1. Information we receive
- Inquiries and correspondence: your email address and the source of the inquiry when you use the contact form, plus information you choose to provide in later communications.
- Discovery requests: search text, the selected region, requested result count, and provider identifiers needed to find or retrieve provider records. Searches can describe activity interests; avoid including a child’s name, exact address, medical information, or other sensitive details.
- Provider information: business names, descriptions, websites, addresses, phone numbers, and other program information supplied to or made publicly available to the discovery service. Business contact information may identify an individual.
- Technical and usage information: information received as part of website requests, such as IP address, browser and device information, request timing, pages or features used, and diagnostic or security events.
The ChatGPT provider-discovery plugin requires no Kaleto account and does not collect booking or payment details. Kaleto separately offers website accounts and provider workspaces. If you use those services, we receive account contact information and the class, guardian, participant and booking information you submit.
2. How information is used
We use information to return relevant provider results, maintain provider information, respond to inquiries, communicate about requested services, understand site usage, diagnose problems, enforce usage limits, protect the Services from abuse, and meet legal obligations. An inquiry does not automatically create a public listing.
3. Discovery tools and AI assistants
Website discovery requests are sent to Kaleto’s discovery service to perform the requested search or lookup. When you ask a connected assistant to use Kaleto, it can send the search arguments needed for that request and receive the resulting public provider information. Those results may be displayed in the assistant’s conversation.
Kaleto sends activity queries to Google’s Gemini API to find providers with similar descriptions, and sends queries with relevant public catalog information to TypeSafe’s Jev service to rank providers. Kaleto stores search queries and operational search metadata in its service database, hosted on Amazon Web Services with PlanetScale. To enforce rate limits and detect automated abuse, it also records the requesting app’s self-reported name, and for searches made without signing in, an identifier derived from the network address that changes every day and cannot be turned back into the address. Kaleto does not store the address itself.
The ChatGPT explorer does not collect your host identity, request your device location or create a saved list. It displays provider results and details without loading third-party maps.
Kaleto’s website discovery interface accepts search arguments, not an entire assistant conversation. The text supplied as a query can still contain information you or the assistant include. Your assistant provider independently handles conversations and tool results under its own privacy policy. Review that policy before sharing personal information with an assistant.
4. Website analytics
Where enabled, the website uses PostHog for page and selected interaction analytics in cookieless mode, with person profiles, automatic interaction capture, and session recording disabled. The website filters fields such as email addresses, names, prompts, messages, and current page URLs from analytics events. Hosting and security services may separately process technical request information.
PostHog processes the site hostname, browser user agent and network request information to estimate daily visitors. Page events also record the public page path, the referring site’s domain, campaign tags and ad click identifiers in the page link, browser, operating system, device type and screen size, and an approximate country and state or region that our hosting provider derives from the request, never a city, precise location or IP address. We measure search outcomes, provider website clicks, and confirmed waitlist or inquiry submissions without including the submitted email or search text. Cookieless analytics still involves processing usage and technical information; it does not mean that no data is collected. This site does not currently change its behavior in response to a browser’s Do Not Track signal.
Public marketing pages also use Cloudflare Web Analytics to measure visits, page views, and page performance without analytics cookies. Cloudflare receives public page paths, referrer information, browser and device information, and technical request information; its beacon removes query strings and URL fragments. This tracker is not loaded on account, sign-in, onboarding, booking, class, or connected-assistant authorization pages. Navigation into those areas starts a separate document so the public-page tracker does not continue running there.
5. When information is shared
Information is processed by service providers supporting hosting, discovery, inquiry handling, analytics, and security as needed to deliver those functions. Provider listing information is public and may be returned to website visitors and connected assistants. Contact inquiries are forwarded to Kaleto’s inquiry service for follow-up.
Information may also be disclosed when required by law, to address fraud or security threats, protect legal rights, or in connection with a business transfer, subject to applicable legal requirements. Following a provider link takes you to an independent website; information you submit there is governed by that provider’s policy.
The current website does not use advertising pixels or behavioral advertising features. Public provider information is shared as part of the discovery service.
6. Children’s information
Kaleto’s discovery service is intended for adult parents, caregivers, and provider representatives, even though the programs listed serve children. It does not offer child accounts or ask children to submit personal information. Adults should describe activity preferences without identifying a child or providing sensitive details.
If you believe a child has submitted personal information through Kaleto, contact us so we can investigate and address the information, including deletion where appropriate. Enrollment information collected directly by a camp or other provider is governed by that provider’s practices.
7. Retention and security
We retain information for the purposes described here, including responding to inquiries, maintaining useful provider listings, operating and securing the Services, and satisfying legal obligations. The period depends on the information and purpose. You can contact us to request deletion of personal information, including inquiry information and identifying information included in a search.
Raw discovery queries, the locations typed with them and the daily network identifier become eligible for redaction after 30 days. Each month, a small sample of searches, with names, street addresses and contact details removed, is kept to evaluate search quality. Cleanup runs in scheduled batches; outages or a backlog can delay redaction. Operational search metadata, including region, timing, outcome and returned provider identifiers, remains after query redaction. It currently has no automatic deletion deadline. Contact us about identifying information included in a query or a request to delete it.
We use measures designed to protect information, but no online service or transmission is completely secure. Service providers may process information outside your state or country, where data protection laws may differ.
8. Your choices and requests
You can choose not to submit an inquiry, limit personal information in searches, and review your assistant’s privacy controls. Providers can request corrections to or removal of their listing information. Copies obtained by independent websites or assistants are controlled by those third parties.
Depending on your location and applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to or restrict certain processing. Use the contact method below to make a request. We may need information to verify your identity and authority before acting, and some information may need to be retained for legal or security reasons.
9. Policy updates
We will update this page and its date when our practices change and provide any additional notice required by law. This page distinguishes the discovery plugin from separately available account and workspace services. Changes to how these services handle information will be reflected here.
Contact Kaleto
For questions about these policies, privacy requests, or corrections to provider information, email [email protected] or use Kaleto’s contact form. With the form, submit your email address so our team can follow up; you can describe your request when we reply. Do not include sensitive information about a child in an initial inquiry.