Kudosly policies

Privacy Policy

Last updated: October 19, 2025 · Kudosly · kudoslyapp.com

This Privacy Policy explains what Kudosly collects when you use our website and recognition platform, why we collect it, and the choices you have. It applies to kudoslyapp.com and to all Kudosly boards and services.

1. What we collect

Account data: name, work email, organization name, and role (member or admin) when an account is created for you or by you.

Content data: the kudos cards, comments, points, badges, and leaderboard entries created on your boards.

Usage data: pages viewed, features used, approximate device and browser information, and log data used to keep the Service secure and reliable.

Payment data: payments are processed by Stripe. Kudosly never sees, stores, or touches your full card number; we receive only a payment confirmation and billing metadata from Stripe.

Cookies: a small set of functional cookies keeps your cart and preferences. Details are in our Cookie Policy.

2. Employee data belongs to the organization

All recognition data created on an organization's boards — including kudos sent to or by individual employees, comments, points history, and member lists — belongs 100% to that organization, not to Kudosly and not to individual users. We act as a processor: we store and display that data only to provide the Service, on the organization's instructions.

Admins of an organization can export or delete their board data at any time, including after cancelling a subscription. If you are an employee and want a copy or correction of recognition data about you, please contact your organization's Kudosly admins first; we will assist them as needed.

3. How we use data

  • To operate boards, walls, points, and the rewards catalog.
  • To send service emails: activation codes, weekly digests, trial and renewal notices.
  • To keep the Service secure: abuse prevention, moderation support, and audit logs.
  • To improve the Service using aggregated, de-identified statistics.

We do not sell personal data, and we do not use board content for advertising.

4. Sharing

We share data only with the service providers needed to run Kudosly — payment processing (Stripe), email delivery, and hosting — each under contractual confidentiality and data-protection obligations, and only for the purposes above. We may disclose data if required by law or to protect the safety of users.

5. Retention and deletion

Board data is kept while your organization's subscription is active. After cancellation, we retain data for 30 days so it can be exported or the account reactivated, then delete it from production systems; backups roll off within 90 days.

6. Security

Data is encrypted in transit with TLS and at rest. Access inside Kudosly is limited to personnel who need it to operate the Service. No method of transmission is perfectly secure, but we work to keep the plaza gates well guarded.

7. Your rights

Depending on your location, you may have rights to access, correct, export, or delete personal data, and to object to or restrict certain processing. Because employee recognition data belongs to your organization, most requests should start with your admins; for anything else, contact us using the details on our website and we will respond within 30 days.

8. Changes

We may update this Policy; material changes will be announced by email or in-product notice at least 14 days before they take effect.