Privacy Policy

Last Updated: August 15, 2026

This Privacy Policy explains how kvelpo ("we," "our," or "us") collects, uses, and protects your personal information. This policy applies to our service and complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Data Controller

kvelpo is the data controller responsible for your personal information. For privacy-related inquiries, please contact us at privacy@kvelpo.com.

2. Information We Collect

2.1 Account Information

  • Email address and user identifier (via Clerk authentication)
  • Profile information: full name, bio, avatar URL, skills, links
  • Membership and subscription details

2.2 Project Information

  • Project names, descriptions, and tags
  • Role requirements and applications
  • Project collaboration data

2.3 Technical Information

  • IP address and location data (for EU compliance detection)
  • Device and browser information
  • Cookies and similar technologies

3. Legal Basis for Processing (GDPR Article 6)

Contract Performance: We process your data to provide the services you've requested.

Legitimate Interests: We process data for platform security, fraud prevention, and service improvement.

Consent: For optional features like cookies and marketing communications.

Legal Obligation: To comply with applicable laws and regulations.

4. How We Use Your Information

  • Provide and maintain our platform services
  • Process payments and manage subscriptions (via Stripe)
  • Authenticate users and secure accounts (via Clerk)
  • Facilitate project collaboration and communication
  • Send service-related notifications and updates
  • Analyze usage patterns to improve our services
  • Comply with legal obligations and protect our rights

5. Data Sharing and Third Parties

We share your data only with the following trusted third parties:

  • Clerk: Authentication and user management
  • Stripe: Payment processing and subscription management
  • Vercel: Hosting and infrastructure services

We do not sell your personal information to third parties for their marketing purposes.

6. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure adequate protection through appropriate safeguards, including Standard Contractual Clauses (SCCs) and compliance with GDPR requirements for international data transfers.

7. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

  • Account Data: Retained while your account is active
  • Project Data: Retained until project deletion or account termination
  • Payment Data: Retained as required by financial regulations (typically 7 years)
  • Analytics Data: Retained for 26 months or until anonymized

Upon account deletion, all personal data is permanently removed within 30 days, except as required by law.

8. Your GDPR Rights

Under the GDPR, you have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your personal data
  • Right to Portability: Request transfer of your data
  • Right to Restrict Processing: Limit how we use your data
  • Right to Object: Object to certain types of processing

You can exercise these rights through your profile settings or by contacting privacy@kvelpo.com.

9. Cookies and Tracking

We use cookies and similar technologies for:

  • Authentication and session management
  • Remembering your preferences
  • Analytics and service improvement

You can manage cookie preferences through our consent banner or browser settings.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including: encryption, secure authentication protocols, regular security assessments, and access controls. However, no method of transmission over the internet is 100% secure.

11. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware of such collection, we will take immediate steps to delete it.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Continued use of our services after such changes constitutes acceptance of the updated policy.

13. Contact Information

For any privacy-related questions or to exercise your GDPR rights, please contact us at:

Email: privacy@kvelpo.com

Address: [Your Business Address]

Phone: [Your Phone Number]