Privacy Policy

Last updated: May 29, 2026

This Privacy Policy describes how Inglewood (“we“, “us“, or “Kantan“) collects, uses, shares, and protects information in connection with the Kantan product suite, including the trykantan.com website, the Kantan Analytics and Kantan SEO WordPress plugins, and any related services (collectively, the “Services“).

We take privacy seriously. The core architectural choice behind Kantan Analytics is that visitor data stays on your server — not ours. This Policy explains the narrow set of information we do collect, why, and what control you have over it.

1. Who we are

Inglewood is based in Utah, USA. For privacy-related questions or to exercise any of the rights described in this Policy, contact us at hello@trykantan.com.

For visitors in the European Economic Area (EEA), United Kingdom, or Switzerland, Inglewood is the “controller” of personal data collected through the Services, except where explicitly noted below.

2. Scope of this Policy

This Policy covers personal information we collect from:

• Visitors to the trykantan.com website
• Customers who purchase or use Kantan SEO or any paid Kantan module
• People who contact us via email or support channels
• WordPress sites that install our plugins and communicate with our update and licensing servers

This Policy does not cover data collected by our plugins running on other people’s websites. When the Kantan Analytics or Kantan SEO plugins are installed on a third party’s WordPress site, that site’s owner is the data controller for all visitor data captured there. We have no access to, and do not receive copies of, that data. If you are a visitor to a site that uses our plugins, please consult that site’s own privacy policy.

3. Information we collect

3.1 Information you provide to us

• Account and purchase information. When you buy Kantan SEO, our payment processor Stripe collects your name, email address, billing address, and payment card details on our behalf. We receive a limited record of each transaction (email, license key, subscription status, last four digits of the card, country). We never see or store full payment card numbers.
• Support correspondence. If you email hello@trykantan.com, we receive your name, email address, and the contents of your message. We keep support threads so we can help you on follow-up issues.
• Mailing list. If you subscribe to product updates, we store your email address and the date you subscribed. You can unsubscribe at any time using the link in any email we send.

3.2 Information collected automatically on trykantan.com

Our marketing website runs the Kantan Analytics plugin on itself. As a visitor, this means:

• We store a random, anonymous identifier in your browser’s local storage (not a cookie) so we can distinguish returning visitors from new ones. This identifier is never tied to your name, email, or any other identifying information, and it only works on trykantan.com.
• We record the pages you view, the referring URL that brought you here, approximate time on page and scroll depth, and the clicks you make within the site. Your IP address is recorded for a limited period (see Retention, section 7) primarily so we can filter bot traffic.
• No cookies are dropped by our analytics.
• No third-party analytics services (Google Analytics, Facebook Pixel, etc.) are used.

3.3 Information collected from Kantan plugin installations

When a WordPress site runs our plugins and connects to our servers, it sends limited technical information required to deliver updates and validate licenses:

• Update checks (both plugins): The plugin periodically queries trykantan.com/api to check whether a newer version is available. These requests include the plugin slug, the version currently installed, and standard web request metadata (IP address, user agent, timestamp).
• License validation (Kantan SEO only): When you activate, deactivate, or use the paid features of Kantan SEO, the plugin sends the license key and the URL of the site it is installed on so we can verify the license is valid and associated with the correct domain.
• No visitor data, analytics data, or content from your WordPress site is ever transmitted to our servers.

3.4 Google Search Console connection (Kantan SEO only)

Kantan SEO can optionally connect to Google Search Console using OAuth so it can display your site’s keyword rankings, clicks, impressions, and average position inside your own WordPress admin.

Google user data we access (via the webmasters.readonly scope):

• The list of Search Console properties your Google account has access to
• Search analytics data for the property you select — queries, clicks, impressions, CTR, and average position by date and landing page

What we do with it. Kantan SEO writes this data into a table in your own WordPress database (wp_kantan_seo_keywords) so it can render keyword reports inside your wp-admin dashboard. It is used exclusively to power the SEO reporting features the plugin provides to you. We do not sell, share, transfer, or use it for advertising.

Where it lives. Kantan SEO data lives on your WordPress site — not on our servers. The OAuth token that authorizes the connection is also stored in your WordPress database (wp_options). We do not receive a copy.

Retention. Keyword data is retained on your site by default for 365 days and is configurable via the kantan_seo_retention_days filter. Disconnecting Search Console deletes the OAuth token from your database; previously synced keyword data is retained until you remove it.

How to revoke access. You can disconnect Search Console at any time from Kantan Analytics → SEO Settings → Integrations → Google Search Console → Disconnect. You can also revoke Kantan SEO’s access directly from Google at myaccount.google.com/permissions.

Kantan SEO’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3.5 Server logs

Our web server automatically records standard request logs (IP address, timestamp, requested URL, user agent, HTTP status) for security, abuse prevention, and troubleshooting. These logs are retained briefly (see Retention, section 7).

4. How we use information

We use the information described above only for the purposes listed here:

• To provide and operate the Services, including processing payments, issuing licenses, and delivering plugin updates
• To respond to your questions and provide customer support
• To send you transactional emails (purchase receipts, license notices, security alerts) and, if you opt in, product update emails
• To understand how visitors use trykantan.com so we can improve the site
• To protect the security of our systems, detect fraud and abuse, and enforce our Terms of Service
• To comply with legal obligations

We do not sell your personal information. We do not share your information with advertisers. We do not use your information to build profiles for cross-site tracking.

5. Legal bases for processing (EEA / UK / Switzerland)

If you are in the EEA, the UK, or Switzerland, we rely on the following legal bases under the GDPR and UK GDPR:

• Performance of a contract — to provide the Services you purchased (processing payments, delivering updates, validating licenses).
• Legitimate interests — to operate trykantan.com, understand traffic patterns, prevent abuse, and communicate transactional information. Our interests are balanced against your privacy rights; we minimize data collection, don’t use third-party trackers, and give you a simple way to object.
• Consent — for optional communications such as mailing list subscriptions. You can withdraw consent at any time.
• Legal obligation — where we are required to retain certain records (e.g., tax, accounting).

6. Who we share information with

We share personal information only with the limited set of service providers who help us run the Services. These “sub-processors” are bound by contract to handle your information only as we direct:

• Stripe, Inc. — payment processing. Stripe collects and holds payment information directly; we never see full card numbers. See Stripe’s privacy policy.
• Mailgun Technologies, Inc. — sending transactional and list emails. See Mailgun’s privacy policy.

Our hosting is currently operated on our own infrastructure; no third-party cloud provider processes customer data on our behalf for hosting.

We may also disclose information where legally required — for example, in response to a valid subpoena, court order, or other legal process — or where necessary to investigate suspected violations of our Terms, protect our rights, or protect the safety of any person.

If we are ever involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before any such transfer takes place and you will have the opportunity to object.

7. How long we keep information

8. International transfers

Inglewood is based in the United States. If you access the Services from outside the United States, your information will be transferred to and processed in the U.S. Our sub-processors (Stripe, Mailgun) are also U.S.-based and may process information in the U.S. and other jurisdictions.

For transfers of personal data from the EEA, the UK, or Switzerland to the United States, we rely on the European Commission’s Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum where applicable, as provided for in our sub-processors’ data processing agreements.

9. Your rights

9.1 Rights available to everyone

Regardless of where you live, you can:

• Ask us what information we hold about you
• Request a copy of that information
• Request correction of inaccurate information
• Request deletion of your information (subject to legal retention obligations)
• Unsubscribe from marketing emails at any time using the link in each email
• Clear the anonymous identifier Kantan Analytics stores in your browser by clearing your browser’s site data for trykantan.com

9.2 GDPR and UK GDPR (EEA, UK, Switzerland)

In addition to the general rights above, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your data, subject to limited exceptions
• Restriction — ask us to limit how we process your data
• Portability — receive your data in a portable machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — withdraw any consent you previously gave
• Lodge a complaint with your local supervisory authority. In the UK: the Information Commissioner’s Office (ico.org.uk). In the EU: the data protection authority of your member state.

9.3 California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)

California residents have the right to:

• Know what categories of personal information we collect, the sources, the purposes, and the categories of third parties we share it with
• Request a copy of the specific pieces of personal information we have collected about you
• Request deletion of your personal information
• Correct inaccurate personal information
• Limit use of sensitive personal information (we do not collect sensitive personal information as defined by the CPRA)
• Opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined by the CCPA/CPRA.
• Not be discriminated against for exercising any of these rights

Authorized agents may submit requests on your behalf. To designate an agent, contact us with written permission from you authorizing the agent to act.

9.4 Utah, Virginia, Colorado, Connecticut, Texas, and other US state privacy laws

If you live in a U.S. state with a comprehensive privacy law (including Utah, Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and others), you generally have rights similar to those described above: the right to know, access, correct, delete, and opt out of targeted advertising or the sale of personal information. We do not engage in targeted advertising or sell personal information.

9.5 How to exercise your rights

To exercise any right, email hello@trykantan.com with the subject line “Privacy Request” and include enough information for us to verify your identity (typically, the email address associated with your account). We will respond within the timeframes required by applicable law (generally 30–45 days).

We will not discriminate against you for exercising any privacy right. If we cannot fulfill a request (for example, because the law requires us to retain certain records), we will tell you why.

10. Cookies and similar technologies

trykantan.com does not use tracking cookies. The Kantan Analytics plugin running on our own site uses only localStorage (a browser storage mechanism that stays on your device and is not automatically transmitted with every request the way cookies are) to store an anonymous visitor identifier.

When you check out through Stripe, Stripe’s own checkout page may set cookies as described in their privacy policy. That happens on Stripe’s domain and is outside our control.

11. Children’s privacy

The Services are not directed at children under 13 (or 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, contact us and we will delete it.

12. Security

We use reasonable technical and organizational measures to protect personal information, including TLS encryption in transit, access controls, and minimizing the amount of personal data we collect in the first place. No method of transmission or storage is perfectly secure; if you believe your interaction with us is no longer secure, contact us immediately.

13. Do Not Track and Global Privacy Control

Some browsers send a “Do Not Track” (DNT) signal or implement a Global Privacy Control (GPC) opt-out. Because we do not track you across other sites or sell or share personal information under the CCPA/CPRA, these signals do not change our practices. We honor deletion and opt-out requests submitted via our contact channels.

14. Third-party links

Our site may link to third-party sites (for example, documentation, payment pages, or external tools). We are not responsible for the privacy practices of those sites. Read their privacy policies before providing personal information.

15. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or legal obligations. When we do, we will update the “Last updated” date at the top and, for material changes, notify you by email or through a prominent notice on the Services before the change takes effect.

16. Contact us

For any privacy question, data request, or complaint, contact us at:

Inglewood
Email: hello@trykantan.com
Utah, United States