Kinds - Privacy Policy

Last updated April 9, 2025

Welcome to the website(s) of Kinds Security, Inc. ("Kinds", "Company", "we", "us" and/or "our"), which includes: https://trykinds.com and any other web properties maintained by Kinds (collectively, the "Site").

If you are unable to access this Policy due to a disability or impairment, please contact us using the contact details in the Contact Kinds Section and we will arrange to supply you with the information you need in an alternative format that you can access. You can also access a printable version of this Policy here.

This Privacy Policy ("Policy") sets forth Kinds's practices with respect to information including "personal data", "personal information", and "personally identifiable information" as these terms are defined under applicable data protection laws ("Personal Data"), that is collected, used and shared by Kinds in the usual course of business, including when you:

visit, interact with or use our Site;
visit our social media pages;
submit a job application;
receive online advertisements or communications from us, including emails, phone calls and texts;
or register for, attend and/or otherwise take part in our contests, events, tutorials or webinars (we collectively refer to all of these activities as our "Marketing Activities");
purchase or use any Kinds services as an authorized end user (for example, as an individual customer or as an authorized team member of one of our business customers) (herein referred to as "Service Users") (we collectively refer these activities as the "Services" in this Policy), specifically where we act as a data controller of your Personal Data (unless otherwise noted).

For clarity, our Services are intended for use by our business customers. As a result, for much of the Personal Data we process through the Services, we act as a processor or service provider on behalf of our business customers. For more information, see Section 2 below.

"You" may, depending on the context, be a visitor to our Site or social media pages; a recipient of our communications or online advertisements; a job applicant; or a Service User.

We may provide additional "just-in-time" disclosures or additional information about our data processing practices. These notices may supplement this Policy or clarify Kinds's privacy practices in the circumstances described or may provide you with additional choices about how Kinds processes your Personal Data.

This Policy does not apply to any third-party websites, services or applications, even if they are accessible through or are necessary for the use of our Services.

When you access or use our Services or engage with our Marketing Activities, you acknowledge that you have read this Policy and understand its content. Your use of our Services and interaction through our Marketing Activities and any dispute over privacy is subject to this Policy and the Terms of Service located at trykinds.com/terms, or any other applicable service terms (including any applicable limitations on damages and the resolution of disputes).

Quick Links

We recommend that you read this Policy in full to ensure you are fully informed. However, to make it easier for you to review those parts of this Policy which apply to you, we have divided up the document into the following sections:

About Kinds
Information We Process on Behalf of our Customers
The Personal Data We Collect
Our Use of Your Personal Data and Our Legal Basis for Processing
Our Disclosure of Your Personal Data
Social Media and Technology Integrations
Cookie Policy and other Tracking Technologies
Security
Retention
Your Privacy Rights & Choices
Children's Personal Data
Links to Third-Party Web Sites
Changes to Kinds's Privacy Policy
Contact Kinds

1. About Kinds

Kinds Security is an email security solution.

2. Information We Process on Behalf of our Customers

Our Services are intended for use by our business customers. As a result, for much of the Personal Data we process through the Services, we act as a processor or service provider on behalf of our business customers. This means that our business customers control what Personal Data we collect through the Services and how we use it. Where our activities as a processor or service provider are clear and consistent across our customer base, we have described those activities herein in the interests of transparency. However, if you are a Service User, and have privacy related questions or concerns about the privacy practices of or the choices the relevant business customer has made regarding your information via the Services, you should contact the relevant customer (e.g. your employer) directly or review their privacy notices.

We are not responsible for the privacy or data security practices of our business customers, which may differ from those set forth in this Policy.

3. The Personal Data We Collect

The Personal Data we collect depends on the context of your interactions with Kinds and the choices you make (including your privacy and browser settings), the Services you use (including whether you self-host the Services or use Kinds's cloud hosting), your location and applicable law, but can include the following:

Personal Data That You Provide to Kinds:

We collect different types of Personal Data that you voluntarily submit through the Site. We collect Personal Data from you when you voluntarily provide such information, such as when you contact us with inquiries, respond to one of our surveys, register for access to the Services or use certain Services. Wherever Kinds collects Personal Data, we make an effort to provide a link to this Privacy Policy.

