Privacy Policy

Last updated: March 2026

This policy explains how Kolvra processes account and operational data when you use the service.

1. What Data We Process

We process the data required to operate your Kolvra workspace and support your teams. **Account and Organization Data:** name, email, role, workspace details, and configuration settings. **Operational Data:** records created inside the platform (locations, schedules, tasks, reports, billing operations, and related metadata). **Technical Data:** request logs, security events, and system telemetry needed for reliability, troubleshooting, and abuse prevention. We do not collect data that is not necessary for providing and improving the service.

2. How We Use Data

We use data to: - Provide and maintain platform functionality - Authenticate users and enforce role-based access - Support billing and subscription workflows - Detect incidents, abuse, and unauthorized activity - Improve service quality, reliability, and support response - Communicate operational updates relevant to your account

3. Security Practices

Security controls are built into platform operations. **Access Control:** Role-based permissions and scoped access to sensitive functionality. **Session Protection:** Authenticated sessions use secure cookie-based controls. **Auditability:** High-impact actions are logged to support investigations and internal control. **Resilience:** Backup and recovery processes are used to reduce disruption risk. Security posture is continuously reviewed as the platform evolves.

4. Subprocessors and Service Providers

To operate specific workflows, we may rely on specialized service providers. Examples include: - **Payment processing providers** (for subscription and invoice processing) - **Transactional email providers** (for account and system notifications) - **Infrastructure providers** (for hosting, storage, and delivery) Providers are used only for business purposes required to deliver the service.

5. Data Retention and Deletion

We retain data for as long as required to provide the service, meet legal obligations, resolve disputes, and maintain security. If an account is closed, data handling follows our operational retention policy and applicable legal requirements. Where supported by your plan and product scope, export and deletion requests can be handled through support channels.

6. Your Privacy Rights

Depending on your jurisdiction, you may have rights such as access, correction, deletion, or restriction of processing. To request privacy-related actions, contact us using the details below. We process requests according to applicable law and identity verification requirements.

7. Cookies and Session Data

Kolvra uses cookies and similar mechanisms required for secure login, session continuity, and product preferences. Disabling essential session mechanisms may affect platform functionality and user experience.

8. Contact

For privacy and data protection requests: **Email:** hello@kolvra.app **Address:** Prague, Czech Republic