Privacy Policy

Last Updated: August 23, 2026
Effective Date: August 23, 2026

1. Introduction

This Privacy Policy explains how Cloud Deck LLC d/b/a Kantrel ("Kantrel", "we", "us", "our") collects, uses, stores, shares, and protects personal information in connection with our marketing automation and CRM software subscription and our technology consulting services (together, the "Services").

Cloud Deck LLC is a limited liability company formed in the State of Wyoming, United States, in 2025, operating under the trade name Kantrel.

This Policy applies to:

  • Visitors to kantrel.com

  • Customers who subscribe to our software platform ("Customers")

  • Individuals whose personal data our Customers process through the platform ("Contacts")

For our Customers' own data, Kantrel acts as a processor (or "service provider"): the Customer decides what data to upload and how to use it, and Kantrel processes that data on the Customer's instructions. For account, billing, and website data, Kantrel acts as a controller.


2. Information We Collect

2.1 Information Customers give us directly

  • Account information: name, business name, email address, phone number, country

  • Billing information: billing address, currency, subscription plan, transaction history. Card numbers are collected and stored by our payment processor, not by Kantrel

  • Support communications: messages, tickets, and correspondence with our team

2.2 Contact data Customers upload or collect through the platform

Customers use the platform to manage their own business relationships. Data they store may include:

  • Names, email addresses, phone numbers, company names, addresses

  • Interaction records: form submissions, appointment bookings, tags, notes, pipeline stages

  • Communication content: emails, SMS messages, WhatsApp messages, call recordings and call logs, where the Customer has enabled those channels

Kantrel does not select this data, does not use it for its own purposes, and does not sell it.

2.3 Information collected automatically

  • IP address, browser type, device type, operating system, language settings

  • Pages viewed, features used, timestamps, referring URLs

  • Log data generated when messages are sent, delivered, opened, or clicked through the platform


3. How We Use Information

We use personal information to:

  1. Provide, operate, and maintain the platform and consulting services

  2. Create and administer accounts, authenticate users, and provide support

  3. Process subscription payments and issue invoices

  4. Send service and administrative notices, including billing notices, security alerts, and changes to terms

  5. Monitor performance, diagnose faults, and prevent fraud, abuse, and unauthorized access

  6. Comply with legal obligations, including telecommunications and anti-spam requirements

  7. Improve the Services through aggregate, non-identifying usage analysis

We do not sell personal information. We do not use Customer Contact data to market our own services to those Contacts.


4. Legal Bases for Processing (GDPR)

Where the EU or UK General Data Protection Regulation applies, we rely on:

Purpose Legal basis Delivering the Services under a subscription Performance of a contract (Art. 6(1)(b)) Billing and payment collection Performance of a contract; legal obligation Security, fraud prevention, service improvement Legitimate interests (Art. 6(1)(f)) Marketing emails to prospective customers Consent (Art. 6(1)(a)), withdrawable at any time Retention and disclosure required by law Legal obligation (Art. 6(1)(c))

Where Kantrel processes Contact data on a Customer's behalf, the Customer is responsible for establishing a legal basis for that processing, including obtaining any consent required for email, SMS, WhatsApp, or voice communications.


5. Mobile Information and SMS Data

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories of information described in this Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Mobile phone numbers and SMS consent records are used only to deliver the messaging functions the Customer or the Contact has requested, and are disclosed only to the messaging and voice service providers listed in Section 6 for the purpose of transmitting those messages. They are not sold, rented, leased, or shared for any marketing or promotional purpose.

Contacts may opt out of SMS messages at any time by replying STOP to any message. Opt-out requests are honored on receipt.


6. Sub-Processors and Service Providers

We use the following providers to operate the Services. Personal data may be transmitted to or stored by them in the course of delivering the functions listed.

Purpose Provider Underlying software platform HighLevel (LeadConnector) Email delivery Mailgun SMS and voice Twilio Payment processing Stripe WhatsApp messaging Meta Static asset hosting Google Cloud Storage (multi-region) Content delivery network Cloudflare

Each provider is engaged under terms that limit its use of personal data to the provision of its service to us. We will update this table when we add or replace a sub-processor.


7. International Data Transfers

Kantrel is based in the United States, and the providers listed in Section 6 operate infrastructure in multiple regions, including the United States and the European Union. Personal data may therefore be transferred to and processed in countries other than the country in which it was collected.

