Privacy Policy

This Privacy Policy explains how Kadra ("we", "us") collects, uses, and protects information when you use our HR management software (the "Service"). It applies to account holders (companies and their users) and, where relevant, to the employee records those accounts store.

Information we collect

When you use Kadra, we collect:

• Account information: name, email, role, and company affiliation.
• Employee records your company stores in Kadra: names, contact details, national ID, employment and contract data, salary history, and related documents.
• Job applications submitted through a company's careers page on Kadra: the applicant's name, contact details, CV, and any note they add.
• Usage data: pages visited and actions taken within the app, for reliability and support.

How we use information

We use collected information to:

• Provide and maintain the Service, including the features your company relies on.
• Send transactional emails (invitations, password resets, account notices).
• Respond to support requests and improve the Service.

Service providers

Kadra uses these companies to run parts of the Service. Each processes data only on our behalf, under its own terms, and only for the purpose listed:

• Supabase: database, sign-in and file storage.
• Vercel: hosting the website and app.
• Resend: sending emails (invitations, payslips, reminders and notices).
• Didit: identity checks for new hires, only for companies that turn them on (see below).
• Anthropic: AI-written candidate summaries, only when a company asks for one.
• Meta (WhatsApp): messages to employees, only for companies that turn them on.
• Google Analytics (aggregate usage analytics) and Calendly (scheduling sales calls), where enabled.

We tell customer companies before we add a new provider that handles their employees' data. Some of these providers may process data outside Egypt. We do not sell your data or your employees' data to anyone.

Job applicants

When you apply for a job through a company's careers page on Kadra, your application goes to that company, which decides how it is used in its hiring process. Kadra stores it on the company's behalf, and only that company's owners and HR managers can see it. To access or delete your application, contact the company you applied to (they can permanently delete it from Kadra), or contact us at selim@kadraeg.com. A company may ask Kadra for an AI-generated summary of an application; Anthropic then processes the application to write it. The summary is a starting point for the company's own review, and a person makes every hiring decision.

Identity checks for new hires

A company can turn on identity checks and send a new hire a link to confirm their national ID. Before anything starts, the new hire sees what is checked and who checks it, and agrees to it. Didit, an identity verification company, then checks the photos of their ID and a short selfie on the company's behalf: that the ID is genuine, that the person is present, and that their face matches the ID. Because a selfie and a face match are biometric data, they are processed only with this consent. Kadra keeps the result and the text read from the ID (name, national ID number, date of birth and the card's expiry date), and the company's owners and HR managers decide which of those details go on the employee's record. Kadra does not keep the ID photos or the selfie. Didit keeps the photos and selfie for no longer than 30 days, to complete and audit the check, then deletes them, and may process this data outside Egypt under its own terms (see Didit's verification privacy notice). The company that sent the check is responsible for it; to ask about or delete an identity check, contact that company or selim@kadraeg.com.

Data retention

We retain account and employee data for as long as your company's account is active, plus a reasonable period afterward for legal and record-keeping purposes. You can request deletion of your company's data by contacting us.

Security

Access to employee data within Kadra is restricted by role (owner, HR manager, department manager) and enforced at the database level. Data is encrypted in transit. No system is perfectly secure, and we can't guarantee absolute security.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, or request deletion of your personal data. Contact your company's Kadra account owner, or reach out to us directly, to exercise these rights.

Cookies

See our Cookie Policy for details on the cookies we use and how to manage your preferences.

Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above when we do.

Contact us

Questions about this policy, or requests to access or delete your data? Email us at selim@kadraeg.com.