Privacy Policy

Last updated: 3 September 2026 · Kayden Connect LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States

Introduction

Kayden Connect LLC (“Kayden Connect”, “we”, “us”, or “our”) is a Wyoming limited liability company with its registered office at 30 N Gould St Ste R, Sheridan, WY 82801, USA. We operate the Kayden Connect platform at app.kaydenconnect.com and the marketing website at www.kaydenconnect.com.

This Privacy Policy describes the personal data we collect about you, how we use it, who we share it with, and the rights available to you under the EU and UK General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act (“CCPA”) as amended by the CPRA, the South African Protection of Personal Information Act (“POPIA”), and other applicable data protection laws.

Data We Collect

Information you provide directly

Account data: name, work email, company name, job title, country
Billing data: handled by Stripe: we receive country, last four digits, and expiration of the card; we do not store full card numbers
Tenant content: posts, comments, messages, knowledge-base articles, uploads
Support communications: tickets, contact form submissions, survey responses

Information collected automatically

Usage data: pages visited, features used, session duration, error reports
Device data: browser type, operating system, screen resolution, language
Network data: IP address (truncated for analytics), approximate region
Cookies and similar technologies. See our Cookie Policy

Marketing analytics

When you visit our marketing site, we may receive analytics data via Google Analytics 4 and the LinkedIn Insight Tag, subject to your cookie consent. We also record marketing-site form submissions in Google Analytics on our servers, as described in the “Your California Privacy Rights” section below.

How We Use Your Data

To provide, operate, secure, and maintain the Kayden Connect platform
To process subscriptions, taxes, and billing through Stripe
To send transactional messages (account verification, billing alerts, security notices, service announcements)
To send marketing communications where you have given consent (opt-out at any time)
To improve our services through aggregated analytics and product telemetry
To detect, prevent, and respond to fraud, abuse, and security incidents
To comply with legal, tax, and regulatory obligations

Legal Bases for Processing

Where GDPR or UK GDPR applies, we rely on the following legal bases under Article 6:
Contract (Art. 6(1)(b)): to provide the platform and fulfil our obligations under the Terms of Service
Legitimate interests (Art. 6(1)(f)): to keep the service secure, prevent fraud, improve the product, and conduct limited B2B direct marketing to existing customers
Consent (Art. 6(1)(a)): for non-essential cookies and prospect marketing emails. You may withdraw consent at any time
Legal obligation (Art. 6(1)(c)): to retain billing records, respond to lawful requests, and comply with tax law

We engage the sub-processors below to operate the Kayden Connect platform. Separately, on our marketing website, we use the advertising and analytics technologies described in the “Your California Privacy Rights” section below, which load only if you opt in and which, under the CCPA, may involve a “sale” or “share” of personal information for cross-context behavioural advertising. That section explains how to opt out. We do not receive monetary payment in exchange for your personal information.

The current list is also published at our Sub-processors page, which we update when changes occur.

We also disclose personal data when required by law, to enforce our Terms of Service, or in connection with a corporate transaction (with appropriate confidentiality protections).

International Data Transfers

Your personal data is primarily processed in the European Union (Google Cloud europe-west1, Belgium). Some sub-processors are located in the United States and other third countries. Where personal data is transferred outside the EEA, UK, or South Africa, we rely on the European Commission’s Standard Contractual Clauses (“SCCs”), the UK International Data Transfer Addendum, and supplementary measures appropriate to the transfer. A copy of the SCCs we rely on can be requested from legal@kaydenconnect.com.

Data Retention

Active account and tenant content: retained while your subscription is active
Cancelled accounts: our target is to permanently delete workspace content within 60 days of cancellation, per the lifecycle described in our Terms, and a self-serve data export tool is available throughout that window. Scheduled deletion is currently being automated; until it ships, deletion is processed on request. Email privacy@kaydenconnect.com.
Workspaces that lock at general availability for not adding a payment method: hard-locked on day 14, deletion warning email on day 23, and a target permanent purge on day 44. The purge schedule is being automated; until it ships, purges are processed on request.
Billing records: 7 years (tax and accounting requirements)
Audit and security logs: 90 days (Spark and Command) or the life of the subscription (HQ). Time-based deletion is being automated; until that ships these logs are removed when the workspace is deleted.
Aggregated, de-identified analytics: retained without time limit

Your Rights

Access: request a copy of personal data we hold about you
Rectification: correct inaccurate or incomplete data
Erasure: request deletion (subject to legal retention obligations)
Portability: receive your data in a structured, machine-readable format
Restriction: limit how we process your data while we investigate a request
Object: object to processing based on legitimate interests, including direct marketing
Withdraw consent: at any time, without affecting processing carried out before withdrawal
Complain: to your local supervisory authority. EU residents can identify their authority at edpb.europa.eu; UK residents may contact the ICO at ico.org.uk.

Your California Privacy Rights (CCPA/CPRA)

This section applies to residents of California and explains how the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), applies to the personal information we handle about you. Terms such as “sell,” “share,” and “cross-context behavioural advertising” have the meanings given to them in the CCPA.

