Privacy Policy

1. General Provisions

This Privacy Policy (hereinafter — the "Policy") defines the procedure for collecting, storing, using, transferring, and protecting personal data processed by the Kendy platform (hereinafter — the "Platform", "we", "us").

This Policy has been developed in accordance with the Law of Ukraine "On Personal Data Protection" dated 01.06.2010 No. 2297-VI, the Civil Code of Ukraine, and other regulatory legal acts of Ukraine governing personal data processing.

By using the Platform, you confirm that you have read this Policy and consent to the processing of your personal data under the terms set forth herein.

2. Definitions

• Personal Data — information or a set of information about a natural person who is identified or can be specifically identified.
• Processing of Personal Data — any action or set of actions performed with personal data (collection, registration, storage, use, dissemination, destruction, etc.).
• Client — a registered user of the Platform who uses Kendy services.
• Data Subject — a natural person whose personal data is being processed.
• B2B Data — information about business entities (legal entities, sole proprietors) that was voluntarily published by them in open sources.

3. What Data We Collect

3.1. Platform Client Data

Upon registration and use of the Platform, we collect:

• Registration data — first name, last name, email, phone number (for account creation)
• Corporate data — company name, tax identification code, job title (for legal entity identification)
• Payment data — banking details (IBAN) for invoicing and payment processing
• Technical data — IP address, browser type, cookies (for platform functionality and security)
• Activity data — request history, API usage (for service improvement and billing)

3.2. B2B Data from Open Sources

The Platform collects information about business entities from public sources (Google Maps, business websites):

• Business name— legal entity/sole proprietor name (Google Maps, website)
• Contact details — general phone number, email (info@, office@) from Google Maps and the business website
• Public information — rating, reviews, business hours, category (Google Maps)
• Online presence — website URL, social media profiles (Google Maps, website)

We collect exclusively B2B data — information about business entities that they have voluntarily published for commercial purposes. We do not collect or process personal data of natural persons from the aforementioned sources. Businesses may submit a removal request to have their data deleted from our database.

4. Legal Basis for Processing

Data processing is carried out on the following legal bases:

• Client data — consent of the data subject (Articles 6, 11 of Law No. 2297-VI); performance of a contract
• B2B contact data — legitimate interest (Article 11 of Law No. 2297-VI) — enabling B2B communication using voluntarily published information
• Technical data — legitimate interest — ensuring the security and operability of the Platform

5. Purpose of Data Processing

We process data for the following purposes:

• Service delivery — fulfilling contractual obligations to clients (lead generation, analytics, outreach)
• Communication — responding to inquiries, technical support, service notifications
• Billing — tracking service usage, invoicing
• Service improvement — analyzing Platform usage to enhance functionality
• Security — prevention of unauthorized access, fraud, and abuse
• Legal compliance — adherence to the requirements of applicable Ukrainian law

6. Sharing Data with Third Parties

We do not sell client personal data to third parties. We may share data with the following categories of recipients:

• Hosting provider (Hetzner Online GmbH, Germany) — for data storage and processing (contract, standard contractual clauses)
• Email automation platform — for executing outreach campaigns at the client's request (contract, legitimate interest)
• Payment services (LiqPay, bank) — for payment processing (performance of a contract)
• Government authorities — upon legal request (legal compliance)

All third parties to whom data is transferred are required to maintain an adequate level of data protection.

7. International Data Transfers

To provide our services, we may transfer data outside Ukraine:

• Hosting provider (Hetzner Online GmbH, Germany) — data storage and processing on EU servers under standard contractual clauses

We ensure an adequate level of personal data protection for any international transfer.

8. Data Retention

• Client account data — for the duration of the account + 12 months after deletion
• Payment information — 3 years from the last transaction (tax legislation requirements)
• B2B data (leads) — 12 months from the date of collection
• Technical logs — 6 months

Upon expiry of the retention period, data is deleted or anonymized.

9. Data Security

We take the following measures to protect personal data:

• Encryption — data transmission via HTTPS/TLS; password hashing
• Access control — access to data restricted by API keys and authentication
• Monitoring — detection of suspicious activity and unauthorized access attempts
• Backups — regular database backups
• Data minimization — we collect only the data necessary for service delivery

10. Data Subject Rights

Under the Law "On Personal Data Protection", you have the right to:

• Know — obtain information about the processing of your personal data
• Access — receive a copy of the personal data being processed
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of personal data (where no legal ground for retention exists)
• Restriction of processing — request a restriction on the processing of your data
• Objection — object to the processing of data on the basis of legitimate interest
• Withdrawal of consent — withdraw previously given consent to data processing

To exercise your rights, please contact us at: info@getkendy.com. We will review your request within 10 business days.

11. Opt-Out for Businesses

If information about your business was collected from open sources and you wish to have it removed from our database:

1. Send a request to info@getkendy.com with the subject line "Data Removal" or complete the opt-out form.
2. Please provide the business name, address, and contact details to be removed.
3. We will delete your data within 5 business days and add you to an exclusion list (to prevent re-collection of the data).

12. Cookies

12.1. Cookies We Use

12.2. Managing Cookies

You can disable cookies in your browser settings. Disabling necessary cookies may affect Platform functionality.

13. Changes to the Policy

We reserve the right to update this Policy. We notify users of material changes by posting an updated version on the Platform and by email notification to registered clients (for significant changes). The date of the last update is indicated at the beginning of this document. Continued use of the Platform after changes have been made constitutes acceptance of the updated Policy.

14. Contact

For questions regarding personal data processing: