Kahua Privacy Policy

Privacy Policy

Last updated: August 7, 2026

Kahua, Inc. (“Kahua,” “we,” “us,” or “our”) provides this Privacy Policy to explain how we collect, use, disclose, and otherwise process personal information through our public websites, applications, events, marketing activities, and related services that link to or reference this Privacy Policy (collectively, the “Services”). This Privacy Policy is written primarily for business users, prospects, customers, partners, job candidates, and other individuals who interact with Kahua in a professional capacity.

This Privacy Policy does not replace a separate written agreement between Kahua and its customers, partners, or vendors. If a separate agreement governs a Kahua product or service, that agreement will control for that product or service to the extent it conflicts with this Privacy Policy.

1. Scope Of This Privacy Policy

This Privacy Policy applies to information Kahua collects when you visit our public-facing websites, request information, register for events or content, communicate with us, interact with our marketing activities, apply for a role, or otherwise engage with the Services. It does not apply to information processed solely on behalf of a customer under a separate customer contract, implementation statement of work, or support arrangement, except to the extent this notice is specifically referenced there.

When a form or workflow identifies certain fields as required, we need that information to process your request, deliver the requested content or demo, authenticate a request, or manage our relationship with you or your organization. If you choose not to provide required information, we may be unable to respond fully or provide the requested service or follow-up.

2. Categories Of Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

• Contact and professional information. Name, job title, company name, business address, business email address, business phone number, and similar identifiers.
• Inquiry, demo, event, and communications information. The contents of forms you submit, webinar or event registrations, survey responses, chat transcripts, and records of your communications with us.
• Relationship and account information. Information about your organization’s relationship with Kahua, product interests, support requests, meeting notes, customer-status information, and other business records associated with the Services.
• Device, usage, and log information. IP address, browser type, device identifiers, operating system, referring URLs, page views, clickstream data, dates and times of access, and similar diagnostic information.
• Cookie and similar technology information. Information collected through cookies, pixels, tags, local storage objects, CAPTCHA and security tools, analytics tools, and similar technologies used to operate, secure, measure, and personalize the Services.
• Marketing and preference information. Subscription status, email engagement information, content interests, event attendance history, consent records, objection records, suppression records, and related preference choices.
• Recruiting or career information. Resume information, employment history, and other application materials that you choose to submit through a careers page or recruiting workflow, if and when those workflows are offered through the Services.
• Other information from third parties. Information we receive from service providers, event partners, public sources, social media platforms, marketing or CRM providers, data providers, and others who provide business contact or usage information to us.
• We do not intend to collect sensitive personal information through public website forms unless it is specifically requested and reasonably needed for the relevant process. Please do not submit sensitive personal information through public website forms unless Kahua specifically asks for it.

3. How We Collect Personal Information

• Directly from you. Including when you contact us, request a demo, download content, attend an event, complete a form, subscribe to communications, apply for a role, or otherwise communicate with us.
• Automatically. Including through server logs, cookies, pixels, embedded content, and similar technologies when you use the Services.
• From business contacts and relationship sources. Including your employer, colleagues, business partners, service providers, event sponsors, referral sources, and other parties that provide information in connection with a business relationship or inquiry.
• From public and third-party sources. Including public websites, professional networking services, public records, event attendee sources, data providers, and other third parties that lawfully provide business contact or related information to Kahua.

4. How We Use Personal Information

We may use personal information for the following purposes:

• Operate and improve the Services. To operate, maintain, secure, troubleshoot, and improve the Services and our business operations.
• Respond and manage relationships. To respond to inquiries, provide demos, process requests, deliver requested materials, communicate with you, and manage our relationship with you or your organization.
• Administer events and campaigns. To administer webinars, events, campaigns, promotions, surveys, and related business development activities.
• Send communications. To send administrative messages, service communications, event confirmations, and, where permitted by law, marketing communications about Kahua products, services, events, and related content.
• Analyze and personalize. To personalize content, understand usage trends, measure campaign effectiveness, create aggregated analytics, and improve the relevance of our communications and Services.
• Manage preferences and records. To create, maintain, document, and honor consent records, suppression records, unsubscribe requests, objection requests, and other privacy or communication choices.
• Protect systems and rights. To protect the Services, enforce our terms, prevent fraud or misuse, maintain network and information security, and detect malicious or unauthorized activity.
• Comply with legal obligations. To comply with legal obligations, respond to lawful requests, establish or defend legal claims, conduct audits, and support actual or potential corporate transactions or diligence.

5. Legal Bases For Processing (EEA And UK)

If the UK GDPR, EU GDPR, or similar laws apply, we generally rely on one or more of the following legal bases:

• Consent. Including where required for non-essential cookies, certain electronic marketing activities, or other processing that requires consent.
• Contractual necessity. Performance of a contract or steps taken at your request before entering into a contract, such as arranging a demo, responding to a request, providing requested information, or supporting an existing customer relationship.
• Legitimate interests. Operating and improving the Services, protecting our systems, maintaining business records, managing ordinary business-to-business relationships, documenting preferences, and conducting proportionate business development where permitted by applicable law.
• Legal obligation. Processing required to comply with applicable law. (a) Where we rely on legitimate interests, our interests generally include running and improving the Services, maintaining secure and efficient operations, understanding business demand, managing customer and prospect relationships, and communicating about relevant business offerings in a proportionate way. We consider the nature of the information, the context of collection, the individual’s reasonable expectations, and the availability of opt-out rights when relying on legitimate interests. (b) Where we rely on consent, you may withdraw that consent at any time. Where we use personal information for direct marketing, the right to object applies and we will stop using your personal information for direct marketing if you object.

6. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients when reasonably necessary for the purposes described above:

• Affiliates. Affiliates and related companies within the Kahua corporate group.
• Service providers and contractors. Providers that support hosting, analytics, customer relationship management, marketing automation, recruiting, website functionality, security, CAPTCHA or anti-abuse services, event administration, and similar business functions.
• Professional advisers and transaction parties. Advisers, auditors, insurers, financiers, and transaction counterparties involved in legal, compliance, financing, recruiting, or corporate transaction matters.
• Business and event partners. Partners where you choose to engage with a co-sponsored event, offering, integration, or referral path.
• Authorities and legal recipients. Government authorities, regulators, courts, law enforcement, or other third parties when required by law or when reasonably necessary to protect rights, safety, property, or legal interests.
• Corporate transaction recipients. Successors, acquirers, counterparties, and their advisers in connection with an actual or proposed merger, acquisition, financing, restructuring, bankruptcy, or sale of assets.
• Kahua does not sell personal information in exchange for monetary consideration. However, Kahua uses analytics, advertising, social media, and similar tracking technologies, and, depending on how those technologies are configured and the law that applies, some related disclosures may be treated as a “sale,” “sharing,” or “targeted advertising” activity under certain U.S. state privacy laws. Where required, you may opt out of those activities through the cookie preference or privacy-choice tools made available on the site or by contacting us using the information below.

7. Cookies And Similar Technologies

We and our service providers use cookies and similar technologies to operate the Services, remember preferences, measure performance, analyze traffic, protect forms and systems, and support content personalization or advertising features. These technologies may include strictly necessary cookies, functional cookies, analytics cookies, advertising cookies, and social-media or other tracking technologies. Depending on the page and configuration, tools used on the Services may include HubSpot consent tools, Demandbase, HubSpot, Google Ads, HockeyStack, Meta, Uberflip, Oktopost, Qualified, Reddit, G2, X/Twitter, Capterra, and similar tools.

Kahua currently uses a HubSpot consent banner and may use CookieYes or another consent-management tool in connection with its new website launch. Where applicable law requires prior consent for non-essential cookies or similar technologies, Kahua does not activate non-essential cookies or similar technologies until the user affirmatively accepts them. Consent must be based on a clear affirmative choice and not merely on continued browsing. In relevant jurisdictions, you may accept, reject, or adjust non-essential cookie settings through the cookie preference tools made available on the site.

Disabling certain cookies may affect website functionality, saved preferences, form performance, embedded content, analytics accuracy, or other parts of the Services. We may also keep records of consent choices, rejections, and preference updates in order to administer compliance and user settings.

8. Marketing Communications And Preference Choices

You may opt out of marketing emails at any time by using the unsubscribe link included in the message or by contacting us using the information below. Even if you opt out of marketing communications, we may still send transactional, service-related, recruiting, or relationship messages where necessary.

Submitting a contact, demo, event, or similar website form does not automatically mean you are consenting to all future marketing communications unless the form expressly says so or applicable law otherwise permits the communication. Website forms, including footer forms, resource-center newsletter signups, demo-request forms, and contact-us forms, may include a separate marketing choice. Where a form includes a separate marketing choice, Kahua uses that choice to govern promotional follow-up.

Kahua also may maintain suppression lists or similar records so that we can honor opt-out requests, objections, unsubscribe requests, and do-not-contact preferences, including where we need to avoid re-contacting someone who has already objected. Website form and preference information is collected in HubSpot and may sync to Salesforce and advertising platforms to manage requests, preferences, suppression records, and campaign activity.

9. Information Obtained From Other Sources

Kahua may obtain business contact information and related information from public sources, event contacts, event partners or sponsors, referral sources, data providers, purchased lists, ZoomInfo, or other third parties. Where applicable law requires it, we will provide privacy information about that collection and use within the required timeframe and, if we use the information to communicate directly with you, at the latest when we first do so.

