Privacy Policy

This Privacy Policy explains how Kanara AI ("Kanara", "we", "us", "our") collects, uses, discloses and safeguards information when you visit www.kanara.ai, use our marketing-mix-modelling (MMM) platform, or when an advertising account you control grants Kanara access to its data via a third-party advertising API (e.g. the Google Ads API or Meta Marketing API).

Kanara is committed to processing personal data fairly and lawfully in accordance with the EU General Data Protection Regulation (GDPR), the Irish Data Protection Acts and equivalent applicable laws.

1. Information We Collect

1.1 Information You Provide Directly

• Account information — name, business email, company name, role, and password (hashed) when you register.
• Contact information — anything you submit through our contact or demo-request forms (name, email, message).
• Billing information — handled by our payment processor; we do not store full card numbers.

1.2 Information Collected Automatically

• Usage analytics — pages viewed, browser type, device type, IP address, and approximate location, collected via Google Analytics for the purpose of improving the website.
• Cookies — used for authentication, session management and analytics. You can control cookies through your browser settings.

1.3 Information Received from Third-Party Advertising APIs

When an advertiser explicitly authorises Kanara to access their advertising account — for example by accepting a Google Ads Manager Link to MCC 278-285-1747 or a Meta Business Partnership — we read aggregated campaign performance data from those platforms on the advertiser's behalf, including:

• Daily campaign-level impressions, clicks, cost, reach and frequency.
• Conversion counts and conversion values (purchases, leads) attributed by the platform.
• Campaign metadata: campaign name, ad-account ID, currency code, time zone, status.

What we do NOT collect from these APIs: we do not access, store or process personal data of end-users (no email addresses, no IP addresses, no device IDs, no audience or customer lists). All data ingested is aggregated at the campaign × day grain.

API access is read-only. Kanara never creates, modifies, pauses, bids on or otherwise alters your advertising campaigns.

2. How We Use Your Information

• To provide and operate the Kanara MMM platform — building causal state-space models that attribute incremental sales to each marketing channel.
• To generate budget-allocation recommendations and what-if scenarios for the advertiser whose data was ingested.
• To authenticate you, secure your account, and prevent abuse.
• To respond to enquiries, provide customer support, and send service-related communications (e.g. security notices, billing, policy changes).
• To improve the platform — debug issues, monitor performance, and develop new features.
• To comply with legal obligations.

We do not sell your data, and we do not use advertising-API data to train general-purpose machine-learning models or to benefit any party other than the advertiser that granted us access.

3. Legal Bases for Processing (GDPR)

• Contract — to deliver the service you have signed up for.
• Consent — where you (or the advertiser) have explicitly granted Kanara access to a data source.
• Legitimate interests — to operate, secure and improve the platform, balanced against your privacy rights.
• Legal obligation — where processing is required by applicable law.

4. Data Sharing and Disclosure

We do not sell personal data. We share data only in these cases:

• Service providers (sub-processors) — cloud hosting, error monitoring, analytics, payment processing — under written data-processing agreements.
• Legal requirements — to comply with a valid court order, regulator request or applicable law.
• Business transfers — in the event of a merger, acquisition or asset sale, with notice to affected users.

5. Data Retention

We retain advertising-API data and modelling outputs for as long as the advertiser maintains an active account with us, plus a maximum of 24 months thereafter for backup, audit and legal purposes. Account credentials and contact details are retained for the lifetime of the account and deleted within 90 days of account closure.

You may request earlier deletion at any time — see Section 7.

6. Data Security

All data is transmitted over TLS 1.2+ and stored encrypted at rest. Access to production data is restricted to authorised Kanara personnel under the principle of least privilege. We maintain audit logs of access to advertising-API data.

7. Your Rights

Under GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time, including by revoking the Manager Link in Google Ads or the Business Partnership in Meta.
• Lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or your local supervisory authority.

To exercise any of these rights, email privacy@kanara.ai. We will respond within 30 days.

8. International Data Transfers

Kanara is established in Ireland and processes data primarily within the European Economic Area. Where any sub-processor transfers data outside the EEA, we rely on Standard Contractual Clauses or an adequacy decision by the European Commission.

9. Children

Kanara is a B2B platform and is not directed to individuals under 16. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email and/or a prominent notice on the website at least 14 days before they take effect. The "Last updated" date above always reflects the current version.

11. Contact

Privacy questions, data-subject requests, and complaints:
Kanara AI · Ireland
Email: privacy@kanara.ai
General: info@kanara.ai