AppetiteAI Privacy Policy

Last updated: 2 October 2026

AppetiteAI is made by Kitchen Labs. It helps an insurance agency find which carriers will write a risk, using the carriers' appetite guides and the agency's own book of business. This page says, in plain English, what happens to your information.

The short version

AppetiteAI is a private tool: only accounts we have set up can sign in, and there is no public sign-up. Anyone can try the demo, which uses made-up data and saves nothing.
Your account, carrier library, uploaded files and book of business are stored privately for your account. Nobody else can see them.
When you upload a guide, search, ask about your book or scan your inbox, the text needed for that one request is sent to a third-party AI service to read it. Nothing is sent on a schedule.
If you connect Outlook, AppetiteAI can read your mail, only when you click Scan inbox now. It can never send, change or delete an email.
No ads, no analytics, no tracking, and we never sell or share your data.

What we store, and why

Your account. Your email address and password (stored by our database provider, Supabase, as a secure hash we can't read) and the name on your account.

Your carrier library. For each carrier: its name, the lines of insurance it writes, the business classes it accepts and excludes, limits, states, commission, notes, and an AM Best rating if the guide states one. This is what search reads.

Files you upload. Appetite guides and book-of-business exports are kept in a private storage folder that only your account can open, so you can see where each carrier came from. Deleting a document in Activity removes it from the list; the file itself stays in your private folder until you ask us to delete it or your account.

Your book of business. From the spreadsheet export of your agency management system we keep, for each policy line: effective date, industry code and description, coverage line, state, premium, commission, status, the issuing carrier, premium payee, billing mode, whether it's financed, branch and your agency's policy category and code. We don't read the insured's name or contact details from the file, but the original file you uploaded is kept in your private folder.

Outlook, if you connect it. The Microsoft sign-in gives us an access token and a refresh token, which we store so the scan can run when you click it, plus the email address of the mailbox. We record each scan's counts (emails checked, guides found, guides added). Appetite guide attachments found by a scan are saved like uploads. We do not store email bodies.

A usage count. How many AI requests your account made today, per kind (for example "12 searches"), so we can apply a fair daily limit. It resets every day.

What is sent to the AI service

AppetiteAI uses a third-party AI service to read documents and questions. Only what a request needs is sent, and only when you ask for it:

Uploading a guide: the text of the guide (for long guides, the parts about appetite), or the picture if you upload a photo.
Searching: your question, the last few messages of the conversation, and the parts of your carriers' appetite that relate to it.
Asking about your book: your question, your book's coverage codes and the industry names that relate to it. Premiums and carrier totals are counted by our own code, not sent.
Scanning your inbox: for each of your 25 newest emails with attachments, the sender, the subject, the attachment names and sizes, and the first 600 characters of the email, so the AI can say which attachments are appetite guides; then the text of up to five of those guides.

Our AI provider processes these under its API terms: it does not use them to train its models, and may keep them for up to 30 days for abuse monitoring. Kitchen Labs doesn't keep the AI's working copies beyond saving the results to your library.

Microsoft permissions

AppetiteAI asks for Mail.Read (read your mail), User.Read (your name and email address) and offline_access (so a scan works without signing in each time). You can disconnect in Settings, and remove access completely in your Microsoft account's app permissions.

The demo

The demo runs on made-up carriers, a made-up agency and a pretend inbox. It sets one cookie that switches your browser to the sample data. Nothing you do in the demo is stored or sent anywhere, and uploading your own files is turned off.

Deleting your data

Delete carriers in Carriers and documents in Activity, and disconnect Outlook in Settings. To delete your whole account and everything in it, email us and we'll do it within seven days.

Children

AppetiteAI is a business tool, not directed at children under 13, and collects no personal information from them.

Changes and contact

If this policy changes, we'll update the date above. Questions? Get in touch through our contact page.