Menu
Privacy Statement
Version 1.1
Last Revised: October 20, 2022
At KPI Karta Inc. (“KPI Karta”), your privacy is important to us. The purpose of this privacy statement is to let you know how we collect, use and disclose Personal Information, and to inform you of your rights with respect to such Personal Information. This Privacy Statement is effective as of the effective date of your subscription to the Services.
APPLICABILITY OF PRIVACY STATEMENT
This Privacy Statement relates to “Personal Information”, meaning information about an identifiable individual, whether, for example, that individual is our Customer, or our Customer’s provisioned user or an individual whose information is part of Processed Data, as these terms are defined below. Whether a person is “identifiable” means that they can be identified by the information itself or by that information combined with other information reasonably available. This Privacy Statement applies to Personal Information collected or managed by KPI Karta through the use of the Services, data source integrations, and our websites. This Privacy Statement is also intended to explain how we use information which is not identifiable (and thus not Personal Information) that is collected via our websites and the Services. “Customer” refers to the customers of KPI Karta and their provisioned users. “Customer Information” refers to information about our Customers and their provisioned users. “Processed Data” refers to information that is processed by KPI Karta on behalf of our Customers through their use of the Services. KPI Karta does not have a direct relationship with many of the individuals whose Personal Information is included in Processed Data. This privacy statement is intended to provide information about how all Personal Information is collected, used, disclosed, processed and protected by KPI Karta.DATA SOURCE INTEGRATIONS
The Service provides Customers and their provisioned users the ability to easily connect to a wide variety of data sources using data source integrations. Some of these third party data source integration providers have terms and conditions particular to their data sources and, by making use of the data source integrations offered by KPI Karta, you acknowledge and agree that your use of the Services may be subject to terms and conditions of those third party providers. For example, by making use of Google data source integrations, such as Google Analytics, Google Ads, Google Drive, Google Sheets, Gmail, Google Search, Google My Business, Google BigQuery, Google Calendar, or YouTube, your acknowledge and agree that your use of those Google services is governed by the terms outlined in the Google Privacy Policy. Also, in addition to the normal KPI Karta procedure for deleting Processed Data stored within the Service, Customers can revoke access to their Google data via the Google security settings page at Security permissions.CLASSIFICATION OF INFORMATION
When the Service is used by our Customers, we classify the Personal Information we collect, use and disclose into two main categories: The first is Personal Information included in Customer Information, and the second is Personal Information that is included in Processed Data. It is important to note that not all Customer Information or Processed Data is Personal Information, either because it relates to a company or a business, or it is not identifiable.PROCESSED DATA
KPI Karta does not control what information a Customer chooses to include in Processed Data. Because we are unable to determine whether it is Personal Information or other information, we treat it as though it may be Personal Information but our Customers are entirely responsible for any Personal Information they choose to include in Processed Data. All Customers and their provisioned users should understand that data in KPI Karta can be exported, shared or displayed by a Customer or provisioned user. Customers and provisioned users are solely responsible for the use of such exported, shared or displayed data and for protecting it appropriately.WHAT INFORMATION WE COLLECT
From our Customers, we only collect Customer Information that is necessary to establish and maintain the provision of the Services to them, as well as to understand and improve the usage and performance of the Services. When our Customers are corporations, as opposed to individuals, this information is not “Personal Information”. This Customer Information includes:- Customer name
- Contact information, including postal and email addresses
- Billing address
- Billing details (as necessary for our internal accounting purposes and for processing payments through our contracted processing service)
- Login information for provisioned users, such as usernames and encrypted passwords
- Information about how the Customer and its provisioned users use the Service, including information about the Customer, location information, usage patterns and intended use of the Services.
- Information provided by the Customer and its provisioned users in connection with any support given by the KPI Karta team related to the Services.
- Login information for third party integrations to KPI Karta, such as usernames and encrypted passwords
PURPOSES FOR COLLECTION
We process Customer Information:- Name and Contact information: To identify account owners and to contact you for both support and marketing purposes
- Billing address and details: For invoicing and payment purposes
- Login information: For authentication purposes for the software, and to identify the user for usage analytics
- Information about how the Customer and its provisioned users use the Services: To understand the usage patterns for the Services in order to improve the Services
- Information provided by the Customer and its provisioned users in connection with any support given by the KPI Karta team related to the Services: To resolve problems raised by the Customer or to improve the service based on Customer feedback
- Login information for third party integrations to KPI Karta, such as usernames and encrypted passwords: To connect to 3rd party services on behalf of the Customer in order to provide the Services
- Analytics to understand how our Customers and, their provisioned users make use of the Services and our website and to make targeted offerings of certain Services to our Customers and provisioned users;
- Information used to determine how to make improvements to the Services and to develop new features, capabilities and ways of presenting data; and
- For commercial purposes, either for KPI Karta or for others.
