Privacy and Cookie Policy

Last updated August 15, 2025

Introduction

Kadar Technologies Inc. 2093 Philadelphia Pike #7264, Claymont, DE, USA ("Kadar", "We", "Us", "Our") respects Your privacy and is committed to protecting it through Our compliance with this Privacy and Cookie Policy.

This Privacy and Cookie Policy aims to inform You about what data We collect about You, how We use and share that data, and to provide other necessary information to help You exercise Your data protection rights. It also explains the legal grounds for processing Your data, the parties to whom We may disclose it, and Your rights, along with the ways to exercise them.

This Privacy and Cookie Policy applies to when You visit https://www.kadar.app/ (our "Website"); use https://kadar.app/login (our "Application"); visit Our social media pages; or receive communications from us.

“You” may, depending on the context, be a Client, a User, or a Visitor of one or more of the Kadar Services.

By visiting the Website, using the Application, or visiting Our social media pages, You confirm that You have read, understood, and explicitly agreed to the collection, storage, use, processing, and other handling of Your personal data as described in this Privacy and Cookie Policy. 

If You do not agree with the terms outlined in this Privacy and Cookie Policy, please avoid visiting Our Website, Application, or social media pages, and ensure that You delete any cookies or cached data from Your browser and device.

Please carefully read this Privacy and Cookie Policy to understand Our views and practices regarding personal data protection and confidentiality principles.

We may revise and update this Privacy and Cookie Policy from time to time. Updates will be posted on this page. The “Last updated” date at the top will be updated, and major changes will also be notified via email or in-app notice. Continued use after changes means acceptance of those changes.

Kadar as a data controller

The responsible controller for the processing of personal data is:

Kadar Technologies Inc.

2093 Philadelphia Pike #7264

Claymont, DE 19703

USA

EIN: 61-2023560

As a data controller, We determine the purposes and means of processing Your personal data and ensure that all processing activities adhere to the principles of lawfulness, fairness, and transparency.

We collect and process personal data solely for specific, legitimate purposes and ensure that the data used is limited to what is necessary to achieve these purposes. Personal data is retained only as long as needed to fulfill these purposes or as required by law.

We make sure that Your personal data is accurate and give You the right to correct or delete any incorrect information. We also prioritize the security of Your personal data by taking steps to protect it from loss, damage, unauthorized access, or misuse. 

We acknowledge that You may be located globally and that various national privacy regulations may apply. We aim for the privacy "gold standard" while complying with national laws. If You wish to exercise rights under a regulation other than the GDPR, CCPA, or CPRA, please specify that when contacting us.

What personal data we collect and why we process it

This Policy, together with Our Terms of Service, governs the personal data You share with Kadar. Some data is necessary for Services; without it, certain features may not be available.

The way We use Your data depends on Your relationship with Kadar.

Types of personal data

Depending on Your interaction with Kadar, We may collect:

• Contact information (e.g., name, email address);
• Usage data (e.g., pages visited, features used);
• Technical data (e.g., IP address, device type, browser information);
• Communication data (e.g., messages sent via email);
• Account and employment data (e.g. organization, job title);
• Other data as explained further in this Policy.

Purposes of processing

We process Your personal data for:

• Delivering Our Services (including onboarding, technical support, and customized experience);
• Invoicing and managing payments;
• Authenticating and verifying access;
• Maintaining and improving Our Application;
• Conducting research and usage analysis;
• Personalizing content and communications;
• Fulfilling legal and contractual obligations.

We may also use aggregated or anonymized data (which cannot identify You or Your organization, or any member of Your organization) for purposes such as developing new features, analyzing trends, benchmarking, or publishing high-level insights (e.g., pulse trends or usage statistics).

Legal bases for processing

We process Your personal data in accordance with applicable data protection laws based on the following legal grounds:

• Consent: We process Your personal data based on Your explicit consent for one or more specifically determined purposes. You have the right to withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Contract: We process Your data to fulfill Our contractual obligations to You, to provide You Our Services, or to undertake activities prior to contract conclusion based on Your request.
• Legal obligation: We process Your data to comply with the law and other regulations.
• Legitimate interest: We process Your data when We have legitimate interests, including, but not limited to, fraud prevention, customer support, product development, and improving client relationships, except where overridden by Your rights.
• Vital interests: We process Your data where processing is necessary to protect essential interests (e.g., physical safety).

Where personal data is processed without Your consent, this Policy serves as the lawful basis and purpose of such processing.