The Personal Data we collect may include:

Marketing information (Identifiers) - such as your business contact information (name, job title, organization, phone number, email address, country/state of residence, mailing address) and contact preferences;
Online content (Internet activity information) - which includes Personal Data disclosed by you on message boards, chat features, blogs and other services or platforms to which you are able to post information and materials, including third party services and platforms;
Applicant information (Employment and Education information) - if you apply for a job with Kinds (such as your resume, desired pay, education and work history, whether you are over the age of 18, and visa status). You also may choose to provide your gender, ethnicity, veteran status, disability status, and links to your website, blog, portfolio, or LinkedIn profile;
Services account registration data (Customer Records) - such as your email, username or account name and hashed password when you sign-up or register for an account with us and the unique Service user ID assigned to you in our systems;
Services management data ("Customer Data") – Personal Data provided, uploaded, or submitted by customer to the Kinds cloud-hosted Services in order to provide our suite of email security services to organizations, such as: email header, message contents, subject, sender, recipients, date, attachments, user names, roles, email addresses, IP addresses, organization and domain names, groups, rules, configurations, activity logs, audit logs, and any other information that may be contained in an email (.eml) file processed by our Services (note that, except where proactively shared by customer and as expressly identified in any applicable terms of service, Kinds does not process or otherwise access the contents of any email file when a customer chooses to self-host our Services);
Troubleshooting and support data - which is data you provide or we otherwise access in connection with support queries we receive from you. This may include, for example, contact or authentication data, the content of your chats and other communications with Kinds, the product or service you are using related to your help inquiry and related crash analytics.

Personal Data we collect automatically:

When you use or interact with the Services and Marketing Activities, we automatically collect or receive certain information through our Services (for example in log files) and through other technologies (such as cookies) about your device and usage of the Services. In some countries, including countries in the EU and UK, this information is considered Personal Data.

The categories of Personal Data we automatically collect and have collected in the last 12 months include your device's IP address, the domain name of the website from which your device linked to our Services and Marketing Activities, and your browsing habits on and usage of the Services and Marketing Activities through your device:

Commercial Information - Information about the products or services you purchased, looked at or searched for, and any related use histories or tendencies;
Online Identifiers and Inferences - Details about your computers, devices, applications, and networks, including internet protocol (IP) address, URLs or domain names of websites you visit, information about applications installed on your device, traffic data, cookie identifiers, mobile carrier, mobile device ID, advertising identifiers;
In relation to the Services: Customer Data (as defined in this Section); Services account registration data; performance information; data relating to your interaction with the Services (e.g. time of access, features used, length of use, OS version, browser information, device IDs); crash logs; and other aggregate or statistical information.

Information From Third-Party Services:

We may receive information about you from other sources, including through Third-Party services that you may connect to Kinds (such as API integrations) and organizations that supplement information directly provided by you. For example, if you access our Services through a Third-Party application, such as Google Sign-In, we may collect information about you from that Third-Party application that you have made available. Information we collect through integrations and other connected Third-Party services may include your name, email address, logging information, etc. This information allows us to provide you with the Kinds services and to enhance our ability to provide you with information about our business and products.

Information from Other Sources:

We may obtain Personal Data about you from other sources. The categories of other sources from which we collect and have collected Personal Data from in the last 12 months include:

Social networks when you interact with our Services and Marketing Activities or grant permission to us to access your information;
Partners with which we offer co-branded services or engage in joint marketing activities;
Third parties that have indicated that they have your consent or are otherwise legally permitted or required to disclose your Personal Data to Kinds. For example, we may be provided with information about individuals who could be interested in using our Services;
Other individuals at your organization, or individuals who may refer Kinds to you, for the purpose of learning more about our Services;
Background screening providers that Kinds uses in the event you are selected to join our team via our careers and recruitment process. We conduct background screenings through a third-party service provider and verify information from your job application that relates to your past education, employment, credit and/or criminal history, as allowed by applicable law;
Recruitment agencies, who may share your Personal Data with us for purposes of helping to identify and select candidates; and
Publicly-available sources such as data in the public domain.

Aggregated Personal Data:

In an ongoing effort to better understand and serve our prospects and Service Users, Kinds often conducts research on its customer demographics, interests and behavior based on Personal Data and other information provided to us. As it relates to our Services, we may also use machine learning and performance metrics for the purposes of providing and improving Kinds's products and services. This information may be compiled and analyzed on an aggregate basis. This aggregate information does not identify you personally. Kinds may also disclose such aggregated information in order to describe and promote our Services to current and prospective business partners, and to other third parties for other lawful purposes.

4. Our Use of Your Personal Data and Our Legal Basis for Processing

We may use your Personal Data for the following purposes:

