KultaPrivacy notice

Security

What Kulta can reach, and what it never does.

Kulta works inside the tools you already use: your CRM, your calendar, your inbox. This page says, in plain words, what it can reach there, what it does with it, and what it never does.

This page describes how Kulta works as of the date on it. Where something is still on the way, we say so.

Last updated 1 November 2026

  • Steve asks before he actsHe drafts. Nothing he proposes happens until you tap Approve.
  • Only what it needsEach connection's permissions, published below and checked against our code.
  • Keys encrypted at restConnection keys are encrypted before they are saved.
  • Claude doesn't train on itAnthropic's API terms don't allow it.

Contents

  1. 1.Steve asks first
  2. 2.What each connection can do
  3. 3.Encryption
  4. 4.Buyers' details
  5. 5.No AI training
  6. 6.Disconnecting and deleting
  7. 7.Who handles data for us
  8. 8.What we're working toward
  9. 9.Report an issue

1.Steve reads; he doesn't act

Steve reads across the tools you connect and answers with sources. He drafts nothing, sends nothing and changes nothing in your tools: our server refuses any write. What needs doing, you do in the tool itself.

While he works, you see each step as he takes it, including which of your services he is reading, and his answers link back to where they came from.

Kulta removes the phone numbers and email addresses it recognizes from what it sends to the AI behind Steve. It matches patterns, so one written in an unusual way, sitting in a scanned page or typed into your question can still reach the AI.

What happens on its own, and what you control:

  • When a buyer finishes a tour at your open house, they're added to the CRM you connected. That is what connecting it is for.
  • When a buyer opens their tour, the CRM you connected is told they viewed it, at most once every six hours.

2.What each connection can and can't do

Every service you can connect, the exact permissions Kulta asks it for, and what they're used for. Not every connection is open to every account yet; Settings shows the ones you can turn on. A test in our code fails if a connection ever asks for a permission that isn't listed here.

Sign-in and calendar

  • Sign in with Google

    Connects with one tap

    Nothing beyond your name and email address. Google signs you in; the calendar is its own connection below.

    What for
    Your name and email address, to sign you in.
    Limits
    Never sees your Google password.

  • Gmail and Google Calendar (through Composio)

    Connects with one tap

    Composio's Google app asks Google for Gmail and Calendar access; Google's own consent screen lists exactly what it holds. Kulta uses only these calls through it: reading mail, saving a draft you approved, and reading, adding and moving calendar events.

    What for
    Reads replies when you ask, saves a reply you approved as a draft in your own Gmail thread, offers buyers your free times and adds a requested showing to your calendar.
    Limits
    Kulta never sends email through it: no send call exists in Kulta's code. Nothing read is stored.

  • Google Calendar

    Connects with one tap
    • calendar.freebusySee when you're busy (not what the events are)
    • calendar.eventsRead, add and move events on your calendars
    What for
    Offers buyers showing times when you're free, adds a requested showing to your calendar, and finds your open houses for Marketing Autopilot.
    Limits
    A buyer only ever sees which times are free, never what is on your calendar.

  • Outlook Calendar

    Connects with one tap
    • offline_accessStay connected without signing in again
    • Calendars.ReadWriteRead your calendar and add events to it
    • User.ReadYour name and email address
    What for
    Offers buyers showing times when you're free and adds a requested showing to your calendar.
    Limits
    A buyer only ever sees which times are free, never what is on your calendar.

Email

  • Gmail: drafts

    Connects with one tap
    • gmail.composeSave drafts in your Gmail
    What for
    Saves a reply Steve drafted as a draft in your own Gmail thread, after you approve it. You send it yourself; Kulta never sends email.
    Limits
    Kulta never sends with it, and it can't read your inbox. Reading replies is a separate permission you'd grant on its own.

  • Gmail: read replies

    Connects with one tap
    • gmail.readonlyRead your email
    What for
    When you ask, Steve looks at the last 30 days of incoming mail (sender, subject and a short preview) for replies from people you already work with.
    Limits
    Mail from anyone who isn't your visitor or contact is dropped before Steve sees it. Nothing read is stored, and nothing is changed, moved or deleted.

  • Outlook: send email

    Connects with one tap
    • offline_accessStay connected without signing in again
    • Mail.SendSend email as you
    • User.ReadYour name and email address
    What for
    Sends an email Steve drafted, from your own address, after you approve it.
    Limits
    Kulta never sends with it, and it can't read your inbox. Reading replies is a separate permission you'd grant on its own.

