Privacy Policy

1. Controller

Kalonis GmbH
Berliner Allee 158
13088 Berlin
Germany
Email: [datenschutz@kalonis.de]

2. Data We Collect

We collect and process the following personal data:

  • Account data: email address, name (upon registration)
  • Project data: SMTP/IMAP credentials (stored encrypted), support email address
  • Ticket data: email addresses and names of end customers, message contents, attachments
  • Usage data: IP address, browser type, time of access (server logs)
  • Payment data: processed exclusively by our payment provider Paddle. We do not store credit card details.

3. Purposes of Processing

  • Provision and operation of the KDesk platform
  • Authentication and account management
  • Retrieval and sending of emails on behalf of the user
  • Invoicing and payment processing (via Paddle)
  • Communication regarding the Service (e.g. confirmation emails, invitations)

4. Legal Basis

Processing is based on Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in providing the Service).

5. Data Processors

We use the following service providers:

  • Supabase Inc. — database and authentication (servers in Frankfurt, EU)
  • Vercel Inc. — hosting of the web application
  • Paddle.com Market Limited — payment processing (Merchant of Record)

Data processing agreements pursuant to Art. 28 GDPR are in place with all service providers.

6. Retention Period

Account data is stored for as long as the account exists. After account deletion, all personal data is deleted within 30 days. Invoicing data is retained for up to 10 years in accordance with commercial and tax law retention obligations.

7. Your Rights

You have the right to:

  • Access your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Lodge a complaint with a supervisory authority

8. Cookies

KDesk uses only technically necessary cookies for authentication (session cookies). No tracking or advertising cookies are used.

9. Contact

For privacy-related questions, please contact:
[datenschutz@kalonis.de]

Last updated: April 2026