DISCLOSURE OF PERSONAL INFORMATION
KPI Karta may share Personal Information with people within the company who have a “need to know” the information for business or legal reasons, for example, in order to carry out an administrative function, such as processing an invoice or supporting questions that you have submitted to KPI Karta. We may share Personal Information with third parties, including:- government and regulatory authorities, for example to respond to a legal request or comply with a legal obligation, in which case we will make reasonable efforts to give the relevant individual notice of the disclosure, provided we are able to identify the individual and are lawfully able to do so;
- for the purposes of seeking legal or other professional advice;
- suppliers of IT services and third party service providers engaged by KPI Karta as further detailed in this Privacy Statement and our Terms of Service; and
- in the event that we sell, buy or merge any business or assets, including to the prospective seller or buyer of such business or assets and their respective professional advisers.
RIGHT OF ACCESS
Pursuant to applicable law, you may have certain rights in relation to your Personal Information, including a right of access. If your Personal Information is a part of our Customer’s Processed Data, you should seek this access from the relevant Customer. If we control the Personal Information, we may require additional information to confirm your identity, which will only be used for that purpose.DELETION OF DATA
Pursuant to applicable law, you may have certain rights in relation to your Personal Information, including a right of deletion. If your Personal Information is a part of our Customer’s Processed Data, you should seek data deletion from the relevant Customer. If we control the Personal Information, we may require additional information to confirm your identity, which will only be used for that purpose. KPI Karta will retain Processed Data for six (6) months after the termination or expiration of our Customer’s subscription to the Services or, if earlier, upon receipt of a written request for deletion of Processed Data made to KPI Karta support. KPI Karta will retain Customer Information as required to maintain its books and records.DATA LOCATION
KPI Karta uses Amazon Web Services to store and manage Customer Information and Processed Data in and from the United States of America and to back up Customer Information and Processed Data in Ireland. As indicated in the following section, KPI Karta uses service providers outside of Canada to store and manage the certain data and analytics associated with use of the Services.INFORMATION COLLECTED VIA OUR WEBSITE AND OUR APPLICATION
When you visit our websites, app.KPIKarta.com and KPIKarta.com, we may use cookies, pixel tags, analytics tools, and other similar technologies to help provide and improve our services to you, and as detailed below:- Cookies: Cookies are pieces of information stored directly on the computer that you are using. Cookies allow us to collect information such as browser type, time spent on the website, pages visited, language preferences, and other web traffic data. We use the information for security purposes, to facilitate online navigation, to display information more effectively, to personalize your experience while using the website, and to otherwise analyze user activity. We can recognize your computer to assist your use of the website.
- We also gather statistical information about the usage of the website and application in order to continually improve their design and functionality, understand how they are used, and assist us with resolving questions regarding the website and application. Cookies may further allow us to select which of our advertisements, features or offers are most likely to appeal to you and to display them to you. We may also use cookies in online advertising, features or offers to see how you interact with such advertisements, features or offers and we may use cookies or other files to understand your use of other websites.
- If you do not want information to be collected through the use of cookies when using our website or application, there is a simple procedure in most browsers that allows you to automatically decline cookies or gives you the choice of declining or accepting the transfer to your computer of a particular cookie (or cookies) from a particular site. However, if you do not accept these cookies, you may experience some inconvenience in your use of the website or application. For example, we may not be able to recognize your computer, and you may need to log in every time you visit the website or application.
- Pixel tags and other similar technologies: Pixel tags (also known as web beacons and clear GIFs) may be used in connection with our website to, among other things, track the actions of users of the website and other means of communication with you (including e-mail recipients), measure the success of our marketing campaigns, and compile statistics about usage of the website and response rates.
