Privacy Policy

We collect information that you voluntarily provide, information generated through your use of the Services, and certain information collected automatically.

Information You Provide

Depending on how you use KEMBR, we may collect:

• Full name
• Business email address
• Preferred HR email address
• Phone number
• Job title and department
• Account login credentials (passwords are stored only as a hash)
• Emergency contact name and phone number
• Birthday month and day (the year is never collected)
• Onboarding submissions, forms, agreements, and documents you upload
• Training and SOP completion records
• Leave and time-off requests
• Referral submissions and associated resumes
• Communications with our support team

Information Collected Automatically

When you use KEMBR, we may automatically collect information including:

• IP address
• Browser type and version
• Device information
• Operating system
• Pages visited and features used
• Date and time of access
• Referral URLs
• Session identifiers and similar technical metadata

We use your information to:

• Create and manage your account.
• Operate onboarding flows and HR approval gates.
• Deliver and track trainings, SOPs, and certifications.
• Process leave requests and maintain balances.
• Facilitate internal messaging and reviews.
• Improve platform performance and user experience.
• Respond to customer support requests.
• Send important account and service notifications.
• Process subscription payments where applicable.
• Detect fraud and protect the security of our Services.
• Comply with legal obligations and maintain audit trails.

KEMBR uses cookies and similar technologies to keep you signed in, remember user preferences, analyze website traffic, and enhance your experience.

You may disable cookies through your browser settings; however, some features of the Services — including staying logged in — may not function properly.

If your organization has configured email delivery, KEMBR may send account notifications, onboarding updates, section approvals, training reminders, leave decisions, and other service-related communications.

Your notification preferences are configurable inside the application. Transactional emails required to operate your account cannot be disabled.

We do not sell your personal information.

We may share information with trusted third-party service providers that help us operate the Services, including:

• Cloud hosting providers (such as DigitalOcean)
• Object storage providers (for uploaded files)
• Email delivery providers (SMTP relay)
• Rate limiting and caching providers
• Payment processors, where paid subscriptions are offered
• Error monitoring and analytics providers
• Security and fraud prevention providers

We may also disclose information when required by law or to protect our legal rights, our users, or the security of our Services.

If paid subscriptions are available, payment information is processed by secure third-party payment providers. KEMBR does not store complete payment card information.

We maintain reasonable administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction.

Passwords are stored using industry-standard one-way hashing. Access to employee records inside KEMBR requires a documented reason and is logged.

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure.

We retain personal information only for as long as necessary to:

• Provide and maintain our Services.
• Manage user accounts.
• Comply with legal obligations.
• Resolve disputes.
• Enforce our agreements.

When information is no longer required, it will be securely deleted or anonymized. Certain audit log entries may be retained for a longer period as required for compliance.

Depending on applicable law, you may have the right to:

• Access your personal information.
• Correct inaccurate information.
• Request deletion of your information.
• Restrict or object to certain processing activities.
• Request a copy of your personal data where applicable.

To exercise these rights, please contact us using the details below.

KEMBR is intended for business use and is not directed toward children under the age of 13.

We do not knowingly collect personal information from children. If we learn that such information has been collected, we will take reasonable steps to delete it.

Our Services may include links to or integrations with third-party websites and services.

We are not responsible for the privacy practices or content of those third parties and encourage you to review their privacy policies.

Your information may be processed and stored in countries other than your own. By using the Services, you consent to the transfer of your information where permitted by applicable law.

We may update this Privacy Policy from time to time. Any changes will become effective when posted with a revised Effective Date.

Your continued use of the Services after changes are posted constitutes your acceptance of the updated Privacy Policy.

If you have any questions about this Privacy Policy or our privacy practices, please contact us at privacy@kembr.co.