Privacy Policy
1. About this policy
This Privacy Policy explains how Kara Reach ("Kara Reach," "we," "us," or "our") collects, uses, shares, and protects personal information when you visit our websites, use the Kara Reach platform and related services (the "Service"), or communicate with us.
Kara Reach is designed primarily for business users. A customer organization controls the workspaces it creates and the information its authorized users submit to those workspaces. If your information was added to Kara Reach by one of our customers, that customer may be the controller of the information and should be your first point of contact for requests about it.
2. Information we collect
We may collect the following categories of information:
- Account and workspace information. Your name, business email address, password credentials in protected form, workspace membership and role, invitation details, preferences, and account status.
- Customer content. Prospect and contact records, lists, notes, campaign settings, message templates, communications, attachments, knowledge-base content, support content, and other information submitted to the Service.
- Connected-service information. Configuration, account identifiers, tokens, messages, contacts, events, and other data made available when you connect services such as LinkedIn, Instagram, email providers, Google, Microsoft, GoHighLevel, Slack, Asana, Stripe, or other supported providers. The information received depends on your configuration and the permissions you grant.
- Billing information. Subscription, invoice, payment status, purchased credit, and transaction information. Payment-card details may be collected directly by our payment processor rather than stored by Kara Reach.
- Usage and device information. IP address, browser and device characteristics, pages or features used, dates and times of activity, referring URLs, diagnostics, logs, and security events.
- Communications. Information you provide when you request support, report a problem, complete a form, or otherwise contact us.
We receive information directly from you and your organization, automatically through your use of the Service, from connected services at your direction, and from service providers that help us operate and secure the Service.
3. How we use information
We use information to:
- provide, maintain, personalize, and improve the Service;
- authenticate users, administer workspaces, and provide customer support;
- run campaigns, integrations, enrichment, messaging, automation, reporting, and other features you configure;
- process payments, credits, and invoices;
- monitor reliability, diagnose errors, prevent abuse, and protect the security of users and the Service;
- communicate about service changes, security, billing, support, and product updates;
- comply with law and enforce our agreements; and
- create aggregated or de-identified insights that do not reasonably identify an individual.
Where applicable law requires a legal basis, we rely on performance of a contract, our legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where required.
4. Automation and artificial intelligence
Some features use automated systems or third-party artificial-intelligence providers to generate, classify, summarize, enrich, or recommend content. Information included in a request may be sent to the provider needed to perform that request. Customers control which content they submit and whether applicable features are enabled. Automated output may be incomplete or inaccurate and should be reviewed before it is used, particularly where it could materially affect a person.
We do not use customer content to train a general-purpose model for unrelated customers unless we clearly disclose that practice and obtain any consent required by law.
5. How we share information
We may share information:
- With service providers that perform hosting, storage, security, analytics, communications, customer support, payment processing, artificial-intelligence processing, and similar functions for us under contractual restrictions.
- With connected services when you direct the Service to retrieve, synchronize, enrich, or send information through them.
- Within a workspace according to workspace roles, permissions, and settings. Workspace owners and administrators may access and manage workspace information and user access.
- For legal and safety reasons when we reasonably believe disclosure is necessary to comply with law, protect rights or safety, investigate abuse, or secure the Service.
- In a business transaction involving a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.
We do not sell personal information for money. We do not disclose customer content for third-party targeted advertising.
6. Data retention
We retain information for as long as reasonably necessary to provide the Service, maintain legitimate business and security records, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by the type of information and why it is processed. Workspace owners may be able to delete certain content through the Service. Deletion from active systems may not immediately remove information from encrypted backups or records we must retain by law.
7. Security
We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption for appropriate secrets and communications, tenant separation, logging, and monitoring. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur. You are responsible for protecting your credentials, using appropriate workspace permissions, and promptly notifying us of suspected unauthorized use.
8. International data transfers
Kara Reach and its service providers may process information in countries other than the country where it was collected. Where required, we use recognized transfer mechanisms and safeguards intended to protect information transferred across borders.
9. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal information; receive a portable copy; withdraw consent; or appeal a decision about a request. You may also have the right to complain to a data-protection authority.
You can update certain account information and integration settings in the Service. To exercise other rights, contact us using the support or privacy contact made available in the Service or on our website. We may need to verify your identity and authority. If a customer organization submitted or controls the information, we may direct your request to that organization.
10. Cookies and similar technologies
We may use cookies and similar technologies that are necessary for authentication, security, preferences, and core functionality, as well as limited analytics used to understand and improve the Service. Browser controls may let you block or remove cookies, but disabling necessary cookies can prevent parts of the Service from working.
11. Children
The Service is not directed to children, and we do not knowingly collect personal information from children under the minimum age required to consent to online data processing in their jurisdiction. If you believe a child has provided information to us, please contact us so we can review and address it.
12. Changes to this policy
We may update this Privacy Policy to reflect changes to the Service, our practices, or applicable law. We will post the updated version with a new effective date and provide additional notice when required. Your continued use of the Service after the updated policy takes effect is subject to the updated policy.
13. Contact us
Questions or requests about this Privacy Policy can be submitted through the support or privacy contact made available in the Kara Reach application or on our website. Please do not include passwords, access tokens, or other sensitive credentials in your message.