Data retention

The retention period varies depending on the data type and processing activity. Details are provided in the section Data processing on our website, application, and social media pages. Where a retention period is not defined, personal data will be deleted as soon as its legal basis or purpose ceases to exist, except where longer retention is required by law or for the purpose of resolving disputes.

When We no longer have a legitimate reason to retain Your personal information, We will delete or anonymize it. Residual information in backups will be isolated and not further processed until it can be deleted.

Confidentiality and data usage

All data, including personal data, is treated as confidential unless You explicitly choose to make it visible to others within Your organization (e.g., in employee-employer relationships). Unless Our contract, Terms of Service, or this Policy state otherwise, We do not use Your data for other purposes. We do not sell or share identifiable personal information with third parties for compensation or targeted advertising. We do not process “sensitive personal information” (e.g., health, ethnicity, politics) to infer characteristics about you.

Kadar’s role as a controller/processor

Kadar acts as a data processor when providing Services as per the terms with Your organization; Your organization is the controller. In some cases, Kadar may act as a data controller, as described in this Policy.

International data transfers

Your personal data may be transferred, stored, or accessed from countries other than Your own, including but not limited to the USA and the EU. Kadar implements safeguards such as Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms to ensure Your rights during such transfers.

Data security measures

To protect Your personal data, Kadar implements:

• Strong access control (only authorized personnel have access to production systems)
• Encryption of data at rest and in transit
• Regular security training and audits
• Secure coding and deployment practices
• Encrypted backups (stored on Amazon for up to 90 days)
• Incident response procedures for data breaches

Children's personal data

Our Website and Application are intended for individuals who have reached the legal digital age of consent that applies to their respective jurisdiction:

• 16 years old in the European Union
• 13 years old in the USA (in line with COPPA)

We do not knowingly collect or process personal data from children below these respective ages. If You are under the minimum age for Your country, do not submit personal data through Our Services. Parents and guardians should monitor children’s internet use and help enforce this Policy. If We learn a child under the applicable age has provided data, contact Us at privacy@kadar.app, and We will delete it without delay, per law.

Your rights 

Depending on where You are located and the law that applies, You may have the right to:

• Access: Obtain a copy of Your personal data or a list of categories, including processing purposes and disclosure recipients.
• Rectification or supplementation: Request correction of inaccurate data.
• Erasure: Request deletion of Your personal data, unless retention is required by law.
• Restriction: Request restriction of data processing.
• Data portability: Receive Your data in a structured, commonly used format and transfer it elsewhere.
• Object: Object to processing based on legitimate interests, including profiling.
• Opt out: In California, opt out of the sale or sharing of personal information or restrict the use of sensitive personal information.
• Not to be subject to decisions based solely on automated processing (including profiling) with legal or similarly significant effects.

To exercise Your rights, contact Us at privacy@kadar.app. You also have the right to lodge a complaint with a supervisory or regulatory authority.

When and why we share personal data

We only share Your personal data when necessary and in accordance with applicable data protection laws. This may occur in the following cases:

• Legal obligations: Under certain circumstances, We may be required to disclose Your personal data if required to do so by law or in response to valid requests by public authorities. In such cases, We will notify You unless We are prohibited from doing so or if it is not feasible or reasonable to provide notification.
• Business transactions: If Kadar is involved in a merger, acquisition, or asset sale, Your personal data may be transferred as part of that process. In such cases, We will notify You where required.
• Service providers and partners: We may share Your personal data with trusted third-party vendors who assist Us in operating and improving Our Website and/or Application. These parties process data only in accordance with contractual obligations and applicable data protection laws.
• Affiliates and subprocessors: Your data may be shared with Kadar’s affiliated entities or subprocessors under a data processing agreement.
• Emergencies or for safety: When necessary to protect the safety or rights of Kadar employees, clients, users, visitors, or the public.
• Anonymized data: We may share aggregated or anonymized data for purposes such as research, benchmarking, trend analysis, and forecasting – this data never identify individuals.

All data transfers comply with applicable laws and regulations. Third parties may act as Our processors or as independent controllers per their own privacy policies.

Data processing on our website, application, and social media pages

Server logs (website)

When You visit Our Website, certain technical data is automatically collected by Our hosting provider. This includes:

• Date and time of visit;
• Data volume transferred;
• Browser type and version;
• User’s OS;
• Referrer URL;
• Anonymized IP address;
• Country code;
• Language;
• Time zone settings;
• Device ID (UDID, IDFA);
• Device model and manufacturer.

Purpose: To ensure a trouble-free connection, usability, functionality, IT security, system safety and stability, and basic analytics.

Legal basis: Legitimate interest.

Processor: Webflow, Inc., USA.