Where data is transferred out of the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses or another transfer mechanism permitted by applicable law.


8. Data Retention

8.1 General retention period — 90 days after termination

When a subscription ends, whether by cancellation, non-payment, or termination by either party, Customer data stored in the platform is retained for 90 days from the effective date of termination. During that 90-day window the Customer may request an export of their data.

After 90 days, the data is permanently deleted and cannot be recovered. We cannot restore it, reconstruct it, or retrieve it from backup after that point.

8.2 Phone numbers — 14 days after termination

Phone numbers and their associated registration information are retained for only 14 days after termination of the Services. This retention period is shorter than the 90-day period described in Section 8.1 and is a limitation of the underlying telecommunications platform.

After 14 days, phone numbers provisioned to the account and the registration records tied to them (including brand and campaign registration details) are released and permanently deleted. A released number cannot be recovered or reclaimed, and it may be reassigned to another party. Customers who need to keep a specific phone number must port it out before the 14-day period expires.

8.3 Records we keep longer

We retain billing records, invoices, and transaction data for as long as required by tax, accounting, and anti-fraud law, and we retain records necessary to establish or defend legal claims for the applicable limitation period.


9. Your Rights

9.1 Rights available to all individuals

Subject to verification of identity, you may:

  • Access — request confirmation of whether we hold personal data about you and obtain a copy

  • Correct — request that inaccurate or incomplete data be corrected

  • Delete — request deletion of your personal data

  • Export (portability) — request your data in a structured, commonly used, machine-readable format

  • Restrict or object — request that we limit or stop certain processing

  • Withdraw consent — where processing relies on consent, withdraw it at any time without affecting prior processing

To exercise these rights, email [email protected]. We respond within 30 days. We do not charge a fee unless a request is manifestly unfounded or excessive.

If you are a Contact of one of our Customers, send your request to that Customer, who controls the data. If you send it to us, we will forward it to the relevant Customer.

9.2 GDPR

If you are in the EEA or the UK, you also have the right to lodge a complaint with your national supervisory authority.

9.3 CCPA / CPRA

If you are a California resident, you have the right to know what personal information we collect, use, and disclose; the right to delete it; the right to correct it; the right to opt out of the sale or sharing of personal information; and the right not to be discriminated against for exercising these rights.

Kantrel does not sell personal information and does not share personal information for cross-context behavioral advertising. In the preceding twelve months we have disclosed personal information only to the service providers listed in Section 6, for the business purposes described in Section 3.

You may submit a request through an authorized agent. We will verify the agent's authority before acting.


10. Cookies and Tracking Technologies

kantrel.com and the platform use the following:

Type Purpose Can it be disabled? Strictly necessary cookies Login sessions, authentication, security, load balancing No — the Services will not function without them Functional cookies Remembering language, region, and interface preferences Yes Analytics cookies Aggregate usage statistics used to improve the Services Yes

We do not use third-party advertising cookies and we do not participate in cross-site advertising networks.

You can block or delete cookies through your browser settings. Blocking strictly necessary cookies will prevent you from logging in.

We honor Global Privacy Control (GPC) signals as a valid opt-out request where applicable law requires it.

Customers who use the platform's landing pages, forms, and tracking features are responsible for the cookie notices and consent mechanisms shown on their own pages.


11. Security

We apply technical and organizational measures appropriate to the risk, including encryption of data in transit, access controls and role-based permissions, and restriction of internal access to personnel who need it to perform their work. The providers listed in Section 6 maintain their own security controls for the infrastructure they operate.

No method of transmission or storage is completely secure. If a breach affecting personal data occurs, we will notify affected Customers and, where required, the relevant supervisory authorities within the timeframes set by applicable law.


12. Children

The Services are for business use and are not directed to children. We do not knowingly collect personal information from anyone under 16. If we learn that we have, we delete it.


13. Changes to This Policy

We may update this Policy. When we do, we will change the "Last Updated" date at the top and post the revised version at kantrel.com. If a change materially affects how we handle personal data, we will notify Customers by email at least 30 days before it takes effect.


14. Contact

Questions, requests, and complaints about this Policy:

Cloud Deck LLC d/b/a Kantrel
30 N Gould St Ste N
Sheridan, WY 82801
United States

Email: [email protected]
Phone: +1 929 636 5676
Web: kantrel.com