Privacy Policy

Effective date: November 5, 2026. Last updated: November 5, 2026.

This Privacy Policy describes the public websites for Kanda CX and Untangl. Untangl is a Kanda CX company. The same policy is published on both sites. It covers people who browse those sites or use the contact forms. It is not the agreement that covers Untangl products.

The sites are operated by Kanda CX LLC.

What this policy does not cover

Information processed inside Untangl products — EngageHQ, FocalPoints.AI, and cloud solutions such as Amazon Connect builds — is governed by the customer agreement and by the Untangl Trust Center. That product and customer data is outside this policy. This policy covers the marketing websites only: the pages you read, the contact forms, and the scheduling step those forms can open.

Information the sites collect

Visit attribution stored in the browser

On every page, the site reads the address you arrived with. When campaign details or an outside referrer are present, it stores them in your browser. You do not create an account.

• Campaign tags: utm_source, utm_medium, utm_campaign, utm_term, and utm_content.
• Ad click IDs: gclid (Google), msclkid (Microsoft), and li_fat_id (LinkedIn).
• The referring page, when it is on a different site.
• The landing page (path and query string) and the time of that touch.

The first of these touches is written to localStorage as lead_first_touch and kept for later visits. That is the first visit we can attribute. The latest touch in the current browser session is written to sessionStorage as lead_last_touch. That is the last visit touch for this session. The first page of the session is stored in sessionStorage as lead_landing, even when there is no campaign tag. If the browser blocks storage, the site continues without it.

The sites do not save a light or dark theme choice. The page follows your operating system, and any older theme value in localStorage is removed.

Contact form

Each site’s contact form collects:

• Full name
• Work email
• Company
• Role
• Phone, if you choose to give one
• The topics you want help with
• Current telephony or CCaaS platform, if you select one
• Team size, if you select one
• Timeline, if you select one
• A message, if you write one (up to 500 characters)
• Whether you want occasional insights and news (an optional checkbox)

On Kanda CX the topics are consulting and executive advisory, BPO strategy and outcome pricing, RFP Process & Vendor Selection, professional services, managed services, partner solutions such as economiCX, and “something else.” On Untangl the topics are Amazon Connect / AWS, Google Cloud, a custom serverless build, an AI front door or IVR, agent assist, coaching and auto QA, Athena lakehouse and reporting, EngageHQ, FocalPoints.AI, and “something else.”

The form also includes the attribution values above, the page address, and a copy of the first-touch record, so the person who replies can see how you found the site. A hidden “website” field is a spam trap. If it is filled in, the submission is treated as automated and is not used as a lead.

Until the form’s send address is connected, the page keeps the submission in the browser and does not transmit it. When sending is turned on, the form posts that information so we can respond to the request and contact you about it.

Spam protection

The form is built to show a Cloudflare Turnstile widget. The same slot can use reCAPTCHA if that provider is selected instead. Turnstile checks that a person submitted the form. Cloudflare may receive technical data, such as browser details and IP address, and may set its own cookie. The widget’s site key is not live yet. The form shows a placeholder where the widget will render.

Scheduling

After the form you can book a 30-minute intro call or skip it. Kanda CX is set to embed a Microsoft Bookings page. Untangl is set to embed a Calendly page. The code on both sites can use either scheduler. Where the scheduler allows it, the site passes your name, work email, and company into the booking page, and may pass the campaign tags. Microsoft Bookings does not prefill from the link, so you may type your name and email again there. The scheduler is a separate site with its own privacy practices. While the booking address is still a placeholder, you see a local mock and nothing is sent to Microsoft or Calendly.

Form events and analytics

The form records these events on the page: form start, step complete, lead submit, booking view, booking time selected, booking complete, booking skipped, and opening the booking page in a new tab. A submit event can include the topics you picked, team size, timeline, and current platform. If Google Tag Manager or Google Analytics (gtag) is loaded, those events are sent there. The sites do not embed a Google tag themselves. They forward the events only when one of those tools is already present.

How we use information

• To answer the request you sent and to contact you about it.
• To book or confirm an intro call if you schedule one.
• To send occasional insights and news only if you checked that box.
• To see which campaigns bring people to the sites.
• To block spam submissions.
• To keep the sites working and to fix form problems.
• To see how the pages load and to catch errors.

We do not sell contact-form information.

Sharing with service providers

When a feature is connected, the sites share the information that feature needs with the company that runs it:

• Amazon Web Services, through AWS Amplify, which hosts the websites.
• Amazon Web Services, for CloudWatch, which receives page performance and error information from these sites.
• Cloudflare, for the Turnstile spam-protection widget.
• Microsoft, for the Bookings scheduler used on Kanda CX.
• Calendly, for the scheduler used on Untangl.
• Google, for Tag Manager or Analytics, only if those tools are loaded on the page.
• The intake service that will receive the form. That endpoint is not chosen yet.

Those providers use the information to perform that service. We do not hand form contents to advertisers as a contact list.

Cookies, browser storage, and how to opt out

The sites store the attribution records above in localStorage and sessionStorage. They do not set their own tracking cookie for that purpose. sessionStorage clears when you close the tab or the browser. localStorage stays until you clear it.

The sites also set two first-party analytics cookies so we can see how pages load and catch errors. cwr_u is an id kept for later visits. cwr_s covers the current visit. Amazon Web Services receives this through CloudWatch. We do not record your screen or what you type.

To clear it, use your browser settings to remove site data for this website, including cookies and local storage. Blocking third-party cookies limits what Turnstile, a scheduler, or Google Analytics can store. You can block or delete cwr_u and cwr_s and keep using the sites. You can use the sites without sending the form. Phone, message, and the news checkbox are optional. Booking can be skipped.

These sites do not set advertising cookies and do not use a cookie banner.

If Google Analytics is turned on later, Google’s browser add-on can opt that browser out of Analytics.

How long we keep it

We keep contact form submissions and booking requests for as long as we need them to respond and follow up, and no longer than 24 months after our last contact with you, unless you become a client. Client records are kept for the length of the relationship and as long as the law requires. You can ask us to delete your information at any time by emailing [AARON & KELLI: CONFIRM — privacy contact email]. Copies stored in the browser stay on your device until you clear them or, for sessionStorage, until the session ends.

Security

The websites are hosted on AWS Amplify and served over HTTPS. Once the form sends submissions, access is limited to people who need them to respond to you. No website transmission is perfectly secure. Do not send passwords, payment card numbers, or health information through the contact form.

Children

These websites are for businesses and the people who buy from them. We do not knowingly collect personal information from children. If you believe a child sent information through a form, contact us and we will delete it.

Your choices

You may ask what contact information we hold from these forms, ask us to correct it, or ask us to delete it. Email the privacy contact below and say which site you used. Which additional rights apply, and any deadline for a reply, depend on where you live. That review is still open, along with the governing-law note in the Terms of Use.

The news checkbox is optional. To stop messages you opted into, use the unsubscribe path in those messages once they exist, or email the privacy contact.

Changes

If this policy changes, the new text will be posted on this page and the effective date will be updated.

Contact

Privacy questions and requests: [AARON & KELLI: CONFIRM — privacy contact email]

Mailing address: Kanda CX LLC, 2835 S 2540 E, Salt Lake City, UT 84109.

Legal entity: Kanda CX LLC

For a sales or services question, not a privacy request, email sales@kandacx.com (Kanda CX) or sales@untangl.com (Untangl).