Data retention: Retained for up to 12 months to enable ongoing security monitoring, troubleshooting, and usage pattern analysis before anonymized or deletion.

Server logs (application)

When You visit Our Application, We collect:

• Date and time of visit;
• Data volume transferred;
• Browser type and version;
• User’s OS;
• Referrer URL;
• IP address;
• Country code;
• Language
• Time zone settings;
• Device ID (UDID, IDFA);
• Device model and manufacturer.

Purpose: To maintain a reliable, secure, and performant experience by monitoring access, usage, and system stability.

Legal basis: Legitimate interest.

Processor: Amazon Web Services EMEA SARL, Germany.

Data retention: Retained up to 90 days.

Newsletter

When registering for Our newsletter or other forms of communication, You have to provide a valid email address. We also collect:

• IP address;
• Email provider;
• Subscription date;
• Interaction data.

Purpose: To send You updates about Our Services and content, and to analyze engagement for continuous communication improvement.

Legal basis: Consent.

Processor: Mailjet, France.

Data retention: Retained until You withdraw consent or unsubscribe, ensuring You control ongoing communications.

If You do not want to receive any newsletters or other registered communications from Us in the future and/or wish to object to the analysis of Your data, please use the "unsubscribe" link in each newsletter or contact Us at privacy@kadar.app. 

Demo request

When You request a product demo, We collect Your:

• Name;
• Email address.

Purpose: To schedule, conduct, and follow up on product demonstrations.

Legal basis: Consent.

Processor: Calendly, USA.

Data retention: Retained only as long as reasonably needed to prepare for, perform, and process the demo, typically deleted within 90 days after the meeting unless otherwise required.

Content downloads

In order to make Our downloadable content available to You, We collect:

• Name;
• Company name;
• Email address.

Purpose: To deliver personalized content and follow-up information relevant to Your interests.

Legal basis: Consent.

Processor: Zapier, USA, and Mailjet, France.

Data retention: Retained for up to 180 days post-download or until the purpose is fulfilled or revoked, balancing usefulness with data minimization.

Contacting us

When You contact Us via email, contact forms, or engage with Us by scheduling demos, downloading content, or other communications, We process and store the following data:

• Name;
• Email address;
• Other contact information;
• Message content or inquiry details. 

We may also enrich Your contact data with publicly available information (e.g., from LinkedIn) to better manage and optimize Our communication and business relationship.

Purpose: To respond to Your inquiries, provide offers, address requests, manage sales communications, and enable effective follow-up contact. This supports the structuring and optimization of Our sales and customer relationship processes.

Legal basis: Consent, legitimate interest in managing business relationships, and pre-contractual measures, or pre-contractual necessity.

Processor: Tidio, Poland.

Data retention: Personal data will be retained up to 2 years from the date of last communication or as long as necessary to fulfill the stated purposes. Data may be retained for longer periods if required by law or in connection with ongoing legal disputes.

Website analytics using third-party services

We use third-party analytics providers to help Us understand how visitors interact with Our Website and improve its performance, usability, and content. These third-party analytics providers may use cookies or similar methods to collect data.

Google Analytics

We use Google Analytics to measure and analyze traffic and user behavior on Our Website. This includes data such as:

• Pages visited;
• Clicks and scrolls;
• Referring websites and traffic sources;
• Device type, browser information, and operating system;
• Session duration and engagement metrics;
• Location.

Purpose: To understand visitor behavior, optimize website performance, and improve user experience.

Legal basis: Consent.

Processor: Google LLC, USA.

Data retention: Retained up to 14 months.

Google Search Console

We use Google Search Console to monitor how Our Website performs in Google Search results. This includes data such as:

• Search queries;
• Clicks;
• Impressions;
• Average position.

Purpose: Monitor and optimize Google search performance. 

Legal basis: Consent, legitimate interest.

Processor: Google LLC, USA.

Data retention: Retained up to 16 months.

Microsoft Clarity

We use Microsoft Clarity to understand how users interact with Our Website through session recordings and heatmaps. This includes data such as:

• Interaction events (e.g., clicks, scrolls, mouse movements); 
• Diagnostic events (e.g., script and image errors, logs, performance events);
• Page events (e.g., document sizes, page visibility, page unload, metrics).

Purpose: To analyze Website usability and user experience design.

Legal basis: Consent.

Processor: Microsoft Corp., USA.

Data retention: Retained up to 13 months.

RB2B

We use RB2B to identify visiting organizations and enrich visitor data for business development purposes. This includes data such as:

• Full name;
• Job title;
• Company name;
• LinkedIn profile URL;
• Location;
• Page visited on Our Website.

