Privacy policy

Who we are

Kandaro provides a cybersecurity platform, starting with managed decoys (Kandaro Deception). For personal data of our customers’ users (account details, billing contacts) Kandaro is the controller. For event data collected by sensors in a customer’s network, Kandaro acts as processor on behalf of that customer.

Company

[Legal entity name] B.V.

Address

[Street and number], [Postal code] [City], The Netherlands

Chamber of Commerce (KvK)

[KvK number]

VAT number

[VAT number]

This website

kandaro.com sets no cookies and uses no analytics or third-party trackers. Our hosting and network provider processes standard request logs (such as IP address and user agent) for security and operations.

The platform

• Account data: name, email address, MFA factors, session information.
• Billing data: handled by Stripe; card details never reach Kandaro.
• Contact form data: the name, email address, optional company and message you submit, plus the IP address of the request. Used only to answer you; handled messages are deleted after two years.
• Waitlist data: the email address, optional company and message you submit, used only to contact you about the product you chose.
• Event data: recorded by decoys, kept 90 days by default; captured passwords masked by default.

Sub-processors

Stripe, Resend, Cloudflare, our EU hosting provider and, only if a customer opts in, a cloud AI provider.

Your rights

You can request access, correction, export or deletion of your personal data, and you may lodge a complaint with your data protection authority. Send your request through the contact form (topic “Privacy or data request”).