Privacy Policy

Korrel ("we", "our", or "us") is the controller of the personal information described in this policy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our marketing website (the "Site") and use our project management platform (the "Platform").

This policy applies to Site visitors, people who contact us, and Platform account users.

When you use our contact form or sign up for Korrel, we collect the information you provide, such as your name, email address, organisation name, and message. We use this information to respond to your enquiry, send product updates, and help you get started with Korrel.

When you create an account on the Platform, we collect account information including your name, email address, organisation details, and any content you create or upload while using Korrel.

We use Umami, a privacy-focused analytics tool, to understand how visitors interact with our Site. Umami is configured to collect anonymised usage data and does not use advertising cookies or track you across other websites. It may store a small identifier in your browser's local storage or memory to distinguish unique visits.

We do not use Google Analytics, Facebook pixels, or other advertising trackers.

We do not use traditional advertising or tracking cookies on the marketing Site.

When you log in to the Platform, we use essential session cookies through Better Auth to keep you authenticated. These are strictly necessary for the service to function.

Our contact form and signup form use Cloudflare Turnstile to protect against spam and abuse. Turnstile may set security cookies or tokens to verify that requests come from humans rather than bots.

We process account and service data to provide the Platform and meet our contract with you. We process enquiry, security, and service-improvement data for our legitimate interests in operating and protecting Korrel. We process information when needed to meet a legal obligation.

We use consent where the law requires it, including for optional product updates. You can withdraw consent at any time. This does not affect processing that took place before withdrawal.

We keep personal information only for as long as needed for the purpose for which we collected it, including legal, accounting, security, and dispute requirements. Retention periods depend on the type of information and our relationship with you.

We delete or anonymise information when we no longer need it. You can ask us about the retention period that applies to your information.

We do not sell your personal information. We may share information with a limited number of service providers who help us run Korrel, such as hosting, analytics, email, and security services. These providers are only permitted to process your data for the purposes we specify.

We may disclose information if required by law, to protect our rights, or to respond to a valid legal request.

Some providers may process information outside the UK. Where required, we use an applicable adequacy decision or approved contractual safeguards for these transfers.

We use reasonable technical and organisational measures to protect your personal information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Under UK data protection law, you can ask to access, correct, delete, or restrict your personal information. You can also object to some processing, ask for portable data, and withdraw consent where we rely on it. Some rights have legal limits.

To exercise your rights, contact us at [email protected]. You can also complain to the Information Commissioner's Office at ico.org.uk. Please contact us first so that we can try to resolve your concern.

Korrel is not intended for individuals under the age of 16. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised effective date. Continued use of the Site or Platform after changes indicates your acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, contact us at [email protected].