Privacy notice

Who is responsible

Calitha s.r.o., company ID 23092823, registered office Školská 660/3, Nové Město, 110 00 Praha 1, Česká republika. Contact: hello@kamega.ai. We have not appointed a data protection officer; this email answers everything about your data.

What data we process

• Details about your business that you enter or that we read from your website and public registers (for Czech businesses, ARES): name, company number, address, phone, email, opening hours, services, photos, texts.
• Your email as your login name and contact. We have no password; you log in with a link.
• Payment data is processed by Stripe; we see only the state of the subscription, the currency and the last four digits of the card.
• Messages you write to us in the chat or by email.
• Technical server records (IP address, time, requested page) for 30 days, for security and to detect abuse.

Why, and on what legal basis

• To build and run your website: performance of the contract (Article 6(1)(b) GDPR).
• To issue invoices and meet tax duties: legal obligation (point (c)).
• To protect the service from abuse and improve it: legitimate interests (point (f)).
• Marketing emails and the monthly summary with tips: consent (point (a)) for marketing, legitimate interests for the summary about your own website; you can unsubscribe with one click.

What is public

The details you confirm on the “Here is what I know about you” card appear on your website, which is public. We do not put a sole trader's registered home address on the website until you confirm it. We remove hidden data, including location, from uploaded photos.

Who receives your data

• Hetzner Online GmbH: server hosting (EU)
• Stripe Payments Europe, Ltd. and Stripe, Inc.: payments (Ireland, USA)
• Resend: sending email: login links and notices (USA)
• Cloudflare, Inc.: DNS and forwarding of mail sent to hello@kamega.ai (USA)
• Anthropic: writing the website text; we send only business details, never payment data, and under its API terms it does not train its models on them (USA)

We have a data processing agreement with each. We do not sell your data and do not share it for advertising.

Transfers outside Europe

Some recipients are in the United States. We transfer data there on the basis of the European Commission's adequacy decision for the EU–US Data Privacy Framework where the recipient is certified, and otherwise on standard contractual clauses (Article 46 GDPR). We send you a copy of the clauses on request.

How long we keep it

While the service runs and for 90 days after it ends; accounting records as the law requires (10 years in the Czech Republic). Unfinished previews are deleted after 30 days.

Your rights

You can ask for access, correction, erasure, restriction of processing and portability, and you can object; you can withdraw consent at any time. This applies to you under the GDPR in the EU and EEA, the UK GDPR in the United Kingdom and the Federal Act on Data Protection in Switzerland. Write to hello@kamega.ai.

If you live in California or another US state with a privacy law: you can ask what personal information we hold about you, ask us to correct or delete it, and we will not treat you worse for doing so. We do not sell personal information and do not share it for cross-context behavioural advertising. We do not process sensitive personal information beyond providing the service.

In other countries you have the rights your local law gives you; write to us and we will honour them.

You can complain to the Czech Office for Personal Data Protection (uoou.gov.cz), to the authority in the country where you live or work (list at edpb.europa.eu), or in the United Kingdom to the ICO (ico.org.uk).

Cookies

The login cookie is necessary for the dashboard to work. Besides it, we remember your language for a year and, for 30 days and anonymously, where you came to Kamega from (so we know which links work); the email you type on the start page is remembered only by your browser. No advertising or third-party tracking cookies, and none on your website either. You can delete cookies in your browser settings at any time.

Visits to your website and the monthly summary

We count visitors to your website ourselves, with no cookies and no outside services. From the visitor's address and browser we make an irreversible fingerprint that lasts one day, so one person is counted once; we attach neither the address nor the fingerprint to anything, and it is discarded after the day. We do not count robots. Once a month we send you a summary of the numbers with tips; you can unsubscribe with one click in the email. For personal data of your website's visitors, see the processing section of the Terms of Service.

Children

The service is for adults. We do not knowingly process children's data; if we find any, we delete it.

Changes

We email you before a material change takes effect. The current text is always on this page.