Privacy policy

What we collect

• Your email address, which is how you are invited and how a password sign-in knows you. There is no public sign-up.
• The shops you belong to, and your role in each — owner, helper or viewer. It decides what you can see and do in each shop.
• Invitations: the email address someone was invited with, the role, and when it was sent, used or withdrawn. The link itself is stored only as a one-way fingerprint.
• A password, if you use one, stored only as a salted one-way hash. We cannot read it.
• Sign-in records: the email address tried, the time, whether it succeeded, and the IP address it came from. We use these to detect and block attempts to break into accounts.
• Records of changes: who invited, added, paused or removed someone, changed a role, connected a service, exported or closed a shop, or linked a Google account, when, and from which IP address. These records cannot be edited, so that a shop's owner can always see what happened in their shop.
• Problem reports you send us, and which page and shop they were about.
• What you enter: product ideas, prices and costs, business names, and notes on the steps you have completed.

Signing in with Google

If you sign in with Google, Google gives us an identifier for your Google account and your email address, and confirms that the email address is verified. We store the identifier so that we recognise your Google account on later sign-ins, even if its email address changes. Your email address is used once: to match your Google account to the invitation, or the access the operator set up, the first time you sign in. We do not receive your Google password, we do not ask for access to Gmail, Drive, Contacts or any other Google data, and we do not keep the tokens Google issues once you are signed in.

Kaldorn's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Shops and the people in them

A shop's data can be seen only by the people who belong to that shop. A shop's owners can see the email address and role of everyone in it and invite or remove people; other members see only the first part of each other's email address. When something about your access changes, you are told in the cockpit and by email, and so are the owners of the shops you belong to.

The operator's console lists every shop's name, owners, status and plan, and problem reports. It does not show what is inside a shop.

TikTok Shop

Kaldorn does not currently connect to TikTok Shop. When that feature exists, it will access a shop only after that shop's owner authorises it on TikTok, and will use that shop's data only to operate that shop within Kaldorn. This policy will be updated before that happens.

How we use it

To let you sign in, to keep accounts and shops secure, to tell you about changes to your access, to fix problems you report, and to run the features you use. We do not sell your information, we do not show advertising, and we do not use analytics or tracking scripts.

Who else handles it

• Cloudflare hosts Kaldorn and its database. The database is located in North America.
• Resend sends Kaldorn's emails — invitations, notices about access changes, and problem reports to the operator — so it receives the recipient's address and the message.
• Google, only if you choose to sign in with Google.

As the host, the operator can technically access the stored data. The cockpit itself does not show a shop's data to anyone who does not belong to that shop, including the operator. We do not share your information with anyone else, except where the law requires it.

Cookies

Kaldorn sets one cookie to keep you signed in, and a second short-lived one (ten minutes at most) while a Google sign-in is in progress. Both are needed for the service to work. There are no advertising or tracking cookies.

Exporting, closing and deleting

A shop's owner can download everything the shop holds in Kaldorn at any time, including while it is suspended, and can close the shop. When a shop is closed, its data is deleted within 30 days — except the records of changes described above, which are kept for security. To have your own access and data deleted, or to ask what we hold about you, email privacy@kaldorn.com.

Security

Kaldorn is served only over HTTPS. Passwords are stored as salted hashes, repeated failed sign-ins lock an account temporarily, invitations work only once and only for the address they were sent to, every request to a shop is checked against your role in that shop, and signing out ends every session you have at once.

Children

Kaldorn is for business use by adults. It is not intended for anyone under 18.

Changes and contact

If this policy changes, the date at the top changes with it. Questions: privacy@kaldorn.com.