Privacy notice

Data we collect

Account: name, email, password (stored only as a hash by our authentication provider), language and role in your company.

Company: company name, website, a summary of the business, and the knowledge your team adds (facts, documents, files you import).

Your use of the assistant: your chats and the files you attach. Chats are private: neither admins nor teammates can open them.

Collaboration: tasks, inbox notices, questions left for the team and answers.

Voice: when you dictate or talk with Kedler, your audio is processed to turn it into text and to answer you out loud. We don’t keep the audio; the text stays in your chat.

Billing: the payment status of your plan. Card details are handled directly by Stripe; we never see or store them. To issue invoices (CFDI) we store the tax details you enter: legal name, RFC, tax regime, postal code, CFDI use and email.

Usage: how many answers each person uses (no content), to count your plan and protect the service from abuse.

Technical: cookies needed to keep your session, your language, your theme and the sidebar state. We don’t use advertising or analytics cookies.

What we use it for

Primary purposes (needed for the service): create and secure your account; answer your questions using your company’s knowledge and, if you allow it, the web; do the work you hand off (documents, spreadsheets, summaries); let your team share tasks and knowledge; count your plan’s answers; charge and invoice; give support.

We don’t sell your data, and we don’t use your company’s content to train AI models.

Google Drive and Google Calendar

If an admin connects the company’s Google Drive, Kedler gets read-only access (the drive.readonly permission) to that account’s files, including shared drives. It never creates, changes or deletes files. An admin can limit what Kedler searches and reads to a single shared drive or a single folder (and its subfolders).

Kedler searches and reads those files only when someone at the company asks it a question or gives it work, to answer and cite where the information came from. What it reads is not saved to the company’s knowledge base, except files an admin chooses to save there or facts someone agrees to save. The answer stays in the private chat of the person who asked.

Anyone at the company can ask Kedler about what’s in the connected Drive (or in the part the admin chose). That’s why we ask you to connect a company account, not a personal one.

If you connect your Google Calendar, Kedler sees your events to find free time and only creates an event when you confirm it. Your calendar is private: nobody else at your company sees it.

To answer, what Kedler reads is sent to Anthropic, our AI provider, which under its commercial terms does not use it to train models.

We don’t sell Google data or use it for advertising or to train AI models. Kedler’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google access keys are stored encrypted on our servers and are never sent to your browser.

To disconnect, an admin goes to Company → Connectors → Disconnect (and each person their Calendar in Settings). When you disconnect, we revoke access with Google and delete the key. You can also remove access at any time at myaccount.google.com/permissions. Anything already saved to the knowledge base stays until an admin deletes it.

Who we share it with

Only with the providers that make Kedler work, to provide the service and under their terms for business customers:

Anthropic (AI models that write the answers) · Voyage AI (turns text into vectors to find the right facts) · ElevenLabs (dictation and voice conversations) · Supabase (database, authentication and file storage) · Vercel (hosting and downloads of the Mac app) · Stripe (payments) · Facturapi (CFDI invoices before the SAT).

These providers process data outside Mexico, mainly in the United States. By using Kedler you accept these transfers, which are necessary to provide the service.

We may also share data when an authority requests it under the law.

Your ARCO rights

You can access, rectify, cancel or oppose the use of your personal data (ARCO rights), and revoke your consent, by writing to irdt@corprdt.com with your name, the email of your account, what you’re asking for and a copy of an ID. We’ll answer within 20 business days and, if it applies, carry it out within the following 15 business days.

You can update your name and language yourself in Settings. If you leave your company, your account and your chats are deleted; what you added to the company’s knowledge stays with the company.

How long we keep it

While your account or your company’s account is active, and afterwards only as long as required by tax and commercial obligations (for example, invoices).

Security

Each company’s data is isolated at the database level, connections are encrypted and access keys stay on our servers. No system is perfectly secure; if we learn of a breach that affects you, we’ll let you know.

Changes to this notice

We’ll publish any change on this page with its date. If the change is significant, we’ll also tell you inside the app.