  • Outlook: read replies

    Connects with one tap
    • offline_accessStay connected without signing in again
    • Mail.ReadRead your email
    • User.ReadYour name and email address
    What for
    When you ask, Steve looks at the last 30 days of incoming mail (sender, subject and a short preview) for replies from people you already work with.
    Limits
    Mail from anyone who isn't your visitor or contact is dropped before Steve sees it. Nothing read is stored, and nothing is changed, moved or deleted.

Phone

  • RingCentral

    Connects with one tap

    RingCentral ignores scopes on the connect screen: Kulta's app is registered with ReadCallLog, ReadMessages and SubscriptionWebhook only, never call control.

    What for
    Shows when you called or texted each person, and missed calls and voicemails, on their timeline and the listing they're about, with a link back. Kulta keeps when and who, as a hash of the number, never what was said.
    Limits
    Our code only reads, plus one webhook subscription for new texts and voicemails: it has no way to call, text or change anything.

CRM

  • Follow Up Boss

    Connects with one tap

    Follow Up Boss has no permission levels: a connection reaches your account through its API, so the limits are in our code.

    What for
    Adds open-house visitors and tour opens to your contacts. Steve reads your contacts, and adds notes, tasks, stage or tag changes and tours only after you approve each one.
    Limits
    Kulta can't send a text or an email through Follow Up Boss (its API only records them). Your own Follow Up Boss action plans may still fire when a visitor is added; that's your setup, not ours.

  • HubSpot

    Connects with one tap
    • oauthConnect to your account (HubSpot's required base permission)
    • crm.objects.contacts.readRead your contacts
    • crm.objects.contacts.writeAdd and update contacts
    What for
    Adds open-house visitors to your contacts with a note. Steve reads contacts and proposes notes, tasks and updates for you to approve.
    Limits
    No access to deals, companies, email or anything outside contacts.

  • Wise Agent

    Connects with one tap
    • contactsRead your contacts and their notes
    • teamRead your tasks
    • profileTell Kulta when something changes (Wise Agent files its change alerts under this)
    What for
    Shows your tasks due today on Home, and your contacts' notes on their timeline and the listing they name. Steve reads them when you ask.
    Limits
    Our code only ever reads; it subscribes Wise Agent's change alerts and nothing else. No contact, task or note is created or changed.

  • BoomTown

    Connects with one tap
    • allBoomTown's one permission: account access through its API
    What for
    Shows your to-dos due today on Home, and your leads' notes on their timeline and the listing they name. Steve reads them when you ask.
    Limits
    BoomTown's permission would allow changes, so our code only ever reads; it subscribes BoomTown's change alerts and nothing else.

  • MoxiWorks

    Connects with a pasted key

    Nothing to paste: MoxiWorks confirms your Kulta email is one of its agents, and your brokerage decides which partners may read its agents' data.

    What for
    Shows your MoxiEngage tasks due today, your contacts' activity and your MoxiPresent presentations. Steve reads them when you ask.
    Limits
    Our code only ever reads MoxiWorks: no contact, task or presentation is created or changed.

  • BoldTrail, Sierra, Brivity

    Connects with a pasted key

    You paste an API key from your CRM. It carries whatever access that CRM gives its keys.

    What for
    Adds open-house visitors to your contacts. In BoldTrail, Steve can also read contacts and propose changes for you to approve.
    Limits
    The key is stored encrypted, and Steve never sees it.

Files and marketing

  • Google Drive

    Connects with one tap
    • drive.fileOnly files you pick, and files Kulta makes
    What for
    Brings in listing photos you pick, and saves packages Kulta makes to your Drive.
    Limits
    Can't see anything else in your Drive.

  • Google Drive: keep a folder in sync

    Connects with one tap
    • drive.readonlyRead your Drive
    What for
    Keeps a folder you choose in step with a listing's documents, including files added later.
    Limits
    Read-only: nothing in your Drive is ever changed. A separate permission from the one above.

  • Dropbox

    Connects with one tap
    • files.metadata.readSee file names in Kulta's folder
    • files.content.readOpen files in Kulta's folder
    • files.content.writeSave files to Kulta's folder
    What for
    Brings in photos you drop in Kulta's folder, and saves packages and films there.
    Limits
    Kulta's Dropbox app is registered for a single app folder; it can't see the rest of your Dropbox.

