KADO controls account, website, trial, billing, and support information. For workforce and project data entered by a customer organization, KADO generally processes that information on the organization’s instructions.
Scope and accountability
This Privacy Policy applies to KADO’s websites, applications, trials, subscriptions, support, and related communications. KADO Solutions is accountable for personal information under its control and has designated a privacy contact reachable at privacy@kadosolutions.com.
Information we collect
- Account and identity information: name, work email, password credentials handled through our authentication provider, organization, role, and preferences.
- Workspace information: employee profiles, reporting relationships, country, languages, skills, proficiency, certifications, availability, time off, allocations, project assignments, time entries, utilization, and related notes entered by customers and users.
- Commercial information: selected plan, subscription status, billing contact, transaction identifiers, and limited payment details such as card brand and last four digits. Complete card details are handled by Stripe.
- Technical and usage information: browser and device information, IP address, timestamps, authentication events, feature interactions, error logs, and security records.
- Communications: support requests, feedback, demo requests, and marketing preferences.
How we use information
We use personal information to provide and administer KADO; authenticate users; create workspaces; display permitted workforce and project information; calculate forecasts, utilization, capacity, and reports; process subscriptions; provide support; prevent fraud and abuse; maintain security and reliability; comply with law; and improve the service.
Where required, we obtain consent for marketing communications. Operational messages about accounts, security, billing, and the service are not marketing messages.
AI-assisted processing
KADO may analyze workspace information to rank resource matches, identify capacity risks, compare forecasts with actuals, and recommend operational actions. Customers control the data made available to these features and remain responsible for reviewing outputs before acting on them. KADO does not intend these tools to make solely automated employment decisions.
When we disclose information
We may disclose personal information to authorized users in the same customer workspace according to role, project, and reporting-line permissions; to service providers that help operate KADO; in a corporate transaction; to protect rights, safety, and service integrity; or where required or permitted by law.
Key service providers may include Supabase for authentication and database infrastructure, Stripe for payments and subscription billing, hosting and infrastructure providers, and communications, monitoring, or support providers. They may process information only for contracted purposes and under appropriate safeguards.
International processing
KADO and its providers may process information in Canada, the United States, or other jurisdictions. Information stored or processed outside your province or country may be subject to the laws and lawful access requests of those jurisdictions. We use contractual and organizational measures designed to provide appropriate protection when information crosses borders.
Cookies and similar technologies
We use necessary technologies to maintain sessions, remember preferences, secure accounts, and operate core features. We may use limited analytics to understand product performance. Where required, non-essential cookies will be presented through a consent choice. Browser settings may block some technologies, but doing so can affect functionality.
Retention
We retain personal information only as long as reasonably necessary for the purposes described, customer instructions, contractual commitments, dispute resolution, security, and legal obligations. Workspace data is generally retained while the customer account is active and for a limited period afterward to allow export and recovery before deletion or de-identification. Backup deletion may occur on a delayed cycle.
Security
We use safeguards appropriate to the sensitivity of the information, including access controls, authentication, encrypted transmission, logging, backups, and restricted administrative access. Customers must configure permissions appropriately and protect their credentials. No method of storage or transmission is completely secure.
Your choices and rights
Subject to applicable law, you may request access to or correction of personal information KADO controls, withdraw consent where consent is the basis for processing, unsubscribe from marketing, or raise a privacy concern. We may need to verify your identity before responding.
If your information was entered by your employer or another customer organization, please contact that organization first because it controls the workspace and may be responsible for responding. We will assist customers with valid requests as required.
Children
KADO is a business service and is not directed to children. We do not knowingly collect personal information from children through individual consumer accounts.
Changes and contact
We may update this policy to reflect changes to KADO, our providers, or applicable law. We will post the revised date and provide additional notice when a change is material.
Contact our Privacy Officer at privacy@kadosolutions.com. You may also have the right to contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator.