Privacy Policy

Effective date: August 16, 2026

Last updated: August 27, 2026

This Privacy Policy explains how Kedo collects, uses, stores, and shares personal data when you visit our website, create an account, use the Kedo platform, purchase a subscription, or communicate with us.

Kedo is operated by tiedongqu xingfuzhijia dianshang keji gongzuoshi, an individually owned business registered in Tiedong District, Anshan, Liaoning Province, People's Republic of China (the "Operator," "Kedo," "we," "us," or "our").

1. Scope and Roles

This Policy applies to Kedo's websites, customer console, knowledge management features, AI agents, applications, customer-support tools, and related services (collectively, the "Service").

When a business customer uses Kedo to process information about its own users, visitors, employees, or customers, that business generally determines why and how the information is used. In that context, the business customer is responsible for its notices, instructions, and lawful basis, and Kedo processes the information to provide the Service. For account administration, subscription provisioning, platform security, and our own website operations, Kedo determines the relevant processing purposes.

For purchases completed through Paddle, Paddle acts as Merchant of Record and authorised reseller. Paddle and Kedo each act as an independent controller for the personal data they process for their respective purposes. Paddle's processing is described in its Privacy Notice.

2. Information We Collect

We may collect the following categories of information:

Account and workspace information

Names, email addresses, login credentials or authentication tokens, account preferences, tenant and workspace membership, assigned roles, and other information supplied when an account or workspace is created or managed.

Customer content

Documents, webpages, FAQs, knowledge-base materials, instructions, files, metadata, and other content uploaded, imported, created, or connected by a customer.

Conversations and AI interactions

Questions, prompts, retrieved knowledge excerpts, AI-generated responses, citations, feedback, conversation history, and related diagnostic information. Customers control what content they submit and should not submit personal or confidential information unless they have authority and a valid reason to process it.

Integrations and provider configuration

Configuration details for AI model providers, email services, APIs, and other integrations selected by a customer. Where credentials are required, we use them only to operate the requested integration and apply technical safeguards designed to protect them.

Billing and subscription information

Selected plan, billing cycle, subscription status, Paddle customer, subscription, price, and transaction identifiers, payment status, subtotal, tax, total, currency, transaction timestamps, renewal dates, cancellation status, and limited billing contact or purchase information that Paddle makes available to Kedo for order fulfilment, reconciliation, fraud prevention, product support, and compliance.

Paddle collects payment and billing information needed to complete the transaction, which may include a buyer's name, contact details, location or billing address, tax information, payment method, and fraud or device signals. Kedo does not receive or store complete payment-card numbers, card security codes, or payment-account passwords.

Where required for legal, accounting, dispute, or security purposes, Kedo may retain limited identifiers and transaction records relating to subscriptions previously processed by legacy payment providers, including PayPal. This does not mean that those providers remain available for new purchases.

Usage, device, and log information

Feature usage, storage and token consumption, request timestamps, IP address, browser type, device and operating-system information, referring pages, error logs, audit events, and security signals.

Where you consent, Kedo may use PostHog for product analytics and privacy-configured session replay. PostHog product events use internal account, workspace, and resource identifiers plus limited event metadata. Kedo does not intentionally include names, email addresses, document or conversation text, credentials, or payment details in those event properties. Replay inputs are masked, and sensitive chat, knowledge-base, API-key, and billing surfaces are excluded from replay capture.

Communications

Messages and attachments you send to customer support, billing, privacy, or other Kedo contact channels.

Cookies and local storage

Authentication, security, language, theme, preference, and analytics information stored through cookies or similar browser technologies. See our Cookie Policy for more information.

3. How We Use Information

We use information to:

• provide, maintain, secure, and troubleshoot the Service;
• authenticate users and manage accounts, workspaces, permissions, and subscriptions;
• ingest, index, retrieve, and present customer knowledge;
• generate AI responses and citations using the models and providers configured for the relevant workspace;
• prepare Paddle Checkout, provision subscriptions, process verified payment events, reconcile billing history, and support cancellations and refunds;
• calculate usage, enforce plan limits, and prevent abuse;
• support tax, invoice, accounting, fraud-prevention, chargeback, legal, and regulatory processes;
• send transactional, security, service, and support communications;
• understand performance and improve the Service;
• comply with law, enforce our agreements, and protect users, Kedo, Paddle, and third parties; and
• establish, exercise, or defend legal claims.

Where applicable law requires a legal basis, we rely on performance of a contract, legitimate interests, compliance with legal obligations, consent, or another basis available under applicable law. You may withdraw consent at any time where processing is based on consent, without affecting earlier lawful processing.

