1. Scope
This Privacy Policy explains how Kadima Technology collects, uses, stores, and shares personal data when you use Kadima's centralized account and authentication services.
It applies to Kadima-branded sign-in, account access, email verification, password reset, account settings, subscription identity, and related support flows. It does not describe the full product-level data practices of separate Kadima applications or experiences, which may have their own service-specific notices.
2. Information We Collect
We may collect the following categories of data:
- Account details such as your email address, display name, and account identifiers.
- Authentication and security data such as password hashes, login timestamps, verification status, reset events, device or session metadata, IP address, and security logs.
- Subscription or billing identity data such as customer IDs, plan status, payment status, and transaction references supplied by our payment providers. We do not store full payment card numbers.
- Support and communications data such as emails you send us, support ticket contents, and replies we send back.
- Technical usage data needed to operate and secure the account experience, including browser type, operating system, error events, and session diagnostics.
3. How We Use Information
- To create, authenticate, and administer your account.
- To send transactional messages such as verification emails, password resets, billing notices, and important service updates.
- To detect abuse, fraud, unauthorized access, and other security incidents.
- To manage subscription state and account entitlements where Kadima handles those centrally.
- To respond to support requests and account-related questions.
- To comply with legal obligations and enforce our Terms & Conditions.
4. Legal Bases
Where the GDPR or similar laws apply, we generally process personal data on the following bases:
- Contract performance, when processing is necessary to provide your account, authentication, or subscription access.
- Legitimate interests, when processing is necessary to secure, maintain, improve, and support the Kadima account experience.
- Legal obligation, when retention or disclosure is required by law.
- Consent, where we ask for it for optional communications or features.
5. Sharing of Information
We do not sell personal data. We may share it only as needed with:
- Infrastructure, hosting, database, and email providers that help us operate account and authentication systems.
- Payment processors or billing providers for subscription and invoice administration.
- Professional advisers, authorities, or law enforcement when required by law or when needed to protect our users, rights, or systems.
- A successor entity in the event of a merger, acquisition, or asset sale, subject to appropriate confidentiality and continuity safeguards.
6. Retention
We keep account data for as long as your account remains active or as long as needed to provide the Kadima account service.
We may retain certain records for longer where necessary for security, dispute resolution, fraud prevention, tax, accounting, or other legal compliance purposes. When data is no longer needed, we delete it or anonymize it.
7. Cookies and Local Storage
Kadima uses cookies and similar browser storage primarily for essential account functions, including session continuity, login state, email verification flows, and security protections.
If we introduce non-essential analytics or preference storage on the Kadima account surface, we will describe that use here or in a related notice.
8. International Transfers
Kadima Technology is based in the Netherlands. Some service providers may process data outside your country or outside the European Economic Area. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent lawful transfer mechanisms.
9. Security
We use reasonable technical and organizational safeguards to protect account and authentication data, including encryption in transit, access controls, and monitoring for suspicious activity.
No system is completely secure. You are responsible for keeping your credentials confidential and for notifying us if you believe your account has been compromised.
10. Your Rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export your personal data.
To exercise those rights or ask a privacy question, contact privacy@kadima-tech.com. If you are in the EEA or UK, you may also have the right to complain to your local data protection authority.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and may provide additional notice through the Kadima account experience or by email.