When we collect personal information from another source for business development or similar activities, the categories of information typically may include business contact details, employer details, title/role information, event or content engagement indicators, and other professional-context data. The source may be a specific event, event sponsor or partner, public website, professional networking service, customer referral, or third-party data provider, including purchased lists or ZoomInfo. Where we do not know the exact originating source, we will provide the most specific source description we reasonably can.

Where Kahua receives prospect or contact data from third parties, Kahua assesses whether the source is reliable, whether the proposed use is fair and proportionate, and whether suppression lists, objection records, or other do-not-contact records should be applied before outreach occurs. Kahua does not opt contacts from Canada, the UK, or the EEA into marketing communications unless they have submitted a form, opted in, or otherwise provided consent in a manner Kahua determines is appropriate for the outreach.

10. International Data Transfers

Kahua is headquartered in the United States and may process personal information in the United States and other countries where Kahua or its service providers operate. These countries may not provide the same level of legal protection as your home jurisdiction.

Where required by applicable law, Kahua will rely on an appropriate transfer mechanism, such as an applicable adequacy decision, standard contractual clauses, the UK Addendum or IDTA, or another lawful safeguard. You may contact us for additional information about the safeguards relevant to an applicable transfer.

11. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain business and relationship records, administer events and campaigns, comply with legal obligations, resolve disputes, enforce our agreements, maintain suppression records, and support legitimate business needs. Kahua does not currently use a single fixed retention schedule for all website, marketing, recruiting, and CRM prospect data. Retention periods vary depending on the type of information, the context in which it was collected, whether the information remains relevant to Kahua’s business relationship or legitimate business needs, and applicable legal requirements.

In deciding how long to keep information, we may consider the sensitivity of the information, whether the information is still needed to satisfy the reason it was collected, whether an ongoing business relationship exists, whether we must preserve records for legal, tax, audit, accounting, or dispute purposes, whether the individual has requested deletion or removal, and whether deletion, anonymization, or aggregation is appropriate instead.

12. Your Privacy Rights

EEA And UK Rights

Subject to applicable law and relevant exceptions, individuals in the EEA, UK, and similar jurisdictions may have the right to request access to personal information, correction of inaccurate personal information, deletion, restriction, portability, and to object to certain processing, including direct marketing. Where we rely on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

If you are in the UK, you also have the right to lodge a complaint with the UK Information Commissioner’s Office. If you are in the EEA, you may lodge a complaint with the supervisory authority in the country where you live, work, or believe the issue occurred.

U.S. State Privacy Rights

Residents of certain U.S. states may have privacy rights under applicable state law, subject to thresholds, exemptions, and exceptions. These rights may include rights to know or access personal information, correct inaccuracies, delete personal information, obtain a portable copy of certain personal information, and opt out of certain sales, sharing, targeted advertising, or profiling activities. Depending on applicable law, you also may have the right to appeal a decision on a rights request and the right not to receive unlawful discriminatory treatment for exercising privacy rights.

To exercise a privacy right, please contact us at privacy@kahua.com or using the information below and describe your request with enough detail for us to evaluate and respond. Kahua routes privacy requests internally for review and response. We may need to verify your identity or authority before processing the request. Where permitted by law, you may use an authorized agent.

13. Automated Decision-Making And Profiling

Kahua does not intend to make decisions based solely on automated processing through the public website that produce legal or similarly significant effects on individuals. Kahua may, however, use website-driven lead scoring, profiling, automated routing, analytics, lead-management tools, segmentation, or other business-intelligence tools to understand engagement, improve communications, route inquiries, personalize follow-up, or prioritize outreach in a business context.

If Kahua were to use solely automated decision-making or profiling in a manner that has legal or similarly significant effects on individuals and applicable law required additional notice, we would describe that processing and the relevant rights here.

14. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. No data transmission or storage system can be guaranteed to be completely secure, so you should use care in deciding what information you submit through the Services.

15. Children’s Privacy

The Services are intended for business users and are not directed to children. We do not knowingly collect personal information from children through the Services. If you believe a child has provided personal information to us, please contact us so that we can review and address the issue appropriately.

16. Third Party Sites And Services

The Services may contain links to third party websites, services, social media pages, embedded tools, or content that are not controlled by Kahua. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy notices and terms before interacting with them.

17. Changes To This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Services, technology, business practices, or legal requirements. When we do, we will update the “Last Updated” date above. If we make a material change, we may also provide additional notice where appropriate or required by law.

Contact Us

If you have questions about this Privacy Policy or would like to submit a privacy request, please contact us at privacy@kahua.com or write to Kahua, Inc., 10000 Avalon Boulevard, Suite 600, Alpharetta, Georgia 30009, United States.