Privacy Policy

This Privacy Policy explains how Kanbark (“we,” “us”) collects, uses, and protects your information when you use the website at kanbark.com and related services (the “Service”). By using the Service, you agree to this Policy. It should be read together with our Terms of Service.

1. Information We Collect

Account information

When you create an account we collect your name and email address. Kanbark uses passwordless “magic link” sign-in, so we do not collect or store account passwords. If you profile yourself further (for example, a profile picture or color), we store that too.

Content you create

We store the content you create in the Service, such as groups, projects, boards, cards, notes, lists, mind maps, moodboards, comments, attachments, and time-tracking entries, along with related metadata.

Payment information

If you subscribe to a paid plan, payments are processed by