Skip to content

Legal notice & privacy policy

Last updated: September 2026

In accordance with the General Data Protection Regulation (EU 2016/679) and French data-protection law, Kadrella is committed to protecting your personal data. This English version is provided for information only; the French version prevails.

Who we are

The kadrella.com website and the Kadrella application are published by Head of Science (hereafter "HOS" or "Kadrella"), SIREN 938 634 912, registered office at 60 rue François 1er, 75008 Paris, France.

HOS is also the data controller for your personal data under the GDPR. For any question: [email protected].

Hosting

The website and application are self-hosted by HOS, on dedicated server infrastructure located in France.

Data we collect

Account information: name, email, phone number, postal address.

Activity data: lessons, students, teachers, payments and invoicing.

Credentials required for the automations you enable: depending on the platform, this may be an OAuth authorisation (Google), a login and password you give us directly (Superprof), a personal account token (Discord), or a device-pairing session obtained by scanning a QR code, as with WhatsApp Web (WhatsApp). Since not every platform offers an official API for this use, some automations rely on your personal credentials rather than a token issued by the platform.

Purposes and legal basis

We process this data to provide the service: lesson management, invoicing and automations. The legal basis is performance of the contract, and your consent for enabling integrations.

We also process aggregated and anonymised data for statistical purposes, including to produce public studies or marketing content, on the basis of our legitimate interest in measuring and showcasing the platform's activity.

Security

Credentials that support it (Superprof password, Discord token) are encrypted in our database using AES-256. The encryption key is stored separately, in a configuration file on our server, with access strictly limited to our technical infrastructure: it is never itself kept in the database.

When an automation needs to reconnect to a third-party platform, the credential is decrypted in memory only for the duration of the connection, and is never logged: no password or token appears in our logs.

The WhatsApp connection works differently: it relies on a device-pairing session obtained by scanning a QR code, as when you connect WhatsApp Web. The resulting session is kept on our server, with access restricted to our technical infrastructure, to keep the connection active.

We do our best to protect your data, but we cannot be held liable for an external event beyond our control (see our Terms of Service).

Connected third-party accounts

For automations, the app connects, with your authorisation, to some of your accounts (Superprof, Discord, WhatsApp, Google). These accesses are used only for the described features and are never shared.

Kadrella is not affiliated with WhatsApp/Meta, Discord, Superprof or Google: these connections use your own personal accounts, under the conditions described in our Terms of Service.

Subprocessors

To provide the service, we rely on subprocessors bound by contract: Stripe for payment processing (data hosted in the EU), Anthropic (Claude) for features relying on artificial intelligence, and the APIs of the platforms you connect yourself (Superprof, Discord, WhatsApp, Google), strictly within the automation features you enable.

No personal data is transferred outside the European Economic Area without appropriate safeguards.

We never resell your data

We do not sell, rent or exchange any personal data, activity data or credentials to third parties. No data is shared with partners or advertising networks.

Audience measurement

We use anonymised analytics (load times, error rates, feature usage) only to improve the app. They never allow a person to be identified and are not shared.

Anonymised statistics

Platform usage data (number of lessons managed, payment volumes, rates charged, etc.) may be aggregated and anonymised for two purposes: improving the product and tracking the platform's overall activity, or producing public statistics, market research and marketing content (for example a study on the average rate for computer-science lessons in a given city).

These statistics are always anonymised or aggregated: they never allow an organisation, teacher or student to be identified.

Cookies

We only use authentication cookies and anonymised audience-measurement cookies. No advertising or third-party tracking cookies.

Your students’ data

Data about your students or contacts is managed under your responsibility. Kadrella only provides the technical tool; it is up to you to meet your legal obligations towards them.

Data retention

Your personal data is kept for as long as your subscription stays active, then deleted within 90 days of termination. Accounting and invoicing data is kept for 10 years under French legal obligations. Third-party account credentials (Superprof, Discord, WhatsApp...) are deleted immediately on termination or on request.

Automatic backups are performed regularly to ensure service continuity. You can export your data at any time; keeping your own backups remains your responsibility.

Your rights

You have the right to access, rectify, erase, port and object to the processing of your data. To exercise it: [email protected].

You may also lodge a complaint with the CNIL (cnil.fr).

Intellectual property

The entire Kadrella website and application (code, interface, databases, algorithms and graphic elements) is the exclusive property of HOS.

Users receive a personal, non-exclusive and non-transferable right of use. Copying, reproducing, reselling the service, accessing the source code or reverse-engineering it is prohibited.

Consumer mediation

For any dispute not resolved by our customer service ([email protected]), you may use a consumer mediator free of charge: Centre de Médiation et d’Arbitrage de Paris (CMAP), 39 avenue Franklin D. Roosevelt, 75008 Paris (cmap.fr).

The request must be made within one year of the written complaint sent to HOS.

Applicable law

This legal notice is governed by French law. Any dispute falls under the jurisdiction of the courts of Paris.