Privacy Policy

Who we are

TO CONFIRM (legal company name) ("we", "us") operates Klonn.it, a project and portfolio governance platform. We apply the same data-protection standard - modeled on the EU General Data Protection Regulation (GDPR) - to every user of this site and application, regardless of where you or your organization are located.

What we collect

• Contact form submissions: name, email address, company, and the message you send us.
• Application accounts (for customers): name, email address, and the project/portfolio data you and your organization enter into the platform.
• AI assistant inputs (for customers who enable it): the project data and instructions you send to the AI assistant, in order to generate proposed updates - see "Who we share it with" below.
• Technical data: standard server logs (IP address, browser user agent) for security and abuse prevention.

Why we collect it, and on what basis

• To respond to contact requests and provide the service you've asked about (legitimate interest / pre-contractual steps).
• To operate, secure, and improve the application for existing customers, including generating AI assistant proposals when that feature is enabled (performance of contract).
• To meet legal and accounting obligations (legal obligation).

Who we share it with

We keep the list of parties who can see your data as short as possible, and every one of them is there to help us run the service - never to sell or repurpose it:

• AI providers (Anthropic and/or OpenAI): if and only if your organization enables the AI assistant, the project data and notes you submit to it are sent to whichever provider(s) your organization has configured for its own environment, solely to generate the proposed updates you asked for. Nothing is sent to an AI provider unless the assistant is actively used. These providers are based outside the EU/EEA; transfers to them rely on their own GDPR-standard safeguards (such as Standard Contractual Clauses).
• Hosting & email delivery (Hostinger): our infrastructure host, and the SMTP provider used to deliver contact-form and account emails.
• We do not sell personal data, and we do not use advertising or tracking third parties - see the Cookies page.

How long we keep it

Contact form data is kept only as long as needed to respond to your request. Customer account and project data is kept for the duration of your organization's contract with us, plus any period required by applicable law afterward; exact retention periods are set out in that contract rather than fixed here, since they can vary by customer.

Your rights

You have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing, under the same GDPR-modeled standard regardless of your location. To exercise these rights, contact contact@klonn.it. If you believe your request hasn't been properly handled, you also have the right to lodge a complaint with your local data protection authority (in France, the CNIL).

Contact

Questions about this policy: contact@klonn.it.