To communicate, including…
- With you, our customers, partners and other third parties (e.g. through email) about the Services, including to communicate changes and revisions to our policies, technical notices, security alerts, support, renewal notices, for account verification and other administrative messages;
- To ask you to participate in surveys or solicit feedback on our Services;
- If you fill out a web form or request support, if you contact us by other means, including via a phone call, we use your data to perform our contract with you or if we do not have a contract directly with you;
- With you about promotions, upcoming events, and news about products and services offered by Kinds (e.g. marketing newsletters, telemarketing calls, SMS, emails or push notifications) and, in some cases, our selected partners.
To process job applications, including…
- To evaluate your application, make hiring decisions, and evaluate your authorization to work, if applicable, including evaluating immigration status with respect to authorization to work;
- To communicate with you and inform you of current and future career opportunities (unless you tell us that you do not want us to keep your details for such purposes);
- To manage and improve our recruiting and hiring processes, such as soliciting feedback via candidate surveys, or to conduct reference and background checks where required or permitted by applicable local law.
To provide and improve our products and services, including…
- Operating, maintaining and providing to you the features and functionality of the Services;
- Using a person's IP address and other online identifiers to generate aggregate, non-identifying information about how our Services are used;
- To monitor and improve marketing campaigns and make relevant suggestions to users;
- To understand you and your preferences to enhance your user experience.
To fix problems and protect the Services, you, ourselves, other customers and the public generally and to comply with applicable laws, including…
- To troubleshoot and diagnose product problems and to provide other customer support, including to help us provide, improve and secure the quality of our products, services and training and to investigate security incidents;
- Using call recording data, including to provide support services and investigate security incidents;
- To ensure the safety and security of our Services, including verifying accounts and activity, investigating suspicious activity, detecting and preventing fraud and other illegal activities and to protect the rights and interests of us, users, and other customers' users, third parties, and the public;
- To enforce our terms of service or protect our business;
- To comply with our legal obligations under applicable laws, we process your Personal Data when cooperating with public and government authorities, courts or regulators, to the extent this requires the processing or disclosure of Personal Data to protect our rights, or is necessary for protecting against misuse or abuse of our Services, protecting personal property or safety, pursuing remedies available to us and limiting our damages, complying with judicial proceedings, court orders or legal processes, or to respond to lawful requests.
For other legitimate business purposes, such as to update, expand, and analyze our records, identify new customers, data analysis, to protect, investigate, and deter against fraudulent, unauthorized, or illegal activity, developing new products, enhancing, improving or modifying our Services, identifying usage trends, benchmarking, determining the effectiveness of our promotional campaigns, trials and operating and expanding our business activities.

5. Our Disclosure of Your Personal Data

Kinds is not in the business of selling your information for monetary consideration. We consider this information to be a vital part of our relationship with you and we only share it where reasonably necessary to provide our services to you or enhance our relationship with you. There are, however, certain circumstances in which we may share your Personal Data with certain third parties without further notice to you. The types of entities to whom we disclose and have disclosed information within the last 12 months, include:

Affiliates: We may share all categories of your Personal Data with our affiliates for internal business purposes (e.g. for customer support, marketing, or technical operations).
Third-party service providers: Our service providers may process all categories of your Personal Data in connection with their work on our behalf and are contractually prohibited from retaining, using, or disclosing your information for any purpose other than to provide this assistance, although we may permit them to use aggregate information which does not identify you or de-identified data for other commercial purposes. We may also share your Personal Data with our marketing service providers to help us better market our products and services to you. These marketing service providers may use your Personal Data only for the purpose of helping us to provide relevant products and services information to you and are expressly obligated not to disclose your Personal Data to others. If you do not want us to use your Personal Data for these marketing purposes, you can opt out by contacting us at privacy@trykinds.com.
Vendors, Agents, Consultants and Related Third Parties: Kinds, like many businesses, sometimes hires other companies to perform certain business-related functions. Examples of such functions include mailing information, maintaining databases, analytics and marketing or advertising services, and processing payments. When we employ another entity to perform a function of this nature, we only provide them with the information that they need to perform their specific function.
Partners: Kinds may share business contact information, marketing information, troubleshooting and support data with business partners of ours (including referral partners, resellers, and managed service providers), for the purpose of assisting with sales, marketing and support activities.
Merger or acquisition: We may share or transfer all categories of your information in connection with, or during negotiations of, any proposed or actual merger, purchase, sale, change of control, or any other type of acquisition or business combination of all or any portion of our assets, or transfer of all or a portion of our business to another business.
Legal Requirements: Kinds may disclose any categories your Personal Data if required to do so by law or in the good faith belief that such action is necessary to: (i) comply with a legal obligation or other legal process, and where required, in response to lawful requests by public authorities, including to meet national security or law enforcement requirements; (ii) protect and defend the rights or property of Kinds; (iii) act in urgent circumstances to protect the personal safety of users of the Services or the public; or (iv) protect against legal liability.
Consent: To any other person you have consented to us sharing Personal Data.

Without limiting the foregoing, we may share aggregated information which does not identify you or de-identified information with other parties or affiliates except as prohibited by applicable law.

6. Social Media and Technology Integrations

Our Services and Marketing Activities contain content from and hyperlinks to websites, locations, platforms, and services operated, owned, and maintained by third parties. In addition, we integrate technologies operated or controlled by other parties. For example, we hyperlink from our Site and Services to websites, social media platforms, and other services not operated or controlled by us. These other parties may use tracking technologies to independently collect information about you and may solicit information from you. Also, if you use one of their features, both we and the applicable other party may have access to and use information associated with your use of that feature. If you publicly reference our Site or Services or Marketing Activities on a social network (e.g., by using a hashtag associated with Kinds in a tweet or post), we may use your reference on or in connection with our Services and Marketing Activities.

