1. Who this policy applies to
Kaldwick is operated by the French sole trader identified in our Legal Notice, which lists the legal name, registered address, and business registration number.
This policy applies to visitors to Kaldwick websites, contractors and service businesses using Kaldwick, workspace members, and homeowners or prospects who submit information through a Kaldwick-powered quote form.
When a contractor publishes a Kaldwick quote form, that contractor is usually the business deciding why the homeowner data is collected and how it is used. Kaldwick acts as the software provider that captures, stores, records operational handoffs, and syncs that data according to the contractor workspace settings.
2. Information we collect
Depending on how Kaldwick is used, we may collect the following categories of information:
- Account information, such as name, email address, company name, workspace role, authentication identifiers, and billing status.
- Founding beta application information, such as first name, trade, city and state, cell number, qualification answer, contact-consent disclosure, consent version, and consent timestamp.
- Prospect and outreach information, such as a business name, a professional contact name and role, a business email or phone number, city and state, and publicly listed business details gathered from public professional sources, used to introduce Kaldwick to home services businesses.
- Homeowner request information, such as name, email, phone number, ZIP code, service requested, project details, property context, and preferred contact method.
- Consent evidence, including TCPA checkbox status, consent text, timestamp, form URL, country signal, and user agent where available.
- Operational data, such as form views, step progress, abandonment signals, requests, assignment and status records, next-action records, HubSpot status, launch checklist, and owner alerts.
- Attribution data, such as UTM source, medium, campaign, term, content, referrer, landing page, device/browser metadata, and approximate technical logs.
- Integration data, such as HubSpot portal identifiers, HubSpot field mappings, encrypted OAuth tokens, test outcomes, and HubSpot contact IDs.
- Billing data handled through Lemon Squeezy, such as checkout status, plan, subscription identifiers, customer identifiers, and webhook events. Kaldwick does not store full card numbers.
- Synthetic launch test data generated by admins to validate form capture, HubSpot, launch checklist, and paid-traffic safeguards before launch.
3. How we use information
We use information to operate Kaldwick and help contractors keep owned job requests from losing context or ownership.
- Create, publish, render, and improve quote forms.
- Capture, validate, store, and present homeowner job requests.
- Show Incoming Quotes records, ownership, next steps, launch exceptions, launch checklist, and activity timelines.
- Send HubSpot context, including creating or updating contacts and pushing request notes when enabled.
- Run launch tests, request-path proofs, cleanup tools, and traffic safety recommendations.
- Process billing, plan access, checkout redirects, webhook events, invoices, subscription status, and account upgrades.
- Detect abuse, troubleshoot errors, protect accounts, enforce policies, and maintain audit records.
- Measure product performance, reliability, and activation so the service can be improved.
4. Calls, texts, and TCPA consent
Kaldwick quote forms can include an explicit consent checkbox for calls and text messages. When a homeowner submits the form with that checkbox selected, Kaldwick stores the consent evidence listed above. This evidence helps the contractor document the request context.
When the product's text feature is enabled for a contractor with an approved sender, Kaldwick may send a single request-related acknowledgement on that contractor's behalf after a homeowner has provided the applicable consent. Kaldwick does not use that consent for Kaldwick marketing. The contractor remains responsible for the wording they approve and for their subsequent communications, including TCPA, state telemarketing, Do Not Call, and opt-out obligations.
The Founding 20 application separately asks applicants to consent to one-to-one calls or texts about their application. Kaldwick stores the disclosure version and server timestamp with the application. This is an application-support program, not a marketing sequence. Applicants can reply STOP to opt out of texts or contact privacy@getkaldwick.com. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for assistance. Carriers are not liable for delayed or undelivered messages.
A separate public description of the current program and its opt-in method is available on the SMS Program page.
5. Legal bases and business purposes
Where a legal basis is required, Kaldwick may process information to perform a contract, provide requested services, support legitimate business operations, comply with legal obligations, protect the service, or act with consent where required.
For US privacy purposes, Kaldwick uses information for business purposes such as providing software services, analytics, security, debugging, billing, customer support, fraud prevention, and integration delivery.
6. How information is shared
Kaldwick may share information only as needed to operate the service or follow workspace configuration.
- With the contractor workspace that published the form and its authorized members.
- With connected CRM and workflow tools, such as HubSpot or Calendly, when enabled by the workspace.
