Privacy Policy

1. Overview & Commitment

KickDemo ("KickDemo," "we," "our," or "us"), operated from Sheridan, Wyoming, provides an interactive product demo creation platform, Chrome browser extension capture utility, Route Hubs decision tree engine, 60 FPS Motion Studio, and buyer engagement analytics service (collectively, the "Service").

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website at kickdemo.com, register for an account, install our browser extension, or interact with KickDemo walkthroughs published by our customers.

2. Information We Collect

We collect information in three categories:

A. Information You Provide Directly

• Account Registration: Name, work email address, company name, team size, password hash, and billing contact details.
• Customer Communications: Messages, feedback, or support tickets sent to hello@kickdemo.com or submitted via our contact forms.
• Billing Information: Payment card details processed securely via our PCI-DSS Level 1 compliant payment processor. KickDemo never stores complete raw credit card numbers.

B. Information Collected via our Chrome Recording Extension

The KickDemo browser extension only records actions on tabs where you explicitly initiate a recording session. It captures:

• High-resolution screenshot captures of targeted web application elements.
• DOM element coordinates, CSS selectors, click coordinates, and keystroke events required to generate auto-step instructions.
• Exclusions: The extension does not record passwords entered in password fields or background tabs. You can also use our built-in redaction tool to blur any area.

C. Visitor Information on Published Demos & Route Hubs

When prospects explore a public KickDemo walkthrough or Route Hub, we collect engagement telemetry on behalf of the demo creator:

• Step completion times, click events, branching path decisions, drop-off steps, and video playback velocity.
• Voluntarily submitted lead capture information (e.g. prospect name, work email, company size) if the creator enabled gated access.
• Technical device telemetry including approximate geolocation (city/country level), browser type, and screen viewport dimensions.

3. How We Use Information

We process collected data exclusively to:

• Provide, maintain, and optimize the KickDemo workspace, cloud sync, and rendering engines.
• Render 60 FPS motion graphics, dynamic flow connectors, and 4K MP4 export assets.
• Generate aggregate buyer engagement analytics, 12-month trend charts, and Route Hub funnel insights.
• Prevent fraud, enforce our Terms of Service, and ensure high system availability (99.9% uptime).
• Communicate important security notifications, software updates, and billing confirmations.

4. Zero-Sale & Information Sharing Policy

We do not sell, rent, or trade personal data to data brokers, ad networks, or marketers. We share data only under strictly regulated operational necessities:

• Vetted Infrastructure Sub-Processors: Tier-1 cloud hosting (e.g., AWS, Cloudflare), database storage, and transactional email infrastructure operating under signed Data Protection Agreements (DPAs).
• Account Creators: If you submit lead data into a customer's Route Hub, that data is shared directly with the verified account holder who authored the demo.
• Legal Compliance: When strictly required by law, subpoena, or valid court order with prior written notice to you whenever legally permissible.

5. Security & Data Protection Standards

Security and data integrity are engineered into KickDemo from the ground up:

• Encryption in Transit: TLS 1.3 cryptographic protocols with modern cipher suites for all browser communications and API requests.
• Encrypted Storage: Industry-standard encryption for all recorded screenshots, asset media, and database records.
• Role-Based Access: Strict least-privilege internal access controls and multi-factor authentication (MFA) required for all engineering personnel.
• Automatic Threat Detection: Real-time DDoS mitigation, rate limiting, and web application firewalls (WAF).

6. Data Retention

We retain personal information for as long as your workspace account remains active or as needed to provide you with the Service. Upon workspace cancellation or account deletion request, customer demo assets and recorded data are permanently purged from active production databases within 30 days.

7. Cookies & Tracking Technologies

We use cookies and local storage tokens strictly for essential functionality:

• Essential Authentication Cookies: To keep you securely authenticated into your dashboard across sessions.
• Workspace Preferences: To remember your selected playback speed, category filters, and studio canvas layout.
• Privacy First: We do not deploy invasive third-party tracking pixels or behavioral cross-site advertising cookies.

8. GDPR, UK GDPR & CCPA/CPRA Rights

Regardless of your jurisdiction, KickDemo provides all users with comprehensive privacy autonomy:

• Right to Access & Portability: Request a complete machine-readable copy of your personal data.
• Right to Rectification: Correct inaccurate or incomplete profile records.
• Right to Erasure ("Right to be Forgotten"): Request the permanent deletion of your account and all stored walkthroughs.
• Right to Restrict or Object: Restrict certain processing activities or opt out of non-essential communications.
• Non-Discrimination: We will never discriminate against you for exercising your privacy rights.

To exercise any of these rights, email our designated privacy team at hello@kickdemo.com. We respond to all verified requests within 30 calendar days.

9. International Data Transfers

KickDemo operates servers located in the United States and global edge nodes. Where data is transferred from the European Economic Area (EEA), United Kingdom, or Switzerland to the United States, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Children's Privacy

The Service is exclusively intended for commercial SaaS teams, enterprises, and adult professionals. We do not knowingly collect personal data from children under the age of 16. If we become aware that a child under 16 has submitted personal information, we will immediately delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time to reflect operational or legal updates. Material changes will be communicated via prominent dashboard notifications or direct email alerts to account administrators prior to taking effect.