  • Canva

    Connects with one tap
    • profile:readYour Canva profile
    • asset:readSee images you've uploaded
    • asset:writeUpload images
    • design:meta:readSee your designs' names
    • design:content:readOpen your designs
    • design:content:writeCreate designs
    • brandtemplate:meta:readSee your brand templates' names
    • brandtemplate:content:readOpen your brand templates
    What for
    Starts a new design with a listing's photo and words, from your brand template when your plan has them.
    Limits
    Makes new designs only. It doesn't edit or delete the ones you have.

  • Google Business Profile

    Connects with one tap
    • business.manageManage your Business Profile
    What for
    Reads your recent reviews. Nothing is replied to or posted from Kulta.
    Limits
    Nothing is published without your tap.

  • Mailchimp

    Connects with one tap

    Mailchimp has no permission levels: a connection reaches your account through its API, so the limits are in our code.

    What for
    Lists your audiences and creates draft campaigns in your Mailchimp.
    Limits
    Never sends a campaign on its own. Sending takes a separate approval that names how many people it goes to.

  • BombBomb

    Connects with one tap
    • video:readSee your videos
    • email:manageSee your video emails (BombBomb has no read-only email scope)
    • webhook:managePoint BombBomb's activity updates at Kulta
    What for
    Reads your video emails and videos, and BombBomb's own updates on who opened, clicked or played them, onto each person's timeline.
    Limits
    Never sends, edits or deletes an email or a video; the one change it makes is adding Kulta's webhook when you connect.

Social

  • LinkedIn

    Connects with one tap
    • openidSign-in identity
    • profileYour name and photo
    • w_member_socialPost to your own feed
    What for
    Shares a listing post to your own feed after you approve it.
    Limits
    Can't read your messages, connections or anyone else's posts.

  • Instagram

    Connects with one tap
    • instagram_basicYour professional account's name
    • instagram_content_publishPublish posts and Reels
    • pages_show_listFind the Facebook Page linked to it
    • pages_read_engagementRead that Page's details
    • business_managementReach accounts in your Business portfolio
    What for
    Publishes a listing film or post to your professional account, when you approve it or schedule it.
    Limits
    Can't read or send your direct messages.

  • Meta Lead Ads

    Connects with one tap
    • leads_retrievalRead the leads your lead ads collect
    • pages_show_listFind the Pages your lead ads run on
    • pages_read_engagementRead those Pages' details
    • pages_manage_metadataSubscribe Kulta to new leads on those Pages
    • pages_manage_adsReach the lead forms on those Pages
    • ads_managementReach the ad account the lead forms belong to
    What for
    Each Facebook and Instagram lead form submission lands on People, read-only.
    Limits
    Can't post, run, change or pay for ads, and can't read your messages.

  • TikTok

    Connects with one tap
    • user.info.basicYour display name
    • video.uploadUpload a draft video
    What for
    Sends a listing film to your TikTok inbox as a draft.
    Limits
    Can't post for you: you finish and post it in the TikTok app.

Transactions

  • DocuSign

    Connects with one tap
    • signatureDocuSign's one eSignature permission
    • extendedStay connected without signing in again
    What for
    Shows which envelopes are out for signature and who they're waiting on, and imports signed PDFs into a listing's documents.
    Limits
    DocuSign's permission would allow changes, so our code only ever reads: it has no way to send, void or edit an envelope.

  • dotloop

    Connects with one tap

    dotloop sets an app's permissions when it registers it, not on the connect screen. Our code only reads.

    What for
    Shows your loops' status and open tasks, and imports their PDFs into a listing's documents.
    Limits
    Our code only ever reads: it has no way to change a loop.

  • Dropbox Sign

    Connects with one tap

    Our code only ever reads; the app's permissions are set in Dropbox Sign's app settings.

    What for
    Shows your signature requests: who has viewed and signed, and whose turn it is, on the listing each is about.
    Limits
    Our code only ever reads: it has no way to send, remind, cancel or sign a request.

  • Rechat

    Connects with one tap

    Rechat's sign-in asks for no scopes; its access is the brand you pick on its screen. Our code only reads.

    What for
    Shows each deal's checklists and tasks in Rechat's order and status on the deal, and proposes the dates it states for you to confirm.
    Limits
    Our code only ever reads: it has no way to change a deal, a checklist or a task.

3.Your connections are locked away

When you connect a service, the keys it gives us (and any API key or webhook address you paste) are encrypted before they're saved, with AES-256-GCM and a key kept apart from the database. They are only unlocked on our server, at the moment Steve or Kulta needs to reach that service for you.

