Kadre Labs, Inc. (“Kadre Labs,” “we,” “us,” or “our”), a Delaware corporation, provides an AI-powered business platform, including agent-based software that can create, schedule, and publish content and communications to third-party platforms (such as Facebook and Instagram) on behalf of our customers (collectively, the “Services”). This Privacy Policy explains what information we collect, how we use and share it, and the choices you have.
This policy applies to our websites, applications, and the Services. It applies to visitors of our websites, individuals who register for or use the Services (“users”), and individuals whose information is processed by the Services on behalf of our business customers.
1. Our role: controller vs. processor
We act in two capacities:
- As a controller for information about our own users and website visitors (e.g., your account registration details, billing information, and usage of our Services).
- As a processor / service provider for content and data that our business customers submit to, connect with, or generate through the Services (“Customer Data”) — for example, social media content a customer schedules for publication, or contact records a customer manages through the platform. We process Customer Data on the customer’s instructions, under our agreement with that customer. If your information appears in Customer Data, please direct requests to the relevant business customer; we will assist them in responding.
Deployment models
The Services are offered both as a Kadre Labs–managed (multi-tenant) service and as customer-hosted (single-tenant) deployments that run in the customer’s own infrastructure. For customer-hosted deployments, Customer Data is processed within the customer’s environment, and any data transmitted to Kadre Labs is defined by our agreement with that customer; unless that agreement provides otherwise, Customer Data remains in the customer’s environment. Descriptions in this policy of our storage, sharing, and retention of Customer Data apply to Kadre Labs–managed deployments and to any data we receive under a customer-hosted agreement.
2. Information we collect
Information you provide
- Account information: name, email address, company name, role, and password or single-sign-on identifiers.
- Billing information: billing contact and address, and payment details, which are collected and processed by our payment and banking providers; we do not store full payment card numbers.
- Customer Data: content, media, prospect or contact records, campaign settings, and other material you submit to the Services or instruct the Services to generate or publish.
- Website forms: information you submit through forms on our website (for example, our contact and strategy-call forms), such as your name, email address, company, service interest, and message.
- Communications: messages you send us, including support requests and feedback.
Information from connected third-party platforms
The Services can connect to third-party platforms — including Meta platforms such as Facebook and Instagram, and Intuit platforms such as QuickBooks — at your direction, using each platform’s authorization (OAuth) flow. When you connect an account we may receive and store:
- access tokens that authorize the Services to act on the connected account (we never receive or store your platform password);
- basic profile and page/account information (e.g., page name, account ID, profile image);
- content, publishing status, and engagement metrics for posts made through the Services, to the extent permitted by the platform’s APIs and your granted permissions;
- business records made available by a platform’s APIs under your granted permissions (for example, accounting records from QuickBooks, if you connect it).
Our use of information received from Meta platforms complies with the Meta Platform Terms and applicable developer policies, including limitations on use, sharing, and retention of platform data. Our use of information received from Intuit platforms complies with Intuit’s developer terms and applicable policies. Our use and transfer of information received from any third-party API is limited to the practices described in this policy.
Information collected automatically
- Usage and log data: IP address, browser and device type, pages viewed, actions taken in the product, timestamps, and diagnostic logs.
- Cookies and similar technologies: we use strictly necessary cookies for authentication and session management, and limited analytics cookies to understand product usage. You can control cookies through your browser settings.
3. How we use information
- To provide, operate, secure, and maintain the Services, including publishing content to platforms you have connected, at your direction;
- To set up and manage accounts, authenticate users, and provide support;
- To process billing, invoicing, and payments, and to comply with tax and accounting obligations;
- To improve the Services, including debugging, analytics, and developing new features;
- To communicate with you about the Services, including service announcements and security notices;
- To comply with law and enforce our agreements.
AI processing
The Services use artificial-intelligence models, including models operated by third-party AI providers, to generate and process content at your direction. Customer Data submitted for AI processing is sent to these providers under agreements that restrict use to providing the service to us; we do not permit our AI providers to use Customer Data to train their generally available models. AI-generated content can be inaccurate; customers are responsible for reviewing content before publication as described in our Terms of Service.
4. How we share information
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We share information only with:
- Service providers (subprocessors): hosting and infrastructure, AI model providers, payment and banking providers, email delivery, analytics, and customer-support tooling — each bound by contract to process information only on our instructions;
- Connected platforms: when you instruct the Services to publish content or perform actions on a connected platform (e.g., posting to Facebook or Instagram), the relevant content and metadata are transmitted to that platform and become subject to its terms and privacy policy;
- Legal and safety: when required by law, subpoena, or legal process, or to protect the rights, safety, and property of Kadre Labs, our users, or others;
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality protections.
5. Data retention
We retain account information for as long as your account is active and as needed to comply with legal, tax, and accounting obligations. Customer Data is retained according to our agreement with the customer and is deleted or returned upon termination of the agreement, subject to a reasonable wind-down period and legal retention requirements. Platform access tokens are deleted promptly when you disconnect an account or terminate the Services. Backup copies are purged on a rolling basis.
6. Data deletion — including connected Facebook / Instagram data
You can request deletion of your data at any time:
- Disconnect a platform: in the product settings, disconnect any connected Facebook or Instagram account; this revokes our access and we delete the associated access tokens and platform data we hold.
- Revoke access from Meta: you may also remove the app’s access from within your Facebook settings (Settings → Apps and Websites) or Instagram settings. If you remove the app this way, you may additionally email us to request deletion of any platform data we still hold, and we will delete it within 30 days.
- Full account deletion: email privacy@kadrelabs.ai from the email associated with your account requesting deletion. We will verify the request, delete your personal information and Customer Data (except where retention is legally required, e.g., invoices for tax purposes), and confirm completion within 30 days.
7. Security
We use industry-standard safeguards to protect information, including encryption in transit (TLS), encryption of stored credentials and tokens, secrets management, least-privilege access controls, and logical separation of each customer’s data. No method of transmission or storage is completely secure; we encourage strong, unique passwords and prompt reporting of any suspected compromise to security@kadrelabs.ai.
8. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to opt out of certain processing.
United States state rights (including California)
If you are a resident of California or another U.S. state with a comprehensive privacy law, you have the right to: (a) know/access the personal information we hold about you; (b) correct inaccurate information; (c) delete your information; (d) opt out of the sale or sharing of personal information (we do neither); and (e) not be discriminated against for exercising these rights. Submit requests to privacy@kadrelabs.ai; we will verify your identity and respond within the time required by law. You may use an authorized agent to submit requests on your behalf.
European Economic Area / United Kingdom
If we process your personal data subject to the GDPR or UK GDPR, our legal bases are performance of a contract, legitimate interests (e.g., securing and improving the Services), and consent where required. You additionally have rights to object to or restrict processing and to lodge a complaint with your supervisory authority. Where we transfer data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses.
9. Children
The Services are business tools intended for users 18 and older. We do not knowingly collect personal information from children under 13 (or the applicable age of digital consent). If you believe a child has provided us information, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. We will post the updated version at this URL and update the “Last updated” date; for material changes we will provide additional notice (e.g., email or in-product notice). Continued use of the Services after changes take effect constitutes acceptance.
11. Contact us
Kadre Labs, Inc.
Email: privacy@kadrelabs.ai
Website: https://kadrelabs.ai