Privacy Policy
This Privacy Policy explains how KA&DI HUB LLC and KaDiHub OÜ (together “KA&DI HUB”, “we”, “us”) handle personal data when you visit kadi-hub.com and its subpages (the “Site”), contact us, or when we contact you about a possible partnership or our services. We keep this short and only describe what we actually do.
1. Who we are
KA&DI HUB works through two companies:
- KA&DI HUB LLC, a limited liability company registered in New Mexico, USA. Address: 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA.
- KaDiHub OÜ, a private limited company registered in Estonia, registry code 17619703. Address: Jõe tn 3-406, 10151 Tallinn, Estonia.
Who is responsible for your data (the controller):
- KA&DI HUB LLC operates the Site and is the controller for Site visitors and for clients and partners outside the European Economic Area (EEA).
- KaDiHub OÜ is the controller for personal data of clients and partners in the EEA whom we work with, or discuss working with, through KaDiHub OÜ.
EU representative. KA&DI HUB LLC has designated KaDiHub OÜ (address above) as its representative in the European Union under Article 27 GDPR. Individuals and supervisory authorities in the EU may contact it on any matter related to the processing of personal data by KA&DI HUB LLC.
For any privacy question or request to either company, write to dmitry@kadi-hub.com.
2. What data we collect
2.1 When you visit the Site
The Site has no sign-up, no forms, no analytics and no advertising pixels. We do not build visitor profiles.
- Technical request data. Like any website, our hosting provider receives the technical data your browser sends with each request: IP address, browser and device type, the page requested, referring page, date and time. This data is used to deliver the Site, keep it secure and investigate errors or abuse.
- Your cookie notice choice. When you click “Accept” or “Reject” in our cookie notice, your browser stores that choice locally (see section 6). It is not sent to us.
2.2 When you contact us
If you email us or message us, we receive what you choose to send: usually your name, email address or messenger username, and information about you, your business or your project. We use it to reply, discuss a possible collaboration and, if we work together, to provide our services.
2.3 When we reach out to you (B2B outreach and partnership proposals)
We look for experts, coaches, creators and businesses whose work fits a joint educational program or our marketing services, and we may contact them first. For this we use only professional information that is publicly available or comes from business contact databases:
- What: your name, public social media handles and profile information (bio, follower and engagement figures, public posts and videos), your website, your business email or phone / WhatsApp number, and our notes on why a partnership might fit.
- Where from: your public profiles and website (in part collected with the help of Apify), and Apollo.io, a business contact database. Our first message tells you where we found your contact details.
- What we do with it: assess whether a partnership could fit, write to you, and in some cases prepare a personal proposal page for you on the Site (not indexed by search engines), which may include your name, public photos and public facts about your work.
- Audience checks: before proposing a partnership, we may look at public comments under your recent public posts to estimate, in aggregate, whether your audience is genuine and engaged. We do not build profiles of individual commenters, we do not contact them, and we delete the raw data within 60 days.
You can object at any time: reply “no” to any of our messages or email dmitry@kadi-hub.com, and we will stop contacting you in every channel. We keep only a minimal record (name and contact) on a do-not-contact list so that we do not write to you again.
2.4 Clients and partners, and work we do for them
If we work together, we process the contact and project information needed to deliver our services. When we run activities for a partner or client (for example a survey, a guide download or emails sent in the name of an expert we work with), we usually act on that partner’s behalf, and the partner’s own privacy notice also applies.
We do not knowingly collect special categories of data (health, beliefs, etc.). Please don’t send them to us.
3. Why we use your data and our legal bases
| Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Delivering the Site and keeping it secure | Technical request data | Legitimate interests in running a secure, working website |
| Replying to your messages and discussing a collaboration | Contact details and what you send us | Steps taken at your request before entering into a contract; legitimate interests in answering business inquiries |
| Finding and contacting potential partners and clients (B2B outreach), preparing proposals | Public professional data, business contact details, our notes | Legitimate interests in developing our business through relevant B2B partnerships, balanced against your interests (documented assessment); you can object at any time |
| Aggregate audience checks before proposing a partnership | Public usernames and comments under public posts | Legitimate interests; aggregate analysis only, raw data deleted within 60 days |
| Providing services to clients and partners | Contact and project data | Performance of a contract |
| Accounting, tax and legal compliance | Contracts, invoices, related correspondence | Legal obligation |
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
4. Service providers we use
We share personal data only with providers that help us run the Site and our communication. They process it on our behalf or as independent controllers under their own privacy policies.
- Vercel Inc. (USA) — website hosting and content delivery; receives technical request data.
- Cloudflare, Inc. (USA) — domain name (DNS) service.
