KADO controls account, website, trial, billing, and support information. For workforce and project data entered by a customer organization, KADO generally processes that information on the organization’s instructions.
Scope and accountability
This Privacy Policy applies to KADO’s websites, applications, trials, subscriptions, support, and related communications. KADO Solutions is accountable for personal information under its control and has designated a privacy contact reachable at privacy@kadosolutions.com.
Information we collect
- Account and identity information: name, work email, password credentials handled through our authentication provider, organization, role, and preferences.
- Workspace information: employee profiles, reporting relationships, country, languages, skills, proficiency, certifications, availability, time off, allocations, project assignments, time entries, utilization, and related notes entered by customers and users.
- Commercial information: selected plan, subscription status, billing contact, transaction identifiers, and limited payment details such as card brand and last four digits. Complete card details are handled by Stripe.
- Technical and usage information: browser and device information, IP address, timestamps, authentication events, feature interactions, error logs, and security records.
- Communications: support requests, feedback, demo requests, and marketing preferences.
How we use information
We use personal information to provide and administer KADO; authenticate users; create workspaces; display permitted workforce and project information; calculate forecasts, utilization, capacity, and reports; process subscriptions; provide support; prevent fraud and abuse; maintain security and reliability; comply with law; and improve the service.
Where required, we obtain consent for marketing communications. Operational messages about accounts, security, billing, and the service are not marketing messages.
AI-assisted processing
KADO may analyze workspace information to rank resource matches, identify capacity risks, compare forecasts with actuals, and recommend operational actions. Customers control the data made available to these features and remain responsible for reviewing outputs before acting on them. KADO does not intend these tools to make solely automated employment decisions.
When we disclose information
We may disclose personal information to authorized users in the same customer workspace according to role, project, and reporting-line permissions; to service providers that help operate KADO; in a corporate transaction; to protect rights, safety, and service integrity; or where required or permitted by law.
Key service providers may include Supabase for authentication and database infrastructure, Stripe for payments and subscription billing, hosting and infrastructure providers, and communications, monitoring, or support providers. They may process information only for contracted purposes and under appropriate safeguards.
International processing
KADO and its providers may process information in Canada, the United States, or other jurisdictions. Information stored or processed outside your province or country may be subject to the laws and lawful access requests of those jurisdictions. We use contractual and organizational measures designed to provide appropriate protection when information crosses borders.
Cookies and similar technologies
We use necessary technologies to maintain sessions, remember preferences, secure accounts, and operate core features. With your permission, we use Google Analytics 4 on our public marketing website to understand page visits and website usage. The Google tag is not loaded before you accept analytics. Advertising storage and personalization are disabled in our tag configuration.
With the same optional consent, our servers may report verified signup, trial activation, and first successful payment events to Google Analytics using an anonymous browser identifier. We do not send names, email addresses, card details, or internal account identifiers with those events. A consent token shared between our website and app links these events to your preference for up to 180 days, including payments that occur after your visit.
We do not track account, checkout, or private workspace page views, and remove query strings from public page addresses sent to Analytics. Google processes technical information associated with analytics requests, such as browser, device, and network information. Read how Google uses information from sites that use its services.
You can accept or reject optional analytics, or change your choice using Cookie preferences on public pages in the same browser. Withdrawal stops future collection associated with that browser; it does not delete events already sent. We remember your choice for up to 180 days. Rejecting analytics does not prevent you from using KADO. Browser settings may block some technologies, but blocking essential storage can affect functionality.
Retention
We retain personal information only as long as reasonably necessary for the purposes described, customer instructions, contractual commitments, dispute resolution, security, and legal obligations. Workspace data is generally retained while the customer account is active and for a limited period afterward to allow export and recovery before deletion or de-identification. Backup deletion may occur on a delayed cycle.
Security
We use safeguards appropriate to the sensitivity of the information, including access controls, authentication, encrypted transmission, logging, backups, and restricted administrative access. Customers must configure permissions appropriately and protect their credentials. No method of storage or transmission is completely secure.
Your choices and rights
Subject to applicable law, you may request access to or correction of personal information KADO controls, withdraw consent where consent is the basis for processing, unsubscribe from marketing, or raise a privacy concern. We may need to verify your identity before responding.
If your information was entered by your employer or another customer organization, please contact that organization first because it controls the workspace and may be responsible for responding. We will assist customers with valid requests as required.
Children
KADO is a business service and is not directed to children. We do not knowingly collect personal information from children through individual consumer accounts.
Changes and contact
We may update this policy to reflect changes to KADO, our providers, or applicable law. We will post the revised date and provide additional notice when a change is material.
Contact our Privacy Officer at privacy@kadosolutions.com. You may also have the right to contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator.