Privacy Policy
How we protect and handle your data
Table of Contents
GDPR & CCPA Compliant: This policy is designed to comply with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy regulations.
1. Introduction
KinectMax ("we," "our," or "us") operates the KinectMax platform, a Customer Relationship Management (CRM) service for businesses. This Privacy Policy applies to information we collect through our website, web application, and email communications.
By using our Service, you consent to the collection and use of your information as described in this Privacy Policy.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, password, company name, phone number
- Customer Data: Contact information, business records, communications you upload
- Payment Information: Billing address, payment method details (processed by Stripe)
- Support Requests: Information included in your communications with us
2.2 Automatically Collected Information
- Device Information: Browser type, operating system, device identifiers
- Log Data: IP address, access times, pages viewed, referring URLs
- Usage Data: Features used, actions taken, session duration
3. How We Use Your Information
- Operate and maintain the KinectMax platform
- Process transactions and send related information
- Provide customer support and respond to inquiries
- Develop new features and improve existing functionality
- Send transactional emails and important updates
- Detect, prevent, and address security issues
- Comply with legal obligations
4. Data Sharing and Disclosure
We do not sell your personal information. We only share your data as described below.
- Service Providers: Third parties who help us provide the Service (hosting, payments, email)
- Business Transfers: In connection with mergers, acquisitions, or asset sales
- Legal Requirements: When required by law or to protect our rights
- With Your Consent: When you explicitly agree to sharing
5. Third-Party Services
We integrate with the following services:
- Supabase: Database and authentication
- OpenAI: AI-powered features
- Stripe: Payment processing
- Resend: Email delivery
- Google Gmail API: Email integration
Each service has its own privacy policy governing the use of your data.
6. Data Storage and Security
We implement industry-standard security measures:
- Encryption: Data encrypted in transit (TLS/SSL) and at rest
- Access Controls: Role-based permissions and multi-factor authentication
- Password Security: Passwords hashed using bcrypt algorithm
- Row-Level Security: Database-level tenant isolation
- Regular Backups: Automated data backups for disaster recovery
7. Your Rights
Depending on your location, you may have these rights:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Export your data in a machine-readable format
- Object: Object to certain types of processing
To exercise these rights, email us at privacy@kinectmax.com.
9. Data Retention
- Active Account: Data retained while your account is active
- Deleted Account: Permanently deleted within 30 days
- Backup Data: Retained up to 90 days for disaster recovery
- Legal Records: Retained as required by law (typically 7 years)
10. International Data Transfers
Your data may be transferred to and stored in the United States. For EEA/UK users, we ensure compliance through Standard Contractual Clauses and Data Processing Agreements.
11. Children's Privacy
KinectMax is not intended for children. We do not knowingly collect personal information from individuals under 18.
12. California Privacy Rights
California residents have additional rights under CCPA:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale (we do not sell data)
- Right to non-discrimination for exercising these rights
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use after changes become effective constitutes acceptance.
14. Contact Information
For privacy questions, please contact us:
KinectMax Privacy Team
Email: privacy@kinectmax.com
Data Protection Officer: dpo@kinectmax.com
Website: kinectmax.com
Thank you for trusting KinectMax with your data. We are committed to protecting your privacy and providing a secure, reliable service. See also our Terms of Service.