Kandor ID, LLC ("Kandor," "we," "us," or "our") cares about your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices and rights you have regarding your information.
This Privacy Policy applies to the Kandor website at kandor.id and our verified identity platform and related services (collectively, the "Services"). Our Terms of Use, incorporated by reference, govern your broader use of the Services.
IInformation We Collect
Information You Provide Directly
Account information
When you create a Kandor account, we collect your name, email address, and password.
Identity verification data
To complete verification, you submit a government-issued identification document (such as a passport or driver's license) and complete a biometric face match. This verification is handled by our third-party partner, Stripe Identity.
Professional information
You may add work history, professional role, location, and profile photo to your Kandor profile. This information is provided by you and may be publicly visible on your profile.
References and vouches
You may submit references about other Kandor members, request references from others, and (in future versions) issue or receive vouches. This content is tied to your verified identity.
Communications with us
If you contact us at support@kandor.id or through other channels, we collect the content of your messages and any information you choose to provide.
Information Collected Automatically
Usage information
When you use the Services, we collect information such as your IP address, browser type, device information, operating system, referring URL, pages you visit, features you interact with, and timestamps of your activity.
Cookies and similar technologies
We use essential cookies to operate the Services (for example, to keep you logged in). We do not use advertising cookies or tracking pixels, and we do not permit third-party advertising networks to track you across the Services.
Information From Third Parties
Stripe Identity
We receive verification results from Stripe Identity as described in Section 4.
We do not purchase data from data brokers, and we do not receive information about you from advertising partners.
IIHow We Use Your Information
We use your information for the following purposes:
To provide the Services
Creating and maintaining your account, completing identity verification, displaying your profile, processing reference requests and submissions, generating share links, sending transactional communications, and handling support requests.
To enforce our Terms
Detecting and preventing impersonation, duplicate accounts, coordinated abuse, and other violations. This includes retaining verification proof after account deletion for re-registration prevention and applying integrity flags where warranted.
To improve the Services
Analyzing usage patterns in aggregate to understand how the Services are used and where they can be improved. We do not sell this data.
To communicate with you
Sending transactional notifications related to your account and, with your permission, product updates and announcements.
To comply with legal obligations
Responding to valid legal process and enforcing our legal rights.
IIIHow and When We Disclose Your Information
We share your information only in the following circumstances:
Public Disclosures on the Services
Your profile and references are public. By design, your Kandor profile is visible to other members and, via share links, to visitors you authorize. References submitted about you are publicly displayed on your profile, attributed to the verified person who submitted them. References you submit about others appear publicly on their profiles, attributed to you.
Your verified identity status is public. Other users and visitors can see that you are identity-verified but cannot see your government ID document, date of birth, or verification metadata.
Service Providers
We share information with third parties who help us operate the Services:
- Stripe, Inc. — Identity verification processing.
- Bubble — The application platform on which Kandor is built.
- Cloudflare — Domain hosting and security services for the marketing site.
- Email and analytics providers as we add them, always under data processing agreements.
These providers are authorized to use your information only to provide services to Kandor, and they are bound by confidentiality and data protection obligations.
Legal Disclosures
We may disclose information if we believe in good faith that disclosure is necessary to:
- Comply with applicable law, legal process, or valid government request.
- Enforce our Terms of Use.
- Detect, prevent, or address fraud, security, or technical issues.
- Protect the rights, property, or safety of Kandor, our users, or the public.
Business Transfers
If Kandor is involved in a merger, acquisition, sale of assets, or similar transaction, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
Retention After Account Deletion
As described in our Terms of Use, when you delete your Kandor account, we retain proof of your prior verification — limited to your verified legal name and date of birth. This is used solely to prevent re-registration under the same identity. We do not use this information for any other purpose. This retention is permanent and is a condition of using the Services.
IVStripe Identity
Kandor uses Stripe Identity (operated by Stripe, Inc.) as our identity verification partner.
How the process works
- You submit your government-issued ID document and complete a biometric face match directly with Stripe.
- Stripe processes these materials and returns the verification result and verified attributes to Kandor.
- Kandor stores only the verification result and the verified attributes.
- Stripe handles the sensitive identity materials in accordance with its own Privacy Policy, available at stripe.com/privacy.
By completing verification, you agree to Stripe's processing of your information as described in Stripe's privacy documentation.
VYour Choices
Profile information
You can update most of your profile information at any time through your account settings.
References
You can withdraw references you have submitted at any time. Withdrawal is silent, with no public notification. You cannot delete references others have submitted about you, though you may post a permanent public response to unfavorable references after they publish.
Email communications
You can unsubscribe from marketing emails using the link in those emails. You cannot unsubscribe from transactional communications essential to your account.
Cookies
You can configure your browser to block or delete cookies. Note that blocking essential cookies may prevent the Services from working correctly.
Account deletion
You may delete your account at any time. Deletion results in the inactivation of your profile and the retention of verification proof as described in Section 3.
VIYour Privacy Rights
Depending on where you live, you may have additional rights regarding your personal information. These include the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Delete your account and associated data, subject to the verification retention described above.
- Object to or restrict certain processing of your information.
- Portability — receive your information in a structured, commonly used format.
- Not be discriminated against for exercising your privacy rights.
To exercise these rights, contact us at support@kandor.id. We will respond within 30 days and may require verification of your identity before fulfilling your request. If we deny your request, we will explain why and inform you of any appeal rights.
California Residents
If you are a California resident, the California Consumer Privacy Act (CCPA) provides additional rights. The categories of personal information we collect and how we use them are described in Sections 1 and 2 above.
European Economic Area, United Kingdom, and Switzerland Residents
If you reside in the EEA, UK, or Switzerland, you have rights under applicable data protection laws (such as the GDPR). Kandor acts as the data controller for personal information collected through the Services. The legal bases on which we rely include your consent, the performance of our contract with you, and our legitimate interests in operating and improving the Services.
You have the right to lodge a complaint with your local data protection authority if you believe we are not handling your information in accordance with applicable law.
VIIData Retention
We retain your information as follows:
- Active account data: For as long as your account is active.
- Profile and reference content: For as long as the content is active on the Services. References you withdraw are deleted; references withdrawn by others are deleted. Published references remain on profiles while the subject's account is active.
- Verification proof after account deletion: Retained permanently for re-registration prevention, as described in our Terms of Use.
- Support communications: For up to three years after resolution, for service improvement and legal purposes.
- Legal retention: Information subject to legal retention requirements is kept for the period required by law.
VIIISecurity
We take reasonable administrative, technical, and organizational measures to protect your information, including encryption in transit, access controls, and security audits. Stripe Identity handles the most sensitive information (your government ID and biometric data) under Stripe's enterprise-grade security program.
No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a security breach that affects your information, we will notify you as required by applicable law.
IXChildren
The Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us at support@kandor.id and we will delete it.
XInternational Data Transfers
Kandor is based in the United States, and information we collect may be processed and stored in the United States or other countries where we or our service providers operate. If you are located outside the United States, you consent to the transfer and processing of your information in jurisdictions that may have different data protection laws than those of your country.
XIThird-Party Services
The Services may contain links to third-party websites or services (for example, links to external articles or source quotes on our marketing site). This Privacy Policy does not apply to those services. We encourage you to review the privacy practices of any third-party service before providing your information to it.
XIIChanges to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Services at least 14 days before the changes take effect. The "Effective Date" at the top of this policy indicates when it was last revised.
XIIIContact
For questions about this Privacy Policy or your information, contact us at: