This privacy policy explains how Kloner AS processes personal data — both for users of our Kaduno platform and for the individuals that you as customers process through the platform. This policy is a draft and will be reviewed by legal counsel.
Kloner AS is the data controller for information we collect about companies and users who purchase and use Kaduno.
This includes: - **Account data:** Name, email address, company name, job title, billing details. - **Usage data:** Log of logins, actions in the admin interface, API calls, AI usage (model, tokens, cost), and any error messages. - **Communications:** Emails and messages you send us in connection with support or sales.
The legal basis for processing is performance of a contract (the service agreement) and our legitimate interest in operating and improving the service.
When you as a company use Kaduno to manage your own customers, products, orders, and other data, Kloner processes that data on your behalf. In this relationship you are the controller and Kloner is the processor.
Kloner processes such data only on your instructions, as set out in our Data Processing Agreement (DPA). We do not use this data for our own purposes and we do not sell it.
See our DPA page for details on roles, security measures, and deletion procedures.
The marketing website kaduno.com uses a minimal set of cookies. We do not use third-party advertising trackers, retargeting pixels, or social media trackers.
Functional cookies necessary to operate the site (session ID, preferences) are set without prior consent under the ePrivacy exemption for technically necessary cookies. Should we add analytics or marketing cookies in future, we will obtain consent in advance.
The Kaduno platform is operated from Norway. Your data is stored on infrastructure located in Norway. Where we engage sub-processors (e.g. AI model providers or email delivery providers), transfers to countries outside the EEA are covered by appropriate safeguards. See our sub-processors page for an overview of sub-processor categories.
As a data subject you have rights under the General Data Protection Regulation (GDPR), including:
- **Access:** Request a copy of the personal data we hold about you. - **Rectification:** Request that inaccurate data be corrected. - **Erasure:** Request deletion of data, subject to statutory retention obligations. - **Portability:** Receive data in a machine-readable format. - **Objection:** Object to processing based on legitimate interests. - **Withdrawal of consent:** Where processing is based on consent, you may withdraw it at any time.
To exercise your rights, contact us via the contact form at kaduno.com. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (datatilsynet.no).
The data controller is Kloner AS, Norway. For privacy enquiries, contact us via kaduno.com/contact.
We update this policy when there are material changes to our processing practices. We will notify existing customers by email of such changes.