Privacy Policy

Introduction

Kayden Connect LLC (“Kayden Connect”, “we”, “us”, or “our”) is a Wyoming limited liability company with its registered office at 30 N Gould St Ste R, Sheridan, WY 82801, USA. We operate the Kayden Connect platform at app.kaydenconnect.com and the marketing website at www.kaydenconnect.com.

This Privacy Policy describes the personal data we collect about you, how we use it, who we share it with, and the rights available to you under the EU and UK General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act (“CCPA”) as amended by the CPRA, the South African Protection of Personal Information Act (“POPIA”), and other applicable data protection laws.

Data We Collect

Information you provide directly

• Account data: name, work email, company name, job title, country
• Billing data: handled by Stripe: we receive country, last four digits, and expiration of the card; we do not store full card numbers
• Tenant content: posts, comments, messages, knowledge-base articles, uploads
• Support communications: tickets, contact form submissions, survey responses

Information collected automatically

• Usage data: pages visited, features used, session duration, error reports
• Device data: browser type, operating system, screen resolution, language
• Network data: IP address (truncated for analytics), approximate region
• Cookies and similar technologies. See our Cookie Policy

Marketing analytics

When you visit our marketing site, we may receive analytics data via Google Analytics 4, the Meta Pixel, and the LinkedIn Insight Tag, subject to your cookie consent. We also record marketing-site form submissions in Google Analytics on our servers, as described in the “Your California Privacy Rights” section below.

How We Use Your Data

• To provide, operate, secure, and maintain the Kayden Connect platform
• To process subscriptions, taxes, and billing through Stripe
• To send transactional messages (account verification, billing alerts, security notices, service announcements)
• To send marketing communications where you have given consent (opt-out at any time)
• To improve our services through aggregated analytics and product telemetry
• To detect, prevent, and respond to fraud, abuse, and security incidents
• To comply with legal, tax, and regulatory obligations

Legal Bases for Processing

Where GDPR or UK GDPR applies, we rely on the following legal bases under Article 6:

• Contract (Art. 6(1)(b)): to provide the platform and fulfil our obligations under the Terms of Service
• Legitimate interests (Art. 6(1)(f)): to keep the service secure, prevent fraud, improve the product, and conduct limited B2B direct marketing to existing customers
• Consent (Art. 6(1)(a)): for non-essential cookies and prospect marketing emails — you may withdraw consent at any time
• Legal obligation (Art. 6(1)(c)): to retain billing records, respond to lawful requests, and comply with tax law

Sub-processors & Sharing

We engage the sub-processors below to operate the Kayden Connect platform. Separately, on our marketing website, we use the advertising and analytics technologies described in the “Your California Privacy Rights” section below, which load only if you opt in and which, under the CCPA, may involve a “sale” or “share” of personal information for cross-context behavioural advertising. That section explains how to opt out. We do not receive monetary payment in exchange for your personal information.

The current list is also published at our Sub-processors page, which we update when changes occur.

We also disclose personal data when required by law, to enforce our Terms of Service, or in connection with a corporate transaction (with appropriate confidentiality protections).

International Data Transfers

Your personal data is primarily processed in the European Union (Google Cloud europe-west1, Belgium). Some sub-processors are located in the United States and other third countries. Where personal data is transferred outside the EEA, UK, or South Africa, we rely on the European Commission’s Standard Contractual Clauses (“SCCs”), the UK International Data Transfer Addendum, and supplementary measures appropriate to the transfer. A copy of the SCCs we rely on can be requested from legal@kaydenconnect.com.

Data Retention

• Active account and tenant content: retained while your subscription is active
• Cancelled accounts: our target is to permanently delete workspace content within 60 days of cancellation, per the lifecycle described in our Terms, and a self-serve data export tool is available throughout that window. Scheduled deletion is currently being automated; until it ships, deletion is processed on request — email privacy@kaydenconnect.com.
• Trial accounts that expire without conversion: hard-locked on day 14, deletion warning email on day 23, and a target permanent purge on day 44. The purge schedule is being automated; until it ships, purges are processed on request.
• Billing records: 7 years (tax and accounting requirements)
• Audit and security logs: 90 days (Spark and Command) or the life of the subscription (HQ). Time-based deletion is being automated; until that ships these logs are removed when the workspace is deleted.
• Aggregated, de-identified analytics: retained without time limit

Your Rights

Rights under GDPR and UK GDPR

• Access: request a copy of personal data we hold about you
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion (subject to legal retention obligations)
• Portability — receive your data in a structured, machine-readable format
• Restriction — limit how we process your data while we investigate a request
• Object — object to processing based on legitimate interests, including direct marketing
• Withdraw consent — at any time, without affecting processing carried out before withdrawal
• Complain: to your local supervisory authority. EU residents can identify their authority at edpb.europa.eu; UK residents may contact the ICO at ico.org.uk.

