: Heroku for processing and storage (United States), MailChimp for processing by sending emails containing address information (United States)
  • Location: Heroku for storage and evaluation (United States), Google Cloud Platform for reverse address resolution (United States)

Your Rights

For Personal Data that we process as a data controller, you may have the following rights in relation to your Personal Data, depending on applicable law:

Right of access

If you ask us, we will confirm whether we are processing your Personal Data and, if so, provide you with a copy of that Personal Data (along with certain other details).

Right to rectification

If your Personal Data is inaccurate or incomplete, you are entitled to ask that we correct or complete it.

Right to erasure

You may ask us to delete or remove your Personal Account in some circumstances.

Right to restrict processing

You may ask us to restrict or block the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of that Personal Data or object to us processing it (but not continuing to store it). We will tell you before we lift any restriction on processing.

Right to data portability

You may have the right to obtain the Personal Data we process about you in a structured, commonly used and machine-readable format, and to reuse it elsewhere.

Right to object

You may ask us at any time to stop processing your Personal Data, and we will do so, if we are:

  • relying on legitimate interests to process your Personal Data and we cant otherwise demonstrate compelling legal grounds for the processing; or
  • processing your Personal Data for direct marketing.

Right to withdraw consent

If we rely on your consent as our legal basis for processing your Personal Data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on your prior consent.

Right to lodge a complaint with the data protection authority

If you have a concern about any aspect of our privacy practices, including the way we have handled your Personal Data, you can report it to the data protection authority that is authorized to hear those concerns.

Data Requests

A data subject must be able to:

  • request access to their data to check it for accuracy
  • assess what their data has been used for
  • audit how it has been processed
  • request an electronic copy of their personal data that can be transferred to another organization
  • request that all of their personal data be deleted in a timely manner

You may exercise your rights by contacting us as follows:

Links to Other Websites

Our Website may contain links to other websites that are not under our direct control. These websites may have their own policies regarding privacy. We have no control of or responsibility for linked websites and provide these links solely for the convenience and information of our visitors. You access such linked Websites at your own risk. These websites are not subject to this Privacy Policy. You should check the privacy policies, if any, of those individual websites to see how the operators of those third-party websites will utilize your personal information. In addition, these websites may contain a link to Websites of our affiliates. The websites of our affiliates are not subject to this Privacy Policy, and you should check their individual privacy policies to see how the operators of such websites will utilize your personal information.

Privacy Policy Updates

We reserve the right to modify this Privacy Policy at any time. You should review this Privacy Policy frequently. If we make material changes to this policy, we may notify you on our Website, by a blog post, by email, or by any method we determine. The method we chose is at our sole discretion. We will also change the “Last Updated” date at the beginning of this Privacy Policy. Any changes we make to our Privacy Policy are effective as of this Last Updated date and replace any prior Privacy Policies.

Questions About Our Privacy Practices or This Privacy Policy

If you have any questions about our Privacy Practices or this Policy, please contact us.