Effective date: October 22, 2026
Who we are
Key Advisor Tools (KAT) is operated by First Oregon LLC. Our website is https://keyadvisortools.com/. This policy explains how we handle information associated with our website, subscriber accounts, Advisor Workstation, CRM, and related services.
If an advisor or firm uses KAT to maintain information about you, that advisor or firm is responsible for its own client privacy notices and instructions to us. This policy does not replace the privacy policy of your advisor or financial institution.
Information we collect and how we use it
Account and subscription information. We collect information you provide when registering or managing an account, such as your name, business email, firm name, profile and branding details, and subscription selections. We maintain account-access, subscription-status, and agreement-acceptance records to administer the service, verify eligibility, document billing consent, and communicate about your account.
Workspace information. Depending on the tools you use, you or your firm may enter contacts, household information, notes, tasks, appointments, planning assumptions, financial information, uploaded documents, and generated reports. We process this information to provide the requested tools, save your work, support authorized collaboration, and respond to support requests.
Support and technical information. We collect the information you submit in support tickets and feedback, including your email, message, and any attachment you choose to provide. Website and security systems may also record IP addresses, browser and device information, page requests, and access or error logs. We use these records to operate, troubleshoot, improve, and protect the service and prevent misuse.
Payments and Stripe
Subscription payments are processed through Stripe. Information sent to Stripe can include your email, account reference, selected subscription, and billing-consent details. Stripe collects the payment information you enter in its checkout. KAT receives transaction and subscription references and status information needed to administer access and billing; the KAT registration form does not collect your full card number or card security code. Stripe’s handling of payment information is described in its Privacy Policy.
Client records, teams, and authorized access
Access to CRM and planning records depends on the workspace, account permissions, and sharing features in use. Records shared with a team may be available to authorized team members or firm administrators. Authorized KAT administrators may access information as needed to operate the platform, provide support, investigate problems, or protect the service.
Subscribers are responsible for having the authority to upload and use client information, selecting appropriate collaborators, and following their firm’s privacy and recordkeeping requirements. Upload only the information needed for the task. Do not put client account numbers, passwords, verification codes, or other sensitive information in public comments or general support messages.
AI features and connected services
When you use an enabled AI feature, your prompt and relevant supporting content may be transmitted to an AI service provider, including OpenAI, to produce a response. Review the information you submit and avoid unnecessary client identifiers or confidential information. If you use a microphone feature, your browser or speech service may process audio to convert it to text, subject to its permissions and privacy practices.
If you or your firm connects an external service, information needed for the selected function may be exchanged with that service under the granted permissions. External providers have their own privacy policies and retention practices. Disconnecting a service does not necessarily delete information previously sent to it.
Cookies and website statistics
We use cookies and similar browser storage to support sign-in, account sessions, preferences, and website functions. WordPress may set a temporary cookie to check whether your browser accepts cookies. Sign-in cookies keep you authenticated, and a “Remember Me” selection may extend the session. Display-preference and editing cookies may remain after a browsing session. Logging out removes the sign-in cookies associated with that session.
If comments are enabled and you choose to save your name, email, and website for future comments, WordPress may store those details in convenience cookies for up to one year. You can manage or delete cookies in your browser; blocking them may prevent sign-in or other features from working.
We use Burst Statistics to understand website visits and use. Its analytics information is stored within this website. For more information about the tool, see the Burst Statistics Privacy Statement.
Comments, uploaded media, and embedded content
If you leave a comment where comments are enabled, we collect the information in the comment form, together with your IP address and browser information for spam detection. Comments may be checked by an automated spam-detection service. If Gravatar is used, a hash derived from your email may be sent to that service to retrieve a profile image, which can appear publicly alongside an approved comment. See the Automattic Privacy Policy.
Images and documents can contain hidden metadata, including location information. Remove unnecessary metadata before uploading, particularly from files intended for publication or sharing. Anyone who can download a shared file may also be able to read its embedded metadata.
Pages may include videos, images, or other content supplied by another website. Loading or interacting with embedded content can allow that provider to receive technical information, use cookies, or associate the interaction with an account you have with it. Links to other websites are subject to those websites’ privacy practices.
When information is shared
Information may be processed by providers supporting hosting, payments, email delivery, backups, security, analytics, AI, and other enabled services. We also share information with authorized workspace participants as described above and with services you or your firm chooses to connect. Providers may process information in the countries where they operate.
We may disclose information when required by law or lawful process, to investigate misuse or protect rights and security, or in connection with a business transfer subject to applicable privacy obligations. Account-recovery messages may include technical information associated with the request.
How long information is retained
Retention depends on the type of information and why it is held. Account and workspace information is retained as needed to provide services and support, maintain security and audit records, resolve disputes, and meet applicable legal or contractual obligations. Billing and agreement records may need to be retained after a subscription ends.
If comments are enabled, approved comments and their metadata may be retained indefinitely to support follow-up discussion and moderation. Backups, deletion-recovery copies, and compliance archives may follow separate retention schedules. Deleting an item or closing an account does not necessarily remove every retained copy immediately. Firm-directed compliance retention or a legal hold can limit deletion.
Your choices and privacy requests
You can review and update information through the account and tool settings available to you. You may also request access to, correction of, an export of, or deletion of personal information associated with you. Depending on your location and applicable law, additional rights may apply, including rights to restrict or object to certain processing or appeal a decision about a privacy request. Requests are subject to identity and authority verification, the rights of others, and applicable retention requirements.
To make a request, use our Support / Suggestions form and enter “Privacy request” in the subject. Include your contact email and a brief description; do not attach sensitive client records or identification documents to the initial ticket. The form is available even if you cannot sign in. If the request concerns records maintained by an advisor or firm, contact that advisor or firm first so it can authorize or coordinate the response.
Security, children, and policy updates
Account authentication, access controls, and other administrative and technical measures help protect information. No online service or method of transmission is completely secure. Protect your credentials, use available account-security features, and report suspected unauthorized access through the support form.
KAT is a professional platform intended for adult users, not for children to register or use independently. Advisors may enter information about dependents when authorized and relevant to a client’s planning needs.
We may update this policy as our services or practices change. The effective date above identifies the current version. We will provide additional notice when required by applicable law. For questions about this policy or our handling of information, contact First Oregon LLC through the KAT Support / Suggestions form.