Privacy Policy

Last updated: October 8, 2026

This policy explains what KEDO Labs collects when you use our website, what we do with it, and the choices you have. Plain language, no tricks.

1. What we collect

Newsletter sign-ups: your email address, and which form you used. That's all we ask for.
Local browser data: we use browser storage (localStorage / sessionStorage) to remember whether you've already seen or completed the newsletter signup, so we don't nag you twice. This data stays on your device.
Shared demo links: KEDO may assign an opaque tracking code to a demo link and privately label it with a recipient or company name and outreach notes. We record visible-page opens, anonymous viewing sessions and Yes/No answers for that link. A forwarded link can register another open; these events do not verify a visitor’s identity. Optional recipient labels stay out of shared URLs and are visible only in our authenticated tracker and private operational Telegram summaries.
Checkout reminder emails: If you opt in to checkout reminder emails on our start page and leave an eligible new checkout unfinished, we may send up to three reminders within five days of checkout expiry through Resend. We store your email, checkout status and reminder history to operate the sequence. Payment, unsubscribe, or a delivery failure stops the reminders. Every reminder includes an unsubscribe link.
Website analytics: on kedolabs.com and health.kedolabs.com, we collect page paths, approximate country/region, referring website domain and campaign tags (UTM parameters). We also record sanitised link/button destinations and active viewing time while a page is visible and focused. We do not collect form entries or session recordings. PostHog (US hosting) also processes sanitised page views, clicks, demo progress and answers, and checkout activity. It uses browser session storage to group anonymous events; replay and automatic form capture are disabled. Private admin pages are excluded. A random session identifier in sessionStorage groups visits until 30 minutes of inactivity. Our analytics database does not store raw IP addresses, browser fingerprints, full query strings or payment/customer details. Reports use counts and totals. Data is stored with Neon; aggregate traffic and Stripe account totals are sent to our private Telegram report chat.
Basic technical data: standard server logs (IP address, browser type, pages visited) for security and site operation.

2. What we don't do

We don't sell, rent, or trade your email address or personal data.
We don't run third-party advertising trackers on this site.
We don't send drip campaigns. Mailing list email is occasional, operational, and easy to leave.

3. How your email is used

If you join our field notes list, we use your email address only to send that mailing and service messages related to it. Our email delivery is currently handled by a transactional email provider (Resend); when you submit your address, it is transmitted securely to that provider for storage and delivery. You can unsubscribe in one click from any message, or email us directly and we'll remove you within 48 hours.

4. Retention

We keep newsletter addresses until you unsubscribe or ask us to delete them. Server logs are kept for a short security window and then rotated. If you engage us as a client, the retention and handling of business data is governed by your signed agreement with us.

5. Security

Data in transit is encrypted (TLS). We apply least-privilege access internally: only team members who need to see a dataset for their work can see it. During assessment engagements, sandbox systems run against your data in isolated environments and are decommissioned after the verification window unless you direct otherwise.

6. Your rights

You can ask us any time to access, correct, delete, or export the personal data we hold about you. Email hello@kedolabs.com (general) · kofi@kedolabs.com (privacy & legal) and we'll action it within reasonable time under applicable law (GDPR, UK GDPR, CCPA, and similar regimes where relevant).

7. Cookies

This site does not use tracking cookies. The private business dashboard and demo-link tracker use a necessary, secure sign-in cookie for its authorised operator; this cookie is not used to track public viewers. We use the session and newsletter storage described in §1. Visit analytics honours Do Not Track and Global Privacy Control. You can also turn visit analytics off below; this preference is saved on this browser. Repeat this choice on each site and device you use.

8. Children

Our services are directed at businesses. We don't knowingly collect data from anyone under 16.

9. Changes to this policy

We may update this policy as the site evolves; changes take effect when posted here with a revised date.

10. Contact

Privacy questions or requests: hello@kedolabs.com (general) · kofi@kedolabs.com (privacy & legal)