Categories of personal information. In the twelve months before the date at the top of this page, we collect the categories of personal information described in “Data We Collect” above. These include identifiers (such as your name and work email); professional or employment-related information (such as your job title and company); commercial information (such as subscription and billing records); internet or other electronic network activity (such as pages visited, features used, and device information); and approximate geolocation derived from your IP address. We collect this information from you directly, from your use of our services, and from the sub-processors identified in this policy. We do not collect government identifiers or precise geolocation.

How we disclose personal information, and “sale”/“share.” We disclose personal information to the service providers and sub-processors listed in this policy for the business purposes described above. Separately, on our marketing website only, and only if you opt in to analytics or marketing cookies, we load third-party advertising and analytics tags in your browser (Google Analytics 4, the Meta Pixel, and the LinkedIn Insight Tag) that transmit online identifiers and activity information to those providers. Depending on how each provider uses that information, this activity may constitute a “sale” or a “share” for cross-context behavioural advertising as those terms are defined under the CCPA. Separately from cookies, if you have accepted analytics cookies and you submit a form on our marketing site (such as a contact, newsletter, or quiz form), our server records that submission in Google Analytics so we can measure whether our marketing works. That record carries no cookie and no lasting identifier: each submission is sent with a one-time identifier generated for it, so it cannot be linked to your other visits. We do not receive monetary payment in exchange for your personal information, and we do not knowingly sell or share the personal information of consumers we know to be under 16 years of age.

Your rights. Subject to the exceptions in the CCPA, California residents have the right to:

Know and access the categories and specific pieces of personal information we have collected, the sources, the business or commercial purposes for collecting it, and the categories of third parties to whom we disclose it

Delete personal information we have collected from you

Correct inaccurate personal information

Opt out of the “sale” or “sharing” of personal information

Non-discrimination: you will not receive different pricing, service, or quality for exercising these rights

How to opt out of “sale” or “sharing.” Open our Cookie Preferences page and turn off analytics and marketing cookies. This stops the advertising and analytics technologies described above from loading and deletes the advertising and analytics cookies we set; any cookies those providers have already placed will expire on their own, and you can clear cookies in your browser at any time. You may also decline these cookies when our consent banner first appears.

How to exercise your other rights. To make a request to know, access, delete, or correct, email us at privacy@kaydenconnect.com. We will acknowledge and respond to verifiable requests within the time the CCPA requires (generally 45 days, which we may extend once where reasonably necessary, in which case we will tell you). To protect your information, we will take reasonable steps to verify your identity before acting on a request, and we will not require you to create an account solely to make one.

Authorised agents. You may use an authorised agent to submit a request on your behalf. We may ask the agent for proof of your written permission and may ask you to verify your identity directly with us.

Browser opt-out signals. Our marketing website detects the Global Privacy Control (GPC) signal and treats it as an opt-out: while it is set, our analytics and marketing technologies do not load and the optional cookie categories stay off. Please use the Cookie Preferences page to opt out of the technologies described above.

Contact. Questions about your California privacy rights can be sent to privacy@kaydenconnect.com, or by post to Kayden Connect LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA.

Rights under POPIA (South Africa)

Access to personal information we hold
Correction or deletion of inaccurate or excessive information
Object to processing on reasonable grounds
Lodge a complaint with the Information Regulator at inforegulator.org.za
To exercise any of these rights, email privacy@kaydenconnect.com. We will respond within 30 days (or the shortest period required by applicable law). Verification of your identity may be required.

Demonstration Data on Our Website

The people, organisations, messages and figures that appear in product screens on our website, in sales materials and in videos are fictional and were created for a demonstration workspace. They do not relate to any real person, and any resemblance to a real person or organisation is coincidental. We do not use customer data, customer names or customer workspaces in marketing materials.

Cookies

We use strictly-necessary, performance, and marketing cookies. For details on the cookies we set, third-party cookies, and how to manage your preferences, see our Cookie Policy.

Children’s Privacy

Kayden Connect is a business-to-business platform intended for users aged 16 and over. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact privacy@kaydenconnect.com and we will take appropriate action.

Security

Our day-to-day engineering practice is informed by the SOC 2 Common Criteria controls. We are not SOC 2 certified and hold no third-party security attestation. Specific safeguards include:

Encryption at rest (AES-256) and in transit (TLS 1.3)

Role-based access control with Firebase custom claims and tenant isolation

Automated database backups and point-in-time recovery

Logical separation of tenant data through strict server-side authorisation

Regular dependency scanning and patching

A summary of our security practices is available on our Security page.

Changes to This Policy

We may update this Privacy Policy to reflect changes to our services, applicable law, or our data practices. Material changes will be communicated by email to account administrators at least 30 days before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.

Contact Us

For privacy questions or to exercise your rights, contact us at:
Privacy: privacy@kaydenconnect.com
Legal: legal@kaydenconnect.com
Postal: Kayden Connect LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA
If you are in the EEA or UK and need to lodge a complaint, you may do so with your local supervisory authority.