- With infrastructure and product providers used to host, store, secure, analyze, bill, and deliver the service.
- With payment providers such as Lemon Squeezy for checkout, subscription, tax, invoice, and payment processing.
- With professional advisors, authorities, or counterparties if needed for legal, compliance, security, or corporate reasons.
Kaldwick does not sell homeowner request data as a lead marketplace. The product is designed around owned contractor lead capture, not reselling shared leads.
Kaldwick does not sell or share personal information as those terms are defined under the CCPA/CPRA.
All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties.
7. Service providers
Kaldwick may use providers such as Vercel for hosting, Supabase for authentication and database services, Twilio for SMS delivery and related messaging records when enabled, HubSpot for CRM delivery, Lemon Squeezy for billing, Google services for authentication or technical enrichment where configured, and email or scheduling providers used by the workspace.
Each provider processes data under its own terms and privacy commitments. Contractors should also review the privacy settings of any third-party integration they connect.
8. Cookies, analytics, and tracking
Kaldwick may use cookies, local storage, and similar technologies to keep users signed in, protect the service, remember preferences, measure product usage, attribute form performance, and understand how visitors move through public quote forms.
Browsers may allow users to limit cookies or tracking technologies. Blocking some technologies may affect login, dashboard, public form, or analytics behavior.
9. Data retention
Kaldwick keeps account, form, request, CRM, billing, and audit data for as long as needed to provide the service, support the workspace, maintain security records, comply with legal obligations, or resolve disputes.
Workspace admins may archive or clean synthetic launch test data through product controls. Some logs, webhook events, consent records, and billing records may be retained longer where needed for audit, security, tax, legal, or compliance reasons.
10. Security
Kaldwick uses technical and organizational safeguards designed to protect data, including encrypted storage patterns for sensitive integration tokens, server-side validation, signed webhooks, access controls, tenant isolation, and production security headers.
No online service can guarantee absolute security. Customers should keep account access limited to trusted users, protect credentials, review connected integrations, and remove access when a team member leaves.
11. International transfers
Kaldwick is designed first for US contractors, but service providers may process information in the United States or other countries where they operate. Those countries may have privacy laws different from the laws where a user lives.
Where required for a transfer, Kaldwick uses appropriate safeguards made available by the relevant provider, which may include standard contractual clauses or another lawful transfer mechanism.
12. Your privacy rights
Depending on location, users may have rights to request access, correction, deletion, portability, restriction, objection, or more information about certain processing. California residents may have rights under the CCPA/CPRA.
Homeowners who submitted a contractor form should first contact the contractor that received the request. Kaldwick can help a workspace respond to valid requests when technically possible and legally appropriate.
13. Children
Kaldwick is not directed to children and is not intended for use by anyone under 16. Contractors should not use Kaldwick forms to knowingly collect information from children.
14. Changes to this policy
We may update this policy as Kaldwick evolves, new integrations are added, legal requirements change, or business operations mature. The updated date above shows when the latest version was published.
15. Outreach, prospecting, and marketing emails
Separately from people who sign up or submit a form, Kaldwick contacts home services businesses by email to introduce the product, including recruiting the Founding 20 beta. This section describes that processing.
The information used for outreach is limited to business and professional contact details obtained from public professional sources, such as company websites, business listings, public licensing or trade registries, and professional directories. It may include the business name, a professional contact name and role where public, a business email address, a business phone number, city and state, and publicly listed business information.
Kaldwick is established in France, so this processing follows the GDPR. The legal basis is Kaldwick's legitimate interest in reaching relevant home services businesses about a product built for their profession, balanced against each recipient's interests. This is consistent with French (CNIL) guidance on business-to-business prospecting, which does not require prior consent when the message relates to the recipient's profession.
Every outreach email identifies Kaldwick, explains why the business is being contacted, includes a valid postal address, and offers a simple way to opt out. A recipient can object to this processing or request erasure at any time by replying to the email or by contacting privacy@getkaldwick.com. Kaldwick then stops contacting that business and keeps a suppression record so it is not contacted again. Prospect data is kept only as long as needed for outreach and is removed on objection.
For recipients in the United States, outreach also follows CAN-SPAM: accurate sender and subject information, a valid physical postal address, and honoring opt-out requests promptly.
16. Contact
For privacy questions, contact the Kaldwick workspace owner that published the quote form. For platform privacy inquiries, contact Kaldwick at privacy@getkaldwick.com.