Privacy Policy
Last updated: March 2026
This policy explains how Kolvra processes account and operational data when you use the service.
1. What Data We Process
We process the data required to operate your Kolvra workspace and support your teams.
**Account and Organization Data:** name, email, role, workspace details, and configuration settings.
**Operational Data:** records created inside the platform (locations, schedules, tasks, reports, billing operations, and related metadata).
**Technical Data:** request logs, security events, and system telemetry needed for reliability, troubleshooting, and abuse prevention.
We do not collect data that is not necessary for providing and improving the service.
2. How We Use Data
We use data to:
- Provide and maintain platform functionality
- Authenticate users and enforce role-based access
- Support billing and subscription workflows
- Detect incidents, abuse, and unauthorized activity
- Improve service quality, reliability, and support response
- Communicate operational updates relevant to your account
3. Security Practices
Security controls are built into platform operations.
**Access Control:** Role-based permissions and scoped access to sensitive functionality.
**Session Protection:** Authenticated sessions use secure cookie-based controls.
**Auditability:** High-impact actions are logged to support investigations and internal control.
**Resilience:** Backup and recovery processes are used to reduce disruption risk.
Security posture is continuously reviewed as the platform evolves.
4. Subprocessors and Service Providers
To operate specific workflows, we may rely on specialized service providers.
Examples include:
- **Payment processing providers** (for subscription and invoice processing)
- **Transactional email providers** (for account and system notifications)
- **Infrastructure providers** (for hosting, storage, and delivery)
Providers are used only for business purposes required to deliver the service.
5. Data Retention and Deletion
We retain data for as long as required to provide the service, meet legal obligations, resolve disputes, and maintain security.
If an account is closed, data handling follows our operational retention policy and applicable legal requirements.
Where supported by your plan and product scope, export and deletion requests can be handled through support channels.
6. Your Privacy Rights
Depending on your jurisdiction, you may have rights such as access, correction, deletion, or restriction of processing.
To request privacy-related actions, contact us using the details below. We process requests according to applicable law and identity verification requirements.
7. Cookies and Session Data
Kolvra uses cookies and similar mechanisms required for secure login, session continuity, and product preferences.
Disabling essential session mechanisms may affect platform functionality and user experience.
8. Contact
For privacy and data protection requests:
**Email:** hello@kolvra.app
**Address:** Prague, Czech Republic