This policy explains what personal data Kuadro collects, why, who receives it and what you can do about it. The controller of your data is [Legal company name], [Registered address], [Country]. Write to [contact email] for anything about your data.
1. What we collect
When you use your account
- Account: your email address and your password, which we store only as a one-way hash.
- Preferences: your language and theme.
- Sessions: for each device you sign in on, the IP address and the browser’s user agent, so you can stay signed in and we can protect your account.
- Your content: the codes, links, destinations, texts, logos, images, landing pages, tags, custom domains, API keys and webhooks you create, and the members of your workspaces.
- Billing: your plan, its status and renewal date, and the customer and subscription identifiers of our payment provider. Card details go straight to Lemon Squeezy; we never receive them.
When someone scans your code or opens your short link
We record the time, the type of device, the operating system, the country (as our network provider, Cloudflare, reports it), the website that sent the visit, and whether it looks like a bot. We do not store the visitor’s IP address and we do not set cookies on them. These records are what your analytics show.
When someone fills in a form on your landing page
We store what they send on behalf of the workspace that owns the page. For that data the workspace owner is the controller and we are its processor: we use it only to show it to the owner and deliver it where they ask.
2. Why we use it
- To provide the service you signed up for: your account, your codes, redirects, analytics and landing pages (performance of our contract with you).
- To bill paid plans and keep the records the law requires (contract and legal obligation).
- To keep the service safe: detect abuse, phishing and attacks, and protect your account (our legitimate interest).
- To write to you about your account: password resets, important changes to the service or these documents. We do not send marketing emails without your consent.
We do not sell your data and we do not use it for advertising.
3. Who receives it
- Hosting: [Hosting provider, country], where the service and its database run.
- Network: Cloudflare, which carries the traffic to Kuadro and protects it from attacks.
- Payments: Lemon Squeezy, our merchant of record, for paid plans.
- Email: [Email delivery provider], to deliver account emails.
- Members of your workspace see the workspace’s content and the email addresses of its members.
- Webhooks you set up receive the events you chose, at the address you gave.
- Authorities, only when the law requires it.
Some of these providers may process data outside your country. When they do, we rely on the safeguards the law provides for international transfers, such as standard contractual clauses.
4. How long we keep it
- Your account and content: while your account exists. When you delete a code, its scans go with it; when a workspace is deleted, everything in it is deleted.
- Sessions: until you sign out on that device or we end the session.
- Billing records: as long as tax and accounting law requires.
5. Your rights
You can ask us to give you a copy of your data, correct it, delete it, limit how we use it, object to a use based on our legitimate interest, or send it to you in a portable format. Write to [contact email]; we answer within one month. You can also complain to your data protection authority.
6. Security
Connections are encrypted, passwords are hashed, sessions are signed and access inside the company is limited to what each task needs. No system is perfectly secure; if a breach puts your data at risk, we will tell you as the law requires.
7. Children
Kuadro is not meant for children under 16 and we do not knowingly collect their data.
8. Cookies
We only use the cookies the service needs to work. The Cookie policy lists them.
9. Changes
We may update this policy. The date at the top says when it last changed; if a change matters, we will tell you before it takes effect.