Your California Privacy Rights (CCPA/CPRA)

This section applies to residents of California and explains how the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), applies to the personal information we handle about you. Terms such as “sell,” “share,” and “cross-context behavioural advertising” have the meanings given to them in the CCPA.

Categories of personal information. In the twelve months before the date at the top of this page, we collect the categories of personal information described in “Data We Collect” above. These include identifiers (such as your name and work email); professional or employment-related information (such as your job title and company); commercial information (such as subscription and billing records); internet or other electronic network activity (such as pages visited, features used, and device information); and approximate geolocation derived from your IP address. We collect this information from you directly, from your use of our services, and from the sub-processors identified in this policy. We do not collect government identifiers or precise geolocation.

How we disclose personal information, and “sale”/“share.” We disclose personal information to the service providers and sub-processors listed in this policy for the business purposes described above. Separately, on our marketing website only, and only if you opt in to analytics or marketing cookies, we load third-party advertising and analytics tags in your browser — Google Analytics 4, the Meta Pixel, and the LinkedIn Insight Tag — that transmit online identifiers and activity information to those providers. Depending on how each provider uses that information, this activity may constitute a “sale” or a “share” for cross-context behavioural advertising as those terms are defined under the CCPA. Separately from cookies, when you submit a form on our marketing site (such as a contact, newsletter, or quiz form), we record that submission in Google Analytics on our servers using a first-party identifier, so we can measure whether our marketing works; this measurement does not use advertising cookies and does not depend on your cookie choices. We do not receive monetary payment in exchange for your personal information, and we do not knowingly sell or share the personal information of consumers we know to be under 16 years of age.

Your rights. Subject to the exceptions in the CCPA, California residents have the right to:

• Know and access the categories and specific pieces of personal information we have collected, the sources, the business or commercial purposes for collecting it, and the categories of third parties to whom we disclose it
• Delete personal information we have collected from you
• Correct inaccurate personal information
• Opt out of the “sale” or “sharing” of personal information
• Non-discrimination — you will not receive different pricing, service, or quality for exercising these rights

How to opt out of “sale” or “sharing.” Open our Cookie Preferences page and turn off analytics and marketing cookies. This stops the advertising and analytics technologies described above from loading and deletes the advertising and analytics cookies we set; any cookies those providers have already placed will expire on their own, and you can clear cookies in your browser at any time. You may also decline these cookies when our consent banner first appears.

How to exercise your other rights. To make a request to know, access, delete, or correct, email us at privacy@kaydenconnect.com. We will acknowledge and respond to verifiable requests within the time the CCPA requires (generally 45 days, which we may extend once where reasonably necessary, in which case we will tell you). To protect your information, we will take reasonable steps to verify your identity before acting on a request, and we will not require you to create an account solely to make one.

Authorised agents. You may use an authorised agent to submit a request on your behalf. We may ask the agent for proof of your written permission and may ask you to verify your identity directly with us.

Browser opt-out signals. Our marketing website does not currently detect or respond to browser-based opt-out preference signals such as the Global Privacy Control (GPC). Please use the Cookie Preferences page to opt out of the technologies described above.

Contact. Questions about your California privacy rights can be sent to privacy@kaydenconnect.com, or by post to Kayden Connect LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA.

Rights under POPIA (South Africa)

• Access to personal information we hold
• Correction or deletion of inaccurate or excessive information
• Object to processing on reasonable grounds
• Lodge a complaint with the Information Regulator at inforegulator.org.za

To exercise any of these rights, email privacy@kaydenconnect.com. We will respond within 30 days (or the shortest period required by applicable law). Verification of your identity may be required.

Cookies

We use strictly-necessary, performance, and marketing cookies. For details on the cookies we set, third-party cookies, and how to manage your preferences, see our Cookie Policy.

Children’s Privacy

Kayden Connect is a business-to-business platform intended for users aged 16 and over. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact privacy@kaydenconnect.com and we will take appropriate action.

Security

Our day-to-day engineering practice is informed by the SOC 2 Common Criteria controls. We are not SOC 2 certified and hold no third-party security attestation. Specific safeguards include:

• Encryption at rest (AES-256) and in transit (TLS 1.3)
• Role-based access control with Firebase custom claims and tenant isolation
• Automated database backups and point-in-time recovery
• Logical separation of tenant data through strict server-side authorisation
• Regular dependency scanning and patching

A summary of our security practices is available on our Security page.

Changes to This Policy

We may update this Privacy Policy to reflect changes to our services, applicable law, or our data practices. Material changes will be communicated by email to account administrators at least 30 days before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.

Contact Us

For privacy questions or to exercise your rights, contact us at:

• Privacy: privacy@kaydenconnect.com
• Legal: legal@kaydenconnect.com
• Postal: Kayden Connect LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA

If you are in the EEA or UK and need to lodge a complaint, you may do so with your local supervisory authority.