Privacy Policy

Information We Collect

We collect information you provide directly to us, including:

• Account information (name, email, password)
• Profile information (organization details, role)
• Usage data (bookings, logs, transactions)
• Communications (support requests, feedback)
• Payment information (processed securely via Stripe)

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities

Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following situations:

• With your consent or at your direction
• With service providers who assist in our operations (hosting, payment processing)
• To comply with legal obligations
• To protect the rights, privacy, safety, or property of Kai, you, or others

Third-Party Service Providers (Subprocessors)

We use the following third-party service providers to operate our platform. Each processes only the data necessary for its specific purpose:

• Supabase (AWS Frankfurt, EU) — Authentication and database hosting. Processes: all personal data stored in our platform.
• Stripe (EU/US, Standard Contractual Clauses) — Payment processing and payouts. Processes: email, name, billing information, IBAN.
• Resend (US, Standard Contractual Clauses) — Transactional email delivery. Processes: email address, name.
• Sentry (EU, de.sentry.io) — Error monitoring. Processes: error context only, no personally identifiable information.
• Vercel (EU) — Application hosting and content delivery. Processes: IP address, request data.
• Google Analytics & Google Ads (US, EU-US Data Privacy Framework) — Website analytics and advertising measurement, loaded only with your explicit consent. Processes: anonymized usage data.
• Firebase / Google Cloud (EU) — Document and file storage. Processes: uploaded files.
• Cloudinary (US, Standard Contractual Clauses) — Image optimization and delivery. Processes: uploaded images.
• Accounting integrations (Yuki, Moneybird, Exact Online, e-Boekhouden — NL/EU) — Invoice synchronization, activated only when configured by group administrators. Processes: invoice data (names, amounts).

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, and regular security audits.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time.

Your Rights

Under GDPR and other applicable laws, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Request data portability
• Withdraw consent at any time

Cookies

We use three categories of cookies: Essential cookies (always active) ensure the platform functions properly, including authentication and session management. Analytics cookies (Google Analytics, Vercel Speed Insights) help us understand how visitors use our site — these are only loaded after you give explicit consent. Marketing cookies (Google Ads) measure the effectiveness of our advertising campaigns — these also require your explicit consent. You can manage your preferences at any time using the cookie settings button or the consent banner.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at [email protected]