This Privacy Policy explains how Kronowork processes personal data in the context of the Kronowork SaaS platform. It applies to all users of our websites and applications.
1. Data controller
Kronowork acts as data controller for account and usage data, and as processor for data that customers upload to the platform about their own employees and clients.
For any privacy-related request, please contact privacy@kronowork.com.
2. Data we collect
Account data: name, email, hashed password, language and theme preferences.
Usage data: logs, IP address, device information, actions performed within the application.
Billing data: company name, billing address, VAT number and payment status (payment card details are handled exclusively by Stripe).
Content data: any information you enter into Kronowork about your company, employees, clients, projects, tasks, invoices and leave.
3. Purposes and legal bases
Providing and securing the service, based on the performance of our contract with you.
Billing and payment processing, based on the performance of the contract and our legal obligations.
Product analytics and service improvement, based on our legitimate interest in improving Kronowork.
Transactional emails (verification, password reset, invoices), based on the performance of the contract.
Marketing communications, only with your prior consent and with the ability to opt out at any time.
4. Sub-processors and recipients
Stripe: payment processing.
Resend: transactional email delivery.
Our cloud hosting provider, which stores the application database in the European Union.
We do not sell personal data to any third party.
5. International transfers
Personal data is stored in the European Union. When we use providers based outside of the EU, transfers are governed by the European Commission's Standard Contractual Clauses.
6. Retention
Account data is kept for as long as your account is active, and for up to 12 months after cancellation in order to comply with legal obligations.
Billing data is retained for the duration required by applicable accounting law (usually 10 years).
Logs are retained for 12 months.
7. Your rights
You have the right to access, rectify, erase, restrict, object to the processing of, and port your personal data.
You can exercise these rights by contacting privacy@kronowork.com. You also have the right to lodge a complaint with a supervisory authority.
8. Security
We implement appropriate technical and organizational measures to protect personal data, including encryption in transit, hashed passwords, role-based access control and regular backups.
9. Changes to this policy
We may update this policy from time to time. Significant changes are communicated by email or via an in-app notice.
10. Contact
For any question regarding this policy or your personal data, please contact privacy@kronowork.com.