- Google LLC (USA) — Google Workspace for our email and documents.
- Telegram — messenger, if we communicate with you there.
- Apify Technologies s.r.o. (Czech Republic) — tools that collect publicly available social media and website data for us.
- Apollo.io (USA) — business contact database.
- HighLevel, Inc. (USA) — CRM, email and booking for our projects.
- Whop, Inc. (USA) — sales, payments and member access for programs we run with partners.
- Wise — business accounts and payments for both our companies.
- Zoom and Google Meet (USA) — video calls; Miro — collaborative boards.
- Anthropic PBC (USA) — AI assistant (Claude) we use to analyse public information and draft documents.
- Meta Platforms — WhatsApp, if we message you there.
Fonts and scripts are served from our own hosting, so loading the Site does not send your data to font or script providers. Some partner proposal pages on the Site display images hosted by third parties. The Site contains links to external websites (for example case studies, Telegram, YouTube, Google Forms). Once you follow such a link, the other site’s privacy policy applies.
We do not sell your personal data and do not “share” it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act (CCPA/CPRA). We may disclose data if the law requires it or to protect our rights.
5. International transfers
KA&DI HUB LLC is based in the United States, and our providers process data mainly in the United States. Our two companies may share data with each other to the extent needed to serve you. If you are in the European Economic Area, the United Kingdom or Switzerland, your data is transferred to the US. Where required, such transfers rely on the EU–US Data Privacy Framework (and its UK and Swiss extensions) for certified providers, or on the European Commission’s Standard Contractual Clauses.
6. Cookies and similar technologies
The Site does not set any cookies — neither its own nor third-party, and no analytics or advertising cookies.
We use one item of your browser’s local storage, which works like a strictly necessary cookie:
| Name | Purpose | Type | Duration |
|---|---|---|---|
| kadi_cookie_consent | Remembers your choice in the cookie notice so it is not shown again | Strictly necessary, first-party local storage | 12 months |
If we ever add analytics or advertising tools, we will update this policy, and they will run only after you click “Accept” in the cookie notice. You can change your choice at any time with the “Cookie settings” link at the bottom of the Site, or by clearing your browser’s site data.
7. How long we keep data
- Technical request data is kept by our hosting provider for a limited period under its own retention rules.
- Correspondence with people who don’t become clients is kept for up to 24 months after our last contact, then deleted.
- Outreach data about potential partners and clients is kept for up to 24 months after our last activity, unless you object earlier. If you object, we delete it and keep only a do-not-contact entry.
- Raw data from audience checks is deleted within 60 days; we keep only aggregate figures without usernames.
- Client and partner data is kept for the duration of our work together and afterwards as long as needed to handle claims, and contracts and invoices as long as tax and accounting laws require.
8. Your rights under GDPR (EEA, UK, Switzerland)
If GDPR or UK GDPR applies to you, you have the right to:
- access the personal data we hold about you and get a copy;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to processing, including processing based on legitimate interests, and object at any time to being contacted for business development;
- receive your data in a portable format;
- withdraw consent at any time, where processing is based on consent, without affecting earlier processing;
- lodge a complaint with the data protection authority of your country of residence or work, or with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee), the authority for KaDiHub OÜ.
9. Your rights under US state privacy laws (including California)
If you are a California resident, or a resident of another US state with a comprehensive privacy law, you may have the right to:
- know what personal information we collect, use and disclose, and get a copy of it;
- request deletion of your personal information;
- request correction of inaccurate personal information;
- opt out of the sale or sharing of personal information — we do not sell or share it;
- limit the use of sensitive personal information — we do not collect it for that purpose;
- not be discriminated against for exercising these rights.
In the last 12 months we collected the categories “identifiers” (such as name, email, IP address), “internet or other electronic network activity information” (technical request data) and “professional or commercial information” you send us or that is publicly available, for the purposes in section 3. Sources: you, your public profiles and websites, and business contact databases. You may use an authorized agent to make a request. We honor Global Privacy Control signals as an opt-out of sale or sharing, although we do neither.
10. How to make a request
Email dmitry@kadi-hub.com with the subject “Privacy request”. We may ask you to confirm your identity before acting on it. We reply within 30 days (GDPR) or 45 days (CCPA), and will tell you if we need more time as the law allows.
11. Security
The Site is served only over HTTPS with modern security headers. We limit access to personal data to people who need it to do their work. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your data.
12. Children
The Site is meant for businesses and adults. We do not knowingly collect personal data from anyone under 16. If you believe a child sent us data, contact us and we will delete it.
13. Changes to this policy
We may update this policy when the Site or the law changes. We will change the date at the top of this page, and for material changes we will show a notice on the Site.