Everything between your browser and Kulta travels over HTTPS, and browsers are told to accept nothing else. Our calls to the services on this page use HTTPS too.

Kulta's pages can't be embedded in another site, the trick behind most fake-button attacks. The one exception is the panel built to sit inside Follow Up Boss.

4.What buyers' details go where

Buyers are told what happens to their answers before they share them, in the privacy notice. Here is its sentence about your CRM, word for word:

The CRM your agent connects (such as Follow Up Boss), or their CRM's lead email address, if the agent uses one to keep their client list, receives your name, your email address, your mobile number, the address of the house, the link to your page, and a one-line summary of your answers: how many adults and children are in your household, your pets, the things you love doing, and where you commute. It is sent automatically when you finish. Afterwards, when you open your tour page, Follow Up Boss is told that you opened it — at most once every six hours. It never receives your children’s ages or anything you wrote in your own words. What the agent’s account there does next, including any message it sends you, is set by the agent.

The full notice covers everyone else who sees a buyer's answers, and how they delete them. Read the privacy notice.

5.Claude doesn't train on your data

The AI that writes tour captions and helps Steve is Claude, from Anthropic, used through Anthropic's paid API. Anthropic's API terms don't allow it to train its models on what we send.

It is in section B of Anthropic's commercial terms.

We don't sell your data or your buyers' data, and we don't use it to advertise to anyone.

6.Disconnecting and deleting

Disconnect any service in Settings and we delete our saved keys for it straight away. For Google Calendar, Follow Up Boss and TikTok we also ask them to cancel the access. For the others, you can also remove Kulta from that service's own list of connected apps to cut it off at the source.

Any buyer can permanently delete their details and their tour from their own link, and you can do the same for them with one button. It happens immediately.

There's no self-serve button yet. Email us and we'll delete your account and its data by hand within 30 days, and confirm when it's done. Copies already in your own CRM or inbox are yours to delete. Write to jrsalk@gmail.com.

7.Who handles data for us

The services Kulta runs on in production, and what each one does.

ServiceWhat it does
VercelHosts Kulta and runs its code. Also stores uploaded files, like listing photos, and tour narration audio (Vercel Blob).
SupabaseOur database, and the sign-in sessions.
AnthropicClaude writes tour captions and photo captions, and helps Steve read and draft.
CartesiaThe narrator's voice on tours, and your own voice if you choose to record one.
ResendSends Kulta's emails, such as a buyer's page when they ask for it.
Google (sign-in and Maps Platform)Signs you in with your Google account. Maps, nearby places and drive times, which receive listing addresses, place searches, and the place a buyer says they commute to.
UpstashShort-lived counters that stop anyone flooding Kulta with requests. They're keyed by network address or account, and each expires with its time window, a day at most.
Follow Up BossReceives open-house visitors and tour opens, as the privacy notice describes, when an agent connects it.
StripeTakes card payments and runs subscriptions. Your card never touches Kulta.
SentryRecords errors so we can fix them, with personal details scrubbed first.
ComposioConnects some of the outside tools you choose to link.
ParallelRuns web research for Steve. Receives the question and the listing's address.
RentCast, Shovels, ATTOM, Regrid and ZillapiProperty, permit, parcel and comparable-sale data. They receive listing addresses.
Vercel AI GatewayRuns the image model behind virtual staging, which receives the listing photo. When switched on, it also makes documents and client notes searchable and transcribes voice notes, so it receives their words and audio.
Google Document AIWhen switched on, reads scanned pages in documents you upload so Steve can quote them. Receives those pages, which can include names and contact details.
LangfuseRecords how Steve ran, for debugging and quality: models, tokens, timings, tool names and ids, including agent ids and usage. Not what was said.
LobPrints and mails postcards you approve. Receives the recipient's name and address.

Free public map and reference services (OpenStreetMap, Wikimedia, NOAA, USGS and the US Census Bureau) receive the listing's address or coordinates and place names; nothing about your buyers.

8.What we're working toward

Kulta does not have a SOC 2 report and has not had an independent penetration test yet. Both are on our roadmap, along with disconnecting at every provider in one tap and a full log of what Steve has done.

9.Report a security issue

If you think you've found a security problem in Kulta, please tell us privately before telling anyone else, with enough detail for us to see it. We'll reply, fix what's real, and tell you when it's done.

Email jrsalk@gmail.com

Last updated 1 November 2026

Kulta
HomePricingPrivacy notice