- Analytics tools: We use website and application analytics services provided by third parties that use cookies, JavaScript and other similar technologies to collect information about website or application use, perform data enrichment and to report patterns or trends. The third parties that provide us with these services may also collect information about your use of third-party websites. These analytics providers may store this analytics data in the United States and other locations.
SAFEGUARDING PERSONAL INFORMATION
We are required by law to safeguard the Personal Information in our custody or control. We use industry standard measures to protect Personal Information against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification. We protect Personal Information regardless of the format in which it is held. Our methods of protection include: (a) physical measures, such as restricted physical access to the systems delivering our Service; (b) organizational measures, including employee training and limiting access on a “need-to-know” basis; and, (c) technological measures, including the use of passwords and encryption. We use service providers, including our data hosting provider, to facilitate providing the Services. We use contractual means to make sure that our service providers only deal with Personal Information on our behalf to provide the Services and not for any other purposes. We also undertake diligence to satisfy ourselves that our service providers will implement adequate safeguards to protect Personal Information. If we have reason to believe that there has been a breach of security safeguards that has resulted in the inappropriate loss or disclosure of Personal Information, we will take reasonable measures to notify the affected Customers, as applicable, promptly and with sufficient detail to enable them to evaluate the breach and understand the likely consequences.REVISIONS TO THIS PRIVACY STATEMENT
KPI Karta may update this Privacy Statement from time to time. If it is updated, the effective date of the revision will be shown at the top of the Privacy Statement as the Last Revised date. In the event of a significant revision, Customers may receive notification by email or via the Services. All Personal Information collected after that revision date will be subject to the revised Privacy Statement.EU PERSONAL INFORMATION
This section shall apply only in respect of Personal Information relating to individuals located in the EU (“EU Personal Information”). For the purposes of applicable EU data protection and privacy laws, KPI Karta, with its registered offices at 55 Braeside Road, Toronto, ON M4N 1X9, Canada is considered the Data Controller in respect of all EU Personal Information that it collects, uses and otherwise processes for its own purposes as set out in this Privacy Statement. If you are a Customer, website user or other individual with whom we communicate and / or do business and you are located in the EU, you should read this Privacy Statement in full and particularly this section, before you provide us with any Personal Information or browse our website, and make sure that you are comfortable with our privacy practices. Please note that for the purposes of EU data protection and privacy laws, personally identifiable information collected in a business context (for example an individual’s business email address or job title) will be Personal Information. All provisions in this Privacy Statement relating to Personal Information will therefore apply to Customer Information, to the extent that this is considered to contain Personal Information under EU laws.REVISIONS TO THIS PRIVACY STATEMENT
KPI Karta may update this Privacy Statement from time to time. If it is updated, the effective date of the revision will be shown at the top of the Privacy Statement as the Last Revised date. In the event of a significant revision, Customers may receive notification by email or via the Services. All Personal Information collected after that revision date will be subject to the revised Privacy Statement.PURPOSE OF PROCESSING
The purposes for which we process EU Personal Information are as set out in this Privacy Statement. In most cases, we will be processing EU Personal Information on behalf of a Customer as a Data Processor, but in certain circumstances we will process EU Personal Information as a Data Controller, including for the purposes of communicating with you, administering your account and for carrying out data analytics and enrichment.LEGAL BASIS FOR PROCESSING
In accordance with the purposes for which we collect and use EU Personal Information, as set out above, the legal basis for KPI Karta processing EU Personal Information will typically be one of the following:- your consent;
- the performance of a contract that we have in place with you or other individuals;
- KPI Karta or our third parties’ legitimate business interests; or
- compliance with our legal obligations.
SHARING OF EU PERSONAL INFORMATION
KPI Karta may share EU Personal Information with people within the company who have a “need to know” the information for business or legal reasons, for example, in order to carry out an administrative function, such as processing an invoice or to direct a question that you have submitted to the relevant department at KPI Karta. We may share EU Personal Information with third parties, including:- government and regulatory authorities, for example to respond to a legal request or comply with a legal obligation, in which case we will make reasonable efforts to give the relevant individual notice of the disclosure, provided we are able to identify the individual and are lawfully able to do so;
- for the purposes of seeking legal or other professional advice;
- suppliers of IT services and third service providers engaged by KPI Karta as further detailed earlier in this Privacy Statement and our Terms of Service; and
- in the event that we sell, buy or merge any business or assets, including to the prospective seller or buyer of such business or assets and their respective professional advisers.