Purpose: To identify visiting organizations for B2B outreach and business development.

Legal basis: Legitimate interest.

Processor: GetEmails LLC, USA.

Data retention: Retained up to 24 months from the date of collection or last interaction, whichever is later, provided the data remains accurate and relevant for business development purposes. Data will be securely deleted or anonymized after this period unless You request earlier deletion.

Application analytics

We track limited usage data within Our Application to improve performance and monitor basic engagement. Our Application analytics infrastructure is intentionally minimal and privacy-focused.

Google Analytics

We use Google Analytics only to track successful sign-up events for service onboarding analysis. No further usage tracking is conducted. This includes data such as:

• Sign-up event ID (non-personal);
• Timestamp.

Purpose: To track sign-up conversions.

Legal basis: Consent.

Processor: Google LLC, USA.

Data retention: Retained up to 14 months.

Matomo

We use Matomo to monitor and improve the functionality, performance, and user experience of Our Application. All data collected is stored on Our infrastructure and is not shared with third parties. We do not use Matomo for advertising, profiling, or behavioral targeting. We collect:

• Pages visited;
• Page views;
• Navigation flows;
• Session duration and time of visit;
• Interaction data (e.g., clicks, feature usage);
• Technical data (e.g., device type, browser information);
• Country or region (based on anonymized IP).

Purpose: Monitor Application performance and improve usability without third-party data sharing.

Legal basis: Legitimate interest.

Processor: Kadar Technologies Inc., USA.

Data retention: As long as needed to fulfill the purposes outlined above, but no longer than 24 months, or until You request its deletion or correction.

Account and transactional data

User Account

In order to create a Kadar account, You must provide:

• Email address;
• Full name;
• Organization name;
• Job title;
• Company size;
• Password.

Purpose: We collect and process this information to establish and manage Your account, provide You with secure and personalized access to Our Services, and fulfill Our contractual obligations to You.

Legal basis: Contract.

Processor: Kadar Technologies Inc., USA.

Data retention: Your account data will be retained as long as the account remains active. After account deletion, We will retain the data for up to 12 months to allow for recovery from accidental deletion, handle legal obligations, resolve disputes, and complete administrative processes.

Payments

We use Stripe for secure online payments. Collected data includes:

• Email address;
• Full name;
• Payment card details (card number, CVC, expiry);
• Country or region of card origin.

Purpose: To securely process Your payments, prevent fraud, comply with financial and regulatory obligations, and maintain accurate accounting records in connection with the provision of Our Services.

Legal basis: Contract.

Processor: Stripe Inc., USA.

Data retention: Payment data is retained only as long as needed to process payments, comply with legal and financial rules, prevent fraud, and fulfill regulatory obligations, but not longer than 7 years after the transaction.

Social media pages

When You visit Our social media pages, data is processed both by Us and by the responsible social media provider as the responsible party.

The respective social media provider assumes the data protection obligations towards You as the user, including information on data processing, and is the contact person for Your rights. This follows from the fact that such a provider has direct access to the relevant information on the social media page and the processing of Your data.

When using Facebook or LinkedIn, data may be transferred and processed outside the US, EU, and other countries that may not provide an equivalent level of data protection.

Facebook

‍www.facebook.com or the Facebook mobile app by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, or Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

Please refer to: https://www.facebook.com/policy.php. 

LinkedIn

‍www.linkedin.com or mobile app by LinkedIn Corporation, Legal Department - Privacy, 1000 W. Maude Ave, Sunnyvale, CA 94085, USA or LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Please refer to: https://www.linkedin.com/legal/privacy-policy. 

Purpose and legal basis

On Our social media pages, We can communicate with You and share relevant information. We may receive further data from You through Your comments, shared images, messages, and reactions, which We then process solely for the purpose of responding to Your inquiries, facilitating communication, and improving Our Services and online presence.

If You access social media via multiple devices, We may perform cross-device analysis to better understand engagement and improve user experience.

Furthermore, social media providers may also use cookies and tracking technologies to analyze and improve their services independently of Us, and We recommend reviewing each provider’s privacy policy and cookie settings.

Data processing takes place based on Your consent or, alternatively, Our legitimate interests to communicate effectively, manage interactions, and enhance Our Services and public presentation.

We retain Your personal data only as long as necessary to achieve the stated purposes or as required by applicable law, including retention obligations for legal claims or disputes. After this period, Your data will be securely deleted or anonymized.

Cookies

Our Website uses so-called cookies. Cookies do not cause any harm to Your device and do not contain any viruses. Cookies serve the purpose of making Our Services more user-friendly, more effective, and safer.