4. AI and Third-Party Model Providers

Kedo may transmit prompts, relevant knowledge excerpts, configuration instructions, and related metadata to the AI model provider selected or configured by the customer. Those providers may process information in other countries and under their own terms and privacy notices.

Customers are responsible for choosing suitable providers, configuring their workspaces appropriately, and ensuring they have the right to submit the relevant information. Kedo does not use customer content to train Kedo-owned general-purpose AI models. Third-party provider data-use practices depend on the provider and account configuration selected by the customer.

5. How We Share Information

We do not sell personal data. We may share information with:

• Service providers, such as hosting, database, object-storage, email-delivery, monitoring, analytics, and security providers;
• AI model and integration providers selected or enabled for the relevant workspace;
• Paddle and its payment, tax, invoicing, fraud-prevention, and compliance partners to offer Checkout, complete transactions, administer subscriptions, provide the customer portal, issue receipts or invoices, process cancellations and refunds, prevent fraud, handle chargebacks, and reconcile payments;
• Workspace administrators and authorized members according to workspace roles and permissions;
• Professional advisers and authorities where reasonably necessary to comply with law, respond to valid legal process, or protect rights and safety; and
• A successor organization in connection with a merger, acquisition, financing, reorganization, or transfer of all or part of the business, subject to appropriate confidentiality protections.

Paddle may share buyer name, address, email address, purchase history, and transaction analytics with Kedo for product fulfilment, order processing, fraud prevention, and product support. Kedo uses such data only for applicable lawful purposes. Service providers acting on our behalf are required to process information only for agreed purposes and subject to appropriate contractual or legal obligations.

6. International Data Transfers

Kedo serves customers globally. Information may therefore be processed in countries other than the country where it was collected, including countries whose data-protection laws differ from local law. Paddle and other providers may also process transaction data through entities and partners in multiple countries. Where required, we use legally recognized safeguards or another valid transfer mechanism. You should review Paddle's Privacy Notice and the transfer terms of any third-party AI or integration provider you choose.

7. Data Retention

We retain information for as long as reasonably necessary to provide the Service, maintain account, subscription, tax, invoice, and transaction records, comply with legal obligations, resolve disputes and chargebacks, enforce agreements, and protect the Service. Retention depends on the type of information, the customer's configuration, contractual requirements, applicable limitation periods, and law.

Deleting a Kedo account does not require Kedo or Paddle to erase transaction, tax, fraud, security, or dispute records that must be retained by law or for legitimate claims. Some information may also remain temporarily in backups, security logs, and audit records. We may retain aggregated or de-identified information where it no longer reasonably identifies an individual.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, tenant and role boundaries, encryption where appropriate, logging, and credential-protection measures. Payment credentials are entered into Paddle-controlled Checkout rather than Kedo's servers. No internet transmission or storage system is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your credentials, limiting workspace access, keeping integrations secure, and promptly notifying us of suspected unauthorized use.

9. Your Rights and Choices

Depending on your location, you may have rights to request access to, correction of, deletion of, restriction of, or portability of personal data; object to certain processing; withdraw consent; or lodge a complaint with a data-protection authority.

You can update certain account information in the Service. For Kedo privacy requests, contact support@usekedo.com. We may need to verify your identity and authority before acting. If Kedo processes your information on behalf of a business customer, we may direct your request to that customer.

Requests concerning personal data controlled by Paddle should be submitted through the contact or preference channels described in Paddle's Privacy Notice. Kedo cannot delete or change records that Paddle independently controls, but we will reasonably assist where appropriate.

You may control cookies and similar technologies as described in our Cookie Policy. You can reject PostHog analytics or withdraw a previous choice through Kedo's analytics consent control; withdrawal stops future analytics and session replay without affecting earlier lawful processing. Transactional and security messages are necessary to operate the Service; marketing communications, if offered, will include an available opt-out. Mandatory rights under your local law are not limited by this Policy.

10. Children

The Service is designed for businesses and persons with legal capacity to enter into a contract. It is not directed to children. If you believe a child has provided personal data without valid authorization or consent required by applicable law, contact us so that we can review and, where appropriate, delete it.

11. Third-Party Services and Links

The Service may link to or integrate with third-party services, including Paddle Checkout and the Paddle customer portal. Their privacy practices are governed by their own policies, not this Policy. We encourage you to review those policies before enabling an integration or providing information to a third party.

12. Changes to This Policy

We may update this Policy to reflect changes in the Service, law, payment providers, or our practices. We will post the revised version and update the date above. If a change materially affects your rights, we will provide additional notice where required by law.

13. Contact Us

For privacy questions or requests, contact:

Kedo

Operated by tiedongqu xingfuzhijia dianshang keji gongzuoshi

Registered in Tiedong District, Anshan, Liaoning Province, People's Republic of China

Email: support@usekedo.com