Privacy Policy

1. Introduction

Welcome to Akanban ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our project management platform and related services (collectively, the "Services").

By accessing or using our Services, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide to us when you:

• Create an Account: Name, email address, password, company name, job title, and profile information
• Use Our Services: Project data, task information, comments, file uploads, time tracking data, and communication with team members
• Contact Us: Correspondence, feedback, support requests, and any other information you choose to provide
• Subscribe to Our Services: Billing information, payment card details (processed securely through third-party payment processors), and billing address

2.2 Information Automatically Collected

When you access our Services, we automatically collect certain information, including:

• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information
• Usage Information: Pages viewed, features used, time spent on pages, navigation paths, and interaction with our Services
• Location Information: General geographic location based on IP address
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar tracking technologies (see our Cookie Policy for details)

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Single sign-on services (e.g., Google, Microsoft, GitHub)
• Integration partners and connected applications
• Public databases and data enrichment services
• Marketing and analytics providers

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain Services: To operate, maintain, and improve our platform, process transactions, and deliver the features you request
• User Support: To respond to your inquiries, provide customer support, and troubleshoot technical issues
• Personalization: To customize your experience, recommend features, and provide relevant content
• Communication: To send you service updates, security alerts, administrative messages, and marketing communications (with your consent where required)
• Analytics and Improvement: To analyze usage patterns, monitor service performance, and develop new features
• Security: To detect, prevent, and address fraud, security issues, and technical problems
• Legal Compliance: To comply with legal obligations, enforce our terms, and protect our rights and those of our users
• Business Operations: To facilitate mergers, acquisitions, or asset sales, subject to confidentiality obligations

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), UK, or Switzerland, we process your personal information based on the following legal grounds:

• Contract Performance: Processing necessary to provide our Services and fulfill our contractual obligations
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our Services, security, and fraud prevention
• Consent: Processing based on your explicit consent, which you may withdraw at any time
• Legal Obligation: Processing necessary to comply with applicable laws and regulations

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

5.1 With Your Consent

We share information when you explicitly authorize us to do so, such as when connecting third-party integrations.

5.2 Service Providers

We share information with trusted third-party service providers who assist us in operating our Services, including:

• Cloud infrastructure providers (e.g., AWS, Google Cloud)
• Payment processors and billing services
• Analytics and monitoring services
• Customer support and communication platforms
• Email delivery and marketing automation services

5.3 Business Transfers

In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business, user information may be transferred to the acquiring entity.

5.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, government investigations).

5.5 Protection of Rights

We may disclose information when we believe it is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to government requests.

6. Data Retention

We retain your personal information for as long as necessary to provide our Services and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specifically:

• Active Accounts: We retain your account information and project data for as long as your account is active
• Closed Accounts: After account deletion, we retain certain information for up to 90 days for account recovery purposes, after which it is permanently deleted
• Backup Systems: Data may persist in backup systems for up to 90 days after deletion from production systems
• Legal Requirements: We may retain information longer when required by law or to defend against legal claims
• Aggregated Data: We may retain anonymized, aggregated data indefinitely for analytical purposes

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection and security
• Incident response and breach notification procedures
• Regular backups and disaster recovery planning

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

8.1 Access and Portability

You have the right to request access to your personal information and receive a copy of your data in a portable format.

8.2 Correction

You have the right to request correction of inaccurate or incomplete personal information.

8.3 Deletion

You have the right to request deletion of your personal information, subject to certain legal exceptions.

8.4 Restriction and Objection

You have the right to restrict or object to certain processing of your personal information.

8.5 Withdraw Consent

Where we rely on consent for processing, you have the right to withdraw your consent at any time.

8.6 Opt-Out of Marketing

You may opt out of receiving marketing communications by following the unsubscribe link in our emails or updating your account preferences.

To exercise any of these rights, please contact us at privacy@akanban.com. We will respond to your request within 30 days.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

When we transfer personal information from the EEA, UK, or Switzerland to other countries, we use appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection standards
• Binding Corporate Rules for intra-group transfers

10. Children's Privacy

Our Services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to remove that information from our servers.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your use of our Services. For detailed information about the cookies we use and your choices regarding cookies, please see our Cookie Policy.

12. Third-Party Links and Integrations

Our Services may contain links to third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.

When you use integrations or connect third-party services to your Akanban account, those third parties may collect information about you. Their use of that information is governed by their own privacy policies.

13. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to request information about the personal information we collect, use, and disclose
• Right to Delete: You have the right to request deletion of your personal information
• Right to Opt-Out: You have the right to opt out of the sale of your personal information (we do not sell personal information)
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA rights

To exercise these rights, please contact us at privacy@akanban.com or call us at 1-800-AKANBAN.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on our website
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (for material changes)
• Displaying a prominent notice within our Services

Your continued use of our Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.

15. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our data protection practices and ensure compliance with applicable privacy laws. You may contact our DPO at:

Email: dpo@akanban.com
Mail: Data Protection Officer, Akanban Inc., 123 Tech Street, San Francisco, CA 94105, USA