Privacy Notice

1. Who we are

Kulture is operated by S Squared Digital, a company registered in London, United Kingdom (company number 11921000). S Squared Digital is the data controller for the personal data described in this notice — meaning we decide how and why your data is processed.

2. What we collect and why

• Account data — name, email address, login credentials: to create and secure your account (contract performance).
• Workspace data — organisation name, brand details, campaign briefs, uploaded assets: to provide the Service (contract performance).
• Support messages — when you contact us: to respond and improve support (legitimate interests).
• Usage and telemetry — pages visited, features used, device identifiers, IP address: for security, fraud prevention and product improvement (legitimate interests).
• Marketing preferences — to send you product updates where you have opted in (consent).

Payment details are collected and processed by Paddle (our Merchant of Record), not by us.

3. Who we share data with

• Service providers — hosting, analytics and support tooling that process data on our behalf under contract.
• Paddle — our Merchant of Record, for the sale of our products, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting, where needed.
• Authorities — where required by law.

4. International transfers

Some of our service providers process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

5. Retention

We keep personal data only for as long as needed for the purposes above — for account data, while your account is active; for billing records, as required by tax law. Data is deleted or anonymised when no longer needed.

6. Your rights

Under UK GDPR you have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time. You can complain to the Information Commissioner's Office (ICO). We respond to requests within one month. To exercise any right, contact us at the email address on our website.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit and at rest, and strict access controls.

8. Cookies

We use essential cookies to keep you signed in and the Service working, and analytics cookies to understand how the Service is used. You can manage cookies through your browser settings; blocking essential cookies may prevent sign-in.