Privacy Policy

1. Introduction

Kabaido ("we", "us", or "our") operates the Kabaido CPQ platform and website at kabaido.com. This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you visit our website, use our platform, or interact with us in any way. We are committed to safeguarding the privacy of our users and their business data.

2. Information We Collect

We collect information in the following categories:

2.1 Account and Contact Information

When you register for an account, request a demo, book a call, or contact us, we collect your name, email address, company name, industry, and any other information you voluntarily provide.

2.2 Platform Data

When you use the Kabaido CPQ platform, you may create and store business data including:

• Product configurations, dimensions, materials, and specifications
• Pricing rules, cost structures, and margin targets
• Quotes, revisions, and customer records
• Machine, resource, and process data (if using the MOS module)
• Catalogue items and stock levels (if using the PCM module)
• Integration mappings and connection configurations

This data belongs to you. We process it solely to provide the Service.

2.3 Usage and Analytics Data

We automatically collect certain technical information when you use the Service, including browser type, operating system, IP address, device information, pages visited, features used, time spent, and referring URLs. This data helps us understand how the platform is used and improve the experience.

2.4 Integration Data

If you connect Kabaido to third-party systems (ERP, CRM, accounting, or manufacturing platforms), we may receive data from those systems as configured by you. Our integration agent SAM processes this data to maintain synchronisation between systems.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Kabaido CPQ platform
• Process product configurations, calculate pricing, and generate quotes
• Manage your account and subscription
• Provide customer support and respond to enquiries
• Set up and monitor integrations with your existing systems
• Send transactional communications (account confirmations, quote notifications, system alerts)
• Send marketing communications where you have opted in (you may unsubscribe at any time)
• Analyse usage patterns to improve platform performance and features
• Detect, prevent, and address security issues, fraud, and technical problems
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information or business data. We may share your information only in the following circumstances:

• Service providers: Trusted third parties that assist in operating the platform, including cloud hosting (Vercel, Supabase), analytics (Google Analytics), email delivery (Resend), and payment processing. These providers are bound by confidentiality agreements and process data only as instructed by us.
• Legal requirements: When required by law, regulation, legal process, or government request, or when necessary to protect the rights, property, or safety of Kabaido, our users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your data is subject to a different privacy policy.

5. Data Security

We implement industry-standard technical and organisational measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Row-level security policies to isolate customer data
• Role-based access controls within the platform
• Regular automated backups
• Secure authentication and session management
• Regular security assessments and monitoring

While we take reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but will promptly notify affected users in the event of a data breach as required by applicable law.

6. Data Retention

We retain your personal and business data for as long as your account is active or as needed to provide the Service. After account termination, we retain Your Data for up to 30 days to allow for export, after which it may be permanently deleted. Certain information may be retained longer where required by law, for legitimate business purposes (such as resolving disputes), or for compliance with legal, accounting, or reporting obligations.

7. Your Rights

Depending on your jurisdiction (including under GDPR, UK GDPR, or other applicable data protection laws), you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data, subject to legal retention requirements
• Restriction: Request that we restrict processing of your data in certain circumstances
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing of your data for direct marketing or based on legitimate interests
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at hello@kabaido.com. We will respond to requests within 30 days.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and authentication state
• Remember your preferences and settings
• Analyse website traffic and usage patterns (via Google Analytics)
• Measure the effectiveness of our marketing

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service. We do not use cookies to track you across unrelated third-party websites.

9. International Data Transfers

Your information may be processed in countries other than the country in which you reside. Where we transfer data outside your jurisdiction, we ensure appropriate safeguards are in place, including standard contractual clauses or other legally recognised transfer mechanisms.

10. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information.

11. Third-Party Links

The Service may contain links to third-party websites and services. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any third-party services you access through integrations or links from the Kabaido platform.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. Material changes will be communicated via email or through the platform. The updated policy will be posted on this page with a revised "Last updated" date. Continued use of the Service after the effective date of changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at hello@kabaido.com.

You also have the right to lodge a complaint with your local data protection authority if you believe your data has been processed in violation of applicable data protection laws.