✱ Legal Compliance

Privacy Policy

Last Updated: June 19, 2026

At Kakralabs ("we", "us", or "our"), we respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy describes how we collect, use, process, and disclose your information, including personal data, in conjunction with your access to and use of the Kakralabs platform and services.

This policy complies with FTC consumer protection guidelines, CIPRA (Colorado Privacy Act), CCPA/CPRA, GDPR where applicable, and other relevant regional privacy laws.

1. Information We Collect

We collect personal information that you voluntarily provide to us when you fill out forms on our website (such as the contact form, project estimator, and AI readiness assessment) or subscribe to our monthly packages. This includes:

  • Identity Data: Name, company name, industry, and role.
  • Contact Data: Email address, phone number, and social media handles.
  • Project & Financial Data: Estimated project budget, timeline, desired features, answers to AI readiness questions, and billing/payment details (processed securely via Stripe).
  • Communications: Message contents and chat histories.
  • Technical Data: IP address, browser type, device information, and usage analytics.
  • Location Data: General geographic location based on IP for service optimization.

2. How We Use Your Information

We use the collected information for specific, legitimate business purposes, including:

  • To provide, operate, and maintain our platform and consulting services.
  • To process transactions and manage your monthly subscriptions via Stripe.
  • To deliver custom project estimation proposals and AI readiness scorecards.
  • To communicate with you, respond to inquiries, and send critical updates.
  • To comply with legal obligations, prevent fraud, and verify subscription status.
  • To improve our services through analytics and user feedback analysis.

3. Legal Basis for Processing (GDPR/CIPRA)

For users in jurisdictions with privacy regulations like CIPRA and GDPR, we process your data based on:

  • Contract Performance: To provide services you've requested or contracted.
  • Legitimate Interests: To improve our platform and communicate about our services.
  • Consent: For optional communications and analytics where required.

4. Data Sharing & Third-Party Processors

We do not sell, rent, or trade your personal data. We share your data only with trusted third-party service providers who assist us in operating our platform, carrying out transactions, or running operations:

  • Stripe: For secure payment execution and billing infrastructure management. PCI-DSS compliant.
  • Convex: As our primary secure database and backend environment hosting provider. SOC 2 compliant.
  • Resend: For transactional email dispatch and lead notifications. GDPR compliant.
  • WhatsApp: For client communications and automated support booking triggers. Subject to Meta's privacy policy.

All third parties are contractually obligated to maintain the security and confidentiality of your data.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

  • Essential Cookies: Required for core functionality and security.
  • Performance Cookies: To analyze site usage and improve performance.
  • Functional Cookies: To remember your preferences and settings.

You may configure your browser to reject non-essential cookies. Most browsers allow you to refuse or delete cookies. Note that disabling cookies may impact your experience on our site.

6. Your Data Rights (FTC/CIPRA/GDPR)

Depending on your location, you have the right to:

  • Access: Request copies of your personal data we hold.
  • Correction: Request correction of inaccurate information.
  • Deletion: Request deletion of your personal data.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection/Restriction: Object to or restrict certain processing activities.
  • Opt-out: Unsubscribe from marketing communications at any time via the link in emails or by contacting us.

To exercise these rights, or if you have any questions regarding data processing, please contact us directly at kakraweb@gmail.com.

For California residents: You have additional rights under the California Privacy Rights Act (CPRA).

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Lead data is typically retained for 24 months for business relationship purposes.

8. Security Measures

We implement industry-standard security measures including encryption in transit (TLS 1.2+), secure database hosting via Convex, and PCI-DSS compliant payment processing via Stripe to protect your personal data from unauthorized access, alteration, or destruction.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States and South Africa. We ensure appropriate safeguards are in place for such transfers in compliance with applicable regulations.

10. Changes to this Policy

We reserve the right to modify this Privacy Policy at any time. Any revisions will be posted on this page with an updated modification date. Material changes will be notified via email or prominent site notice.

11. Contact Information

If you have questions about this Privacy Policy or your personal data, please contact us at:

Email: kakraweb@gmail.com
Phone: +27 79 869 4277 (WhatsApp)
Address: Accra, Ghana