Privacy Policy

We collect the following types of information:

• Account Information: When you create an account, we collect your email address and optional name. If you choose a password, it is stored securely using bcrypt hashing.
• Authentication Data: We store session information and authentication tokens for secure access to your account.
• Google Integration: When using Google authentication, we collect basic profile information provided by Google.
• Access Management: We store information about allowed email addresses for spreadsheet access management.
• Usage Data (only with your consent): Which pages you open and which buttons you click, your browser, device type and approximate location (country or city), and, if you are signed in, your internal account ID. Details are in section 5.

We use the information we collect for the following purposes:

• To provide and maintain your account, including email verification and secure authentication.
• To manage access to Google Spreadsheets and control permissions for allowed users.
• To process and manage your subscription status and access rights.
• To communicate with you about your account, including verification emails and important updates.

We implement several security measures to protect your information:

• Password Security: All passwords are hashed using bcrypt before storage.
• Email Verification: We require email verification to ensure account security.
• Secure Authentication: We use NextAuth.js for secure session management and authentication.
• Database Security: Your data is stored in a secure PostgreSQL database with proper access controls.

You have the following rights regarding your personal information:

• Access and update your account information through your dashboard.
• Manage your allowed email addresses and access permissions.
• Update your credentials, including password and owner password.
• Withdraw your consent to analytics at any time via “Cookie settings” in the footer. This does not affect processing that happened before you withdrew.

We use the following third-party services:

• Google Services: We integrate with Google Sheets and Google Drive for spreadsheet access and management.
• Stripe: We use Stripe for processing subscription payments.
• PostHog: Product analytics, only with your consent (see section 5).
• Vercel: Hosts this website. Vercel Analytics and Speed Insights run only with your consent (see section 5).

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the "Last Updated" date will be revised accordingly.

If you have any questions about this Privacy Policy or your data, please contact us at support@kiartv.de.