This Privacy Policy explains how Kalmira collects, uses, shares, and protects personal information when you visit our website, create an account, or use the Kalmira platform (the "Service"). We are committed to handling your information responsibly and transparently, and to giving you meaningful control over it.
Kalmira provides cloud-based business management software for small and mid-sized organizations. This policy applies to information we process as a controller, such as account and website data. Where we process information on behalf of our customers as part of the Service, we act as a processor, and that information is handled according to our agreement with the customer.
01Information we collect
We collect information in three broad ways: information you provide directly, information collected automatically, and information from third parties.
Information you provide
- Account information, such as your name, work email address, company name, and login credentials.
- Billing information, such as your plan, transaction records, and payment details processed through our payment providers.
- Communications, such as messages you send us through forms, support requests, or other correspondence.
- Customer Data you and your team submit into the Service, including schedules, invoices, and client records.
Information collected automatically
- Usage data, such as the features you use, actions you take, and the frequency and duration of your activity.
- Device and log data, such as your IP address, browser type, operating system, and access timestamps.
- Cookies and similar technologies, as described in our Cookie Policy.
Information from third parties
We may receive information from integrations you connect, from payment processors, and from service providers that help us operate, secure, and improve the Service.
02How we use information
We use personal information for the following purposes:
- To provide, maintain, and operate the Service and its features.
- To create and manage accounts, and to authenticate users.
- To process subscriptions, billing, renewals, and related transactions.
- To provide customer support and respond to your requests.
- To monitor, secure, and improve the performance and reliability of the Service.
- To develop new features and understand how the Service is used, using aggregated or de-identified data where possible.
- To send service-related communications, and, where permitted, relevant updates about the Service.
- To detect, investigate, and prevent fraud, abuse, and security incidents.
- To comply with legal obligations and enforce our terms.
03Legal bases for processing
Where data protection laws require a legal basis for processing, we rely on one or more of the following: the performance of a contract with you; our legitimate interests in operating and improving the Service, provided those interests are not overridden by your rights; your consent, where we ask for it; and compliance with legal obligations. You may withdraw consent at any time where processing is based on consent.
04How we share information
We do not sell personal information. We share information only in the following circumstances:
- Service providers who help us operate the Service, such as hosting, analytics, and payment processing providers, under obligations of confidentiality and data protection.
- Integrations you enable, where you direct us to share data with a connected third-party service.
- Within your organization, where account administrators and team members have access according to the roles you assign.
- Legal and safety reasons, where disclosure is required by law, or necessary to protect our rights, users, or the security of the Service.
- Business transfers, in connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards.
05Cookies and tracking
We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service, and understand how it is used. You can control cookies through your browser settings and, where available, our cookie controls. For full details, please see our Cookie Policy.
06Data retention
We retain personal information for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Customer Data is retained according to your subscription and our agreement with you; after account termination, we make it available for export for a limited period before deletion. Retention periods vary depending on the type of data and the purpose for which it is held.
07Security
We use technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, and alteration. These include encryption in transit, access controls, monitoring, and regular review of our practices. No method of transmission or storage is completely secure, but we work continuously to protect the information entrusted to us and to respond promptly to any incident.
08Your rights and choices
Depending on where you live, you may have rights over your personal information, including the right to access, correct, delete, restrict, or object to certain processing, and the right to data portability. You may also have the right to lodge a complaint with a supervisory authority. To exercise these rights, please contact us using the details below. Where we act as a processor for a customer, we will direct your request to the relevant customer, who is responsible for responding.
You can update most account information directly within the Service. You can also opt out of non-essential communications at any time.
09International data transfers
We may process and store information in countries other than the one in which you are located. Where we transfer personal information across borders, we take steps to ensure it is protected in accordance with applicable law, including using appropriate safeguards where required.
10Children's privacy
The Service is intended for business use by adults and is not directed to children. We do not knowingly collect personal information from anyone under the age of eighteen. If we learn that we have collected such information, we will take steps to delete it.
11Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will post the revised policy on this page and update the "Last updated" date above. Where required, we will provide additional notice. We encourage you to review this policy periodically.