Effective Date: October 1, 2025
Contact: [email protected]
Website: https://davyinc.us
Entity: KANDY PR, LLC, 1111B S Governors Ave STE 23624, Dover, DE 19904, United States
1. Introduction
KANDY PR, LLC (“we”, “our”, “us”) respects your privacy and is committed to protecting personal data collected through our SaaS platform, websites, and integrations with third-party platforms such as TikTok Shop, Shopify, and WooCommerce.
This Privacy Policy explains how we collect, use, store, and protect your information, and outlines your rights under applicable data protection laws including GDPR (Europe) and CCPA (California).
2. Information We Collect
We may collect the following types of data:
- Account information: name, email, business details, and contact data provided by merchants.
- Transactional data: store IDs, orders, product information, and campaign statistics synchronized via official APIs.
- Technical data: device identifiers, IP addresses, browser type, and system logs for performance and security monitoring.
We do not collect sensitive personal data such as government IDs, payment card details, or biometric data.
3. How We Use Information
We process collected data to:
- Provide and operate our SaaS services;
- Synchronize product, order, and promotion data between connected stores;
- Maintain system security and prevent fraud;
- Comply with legal or regulatory obligations;
- Communicate updates, maintenance notices, or service improvements.
We do not sell, rent, or trade personal data with third parties.
4. Legal Basis for Processing
Processing is based on:
- Performance of a contract (providing SaaS features to merchants);
- Legitimate interests (improving system reliability and security);
- User consent where required by law.
5. Data Retention
We retain user data only for as long as necessary to provide services or meet legal obligations.
Upon termination of an account or contract, all personal and business data are securely deleted from our active systems and backups within 30 days.
6. Data Sharing & Subprocessors
We rely on secure third-party providers to host and operate our infrastructure, including:
- Amazon Web Services (AWS, U.S. region) for hosting and data storage.
We do not use additional subprocessors without prior notice and due diligence.
7. Data Security
We apply industry-standard security measures, including:
- Encryption in transit (TLS 1.2+) and at rest (AES-256);
- Multi-factor authentication for administrative access;
- Role-based permissions and audit logging;
- Continuous monitoring via AWS CloudWatch and GuardDuty.
8. International Data Transfers
Data is primarily processed and stored in the United States.
If cross-border data transfer occurs, it will be protected through appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms.
9. Your Rights
Users have the right to:
- Access, correct, or delete their data;
- Object to processing in certain circumstances;
- Request data portability or account closure.
Requests can be submitted to [email protected], and will be handled within 30 calendar days.
10. Data Breach Notification
In the event of a data breach affecting personal information, we will notify affected users and relevant authorities without undue delay, typically within 72 hours of discovery.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be published on this page with a revised “Effective Date.”
Significant changes will be communicated directly via email or system notifications.
12. Contact Us
If you have any questions about this policy or our data protection practices, contact:
📧 [email protected]
📍 KANDY PR, LLC – 1111B S Governors Ave STE 23624, Dover, DE 19904, USA