The information collected and stored by third parties, whether through our Services and Marketing Activities, or another parties' service or device, remains subject to their own policies and practices, including what information they share with us, your rights and choices on their services and devices, and whether they store information in the U.S. or elsewhere. Kinds is not responsible for and makes no representations regarding the privacy practices of third parties. You should carefully read their own privacy policies before providing any information to such parties.

7. Cookie Policy and other Tracking Technologies

We may use cookies or other tracking technologies to automatically collect information from your computer or mobile device about your browsing activities over time and across different websites following your use of the Site, your interaction with our Marketing Activities as well as in connection with the Services.

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including necessary cookies) you may not be able to access all or parts of the Site. For more information, and to manage how Kinds collects and stores non-essential cookies, please visit our Cookie Manager.

In addition, we may use session replay technology to identify and resolve customer issues, to monitor and analyze how you use our Site and Services, and to better understand user behavior and improve our Site and Services. By continuing to use the Site or Services, you consent to the use of session replay technology. If you would like to change your settings with respect to session replay technology, you may do so within our Cookie Manager.

8. Security

Kinds takes reasonable administrative, physical and electronic measures designed to protect your Personal Data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. Therefore, we cannot guarantee the security of your Personal Data. Please keep this in mind when disclosing any Personal Data to Kinds via the Internet.

9. Retention

We may retain your Personal Data for as long as necessary for the purposes it was collected, or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. Because these needs can vary for different data types in the context of different services, actual retention periods can vary. We determine the appropriate retention period for Personal Data based on the amount, nature and sensitivity of your Personal Data processed, the potential risk of harm from unauthorized use or disclosure of your Personal Data and whether we can achieve the purposes of the processing through other means, as well as applicable legal requirements (such as applicable statutes of limitation). After expiry of the applicable retention periods, your Personal Data will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further use of that data.

10. Your Privacy Rights & Choices

Kinds provides ways for you to access and delete your Personal Data as well as exercise other rights that give you certain control over your Personal Data.

Email Subscriptions. You can always unsubscribe from our commercial or promotional emails by clicking unsubscribe in those messages. We make every effort to promptly process all unsubscribe requests. If you choose to no longer receive marketing information, we may still communicate with you regarding such things as your security updates, product functionality, responses to service requests, or for other transactional, non-marketing related reasons.
You may exercise choice regarding the use of cookies as described in our Cookie Manager.

11. Children's Personal Data

Our Services and Marketing Activities are not intended for users under the age of 16, and Kinds does not knowingly collect Personal Data from children under the age of 16 in a manner that is not permitted by the U.S. Children's Privacy Protection Act ("COPPA") or other applicable laws. If you are under the age of 16, please do not use or submit any Personal Data through the Services. We encourage parents and legal guardians to monitor their children's Internet usage and to help enforce our Privacy Policy by instructing their children never to provide Personal Data without their permission. If you have reason to believe that a child under the age of 16 has provided Personal Data to Kinds through the Services, please contact us at privacy@trykinds.com or send us a letter to the mailing address in the section entitled "Contact Kinds" below.

We do not knowingly "sell" or "share" as those terms are defined under US Privacy Laws, the Personal Data of minors under 16 years old who are U.S. residents.

12. Links to Third-Party Web Sites

The Site and Services may contain links to other web sites, resources or services not operated or controlled by Kinds (the "Third Party Sites"). The policies and procedures we described here do not apply to the Third Party Sites. The privacy practices of these websites and services will be governed by their own policies.

We make no representation or warranty as to the privacy policies of any third parties, including the providers of third party applications. If you are submitting information to any such third party through our Sites or Services, you should review and understand that party's applicable policies, including their privacy policy, before providing your information to the third party. For example, it is possible that your payment information (such as credit card or debit card information) may be collected and stored by third party payment vendors. We suggest contacting those third parties directly for information on their privacy policies or if you have any questions or concerns about their privacy policies and practices.

13. Changes to Kinds's Privacy Policy

The Services and our business may change from time to time. As a result, at times it may be necessary for Kinds to make changes to this Privacy Policy. Kinds reserves the right to update or modify this Privacy Policy at any time and from time to time without prior notice. Please review this policy periodically, and especially before you use our Sites or our Services or engage with our Marketing Activities. This Privacy Policy was last updated on the date indicated above. Your continued use of the Services after any changes or revisions to this Privacy Policy shall indicate your agreement with the terms of such revised Privacy Policy. We encourage you to review this Policy frequently to be informed of how Kinds is protecting your information.