What are cookies

A cookie is a small text file that stores information about a user's browsing activity and interactions with a website. When You revisit the website, the cookies enable the website to recognize Your browser, making navigation and interaction with Our Website and/or Application more efficient and personalized.

Cookies set by the website owner are called first-party cookies. Cookies set by parties other than the website owner are called third-party cookies. Third-party cookies enable third-party features or functionality to be provided on or through the website. The parties that set these third-party cookies can recognize Your computer or mobile device both when it visits the website in question and also when it visits other specific websites.

Types of cookies we use and how we use them

Kadar uses both first-party and third-party cookies, as well as persistent and session cookies.

Persistent cookies remain on Your device for a set period of time or until You delete them and  help to provide a more personalized experience by remembering user settings and preferences. 

Session cookies are temporary and deleted when You close Your web browser. They are primarily used to manage user sessions and provide a seamless browsing experience.

Please note that We use Google Tag Manager as a tool to deploy and manage scripts and cookies on Our Website and Application. It acts as a container for third-party tags, including those used for analytics and advertising.

‍

‍

Third parties may also use their own cookies or tracking technologies to collect information across websites for analytics or advertising purposes. Data collected through these tools may be shared with or used by the respective providers in accordance with their privacy policies. We encourage You to carefully read the privacy policy of any website You visit.

Cookie preferences

You have the right to decide whether to accept all cookies or only the necessary ones.

Manage your preferences

When You visit Our Website or Application for the first time,  a cookie consent banner will appear offering You the choices to accept all cookies, accept only necessary cookies, or manage Your cookie preferences in detail. Necessary cookies are required for Our Website and Application to function properly and cannot be disabled. 

You can update Your cookie preferences at any time by clicking the cookie icon located in the bottom-left corner of the page. This opens Our cookie management tool. Please note that cookie choices are browser- and device-specific, so clearing cookies or switching browsers/devices will require You to set preferences again.

Manage cookies using your browser

In addition to using Our cookie management tool, most modern browsers allow You to control cookies via their settings, including options to:

• Be notified when cookies are placed;
• Block or allow specific types of cookies;
• Delete existing cookies.

For detailed instructions on managing cookies in Your specific browser, You can visit https://www.aboutcookies.org/how-to-manage-and-delete-cookies or refer to the help section of Your browser.

Opt out of advertising cookies

You can update Your cookie preferences at any time by clicking the cookie icon located in the bottom-left corner of the page. This opens Our cookie management tool, where You can review and adjust Your preferences.

In addition, most advertising networks offer You a way to opt out of targeted advertising. For more information or to opt out, You can visit industry opt-out websites such as:

• http://www.aboutads.info/choices/ 
• http://www.youronlinechoices.com 
• http://optout.aboutads.info/ 
• http://optout.networkadvertising.org/ 
• http://www.youronlinechoices.eu/ (for users in the EU)

Please note that opting out of targeted advertising does not stop ads from appearing entirely; You will continue to receive generic advertisements.

“Do Not Track” signals

Some web browsers may transmit “Do Not Track” signals to websites with which the browser communicates, telling the website not to follow its online movements. Due to differences in how web browsers interpret this feature and send those signals, as well as a lack of standardization, it is not always clear whether visitors and users intend for these signals to be transmitted or whether they are even aware of them. Therefore, We do not currently respond to such signals, in part because no common industry standard for “Do Not Track” signals has been adopted by industry groups, technology companies, or regulators, including a consistent standard for interpreting user intent.

Special provisions for on-premise usage

If You use Kadar on-premise (installed on Your infrastructure):

• You, as the Client, are responsible for the technical and organizational safeguards for data processed locally (e.g., network, access controls, backups);
• Kadar will not access on-premise installations except by explicit agreement and only as necessary to provide support (and with Your controls, logs, and consent);
• All legal compliance for local processing and cross-border transfers in on-premise environments is the responsibility of the Client;
• We recommend regular internal audits and full compliance with local privacy regulations.

Links to third-party websites

Our Website may include links to other websites whose privacy practices may differ from those of Kadar. If You submit information to any of those websites, Your information is governed by the privacy policies that apply to those websites. We encourage You to carefully read the privacy policy of any website You visit.

Contact information

We respect Your rights and want You to be comfortable with Our use of Your personal data. If You have a complaint or concern about how We use Your personal data, We would like to work with You to resolve it. You can report a concern, ask a question, or exercise any of the rights mentioned in this Privacy and Cookie Policy by contacting us at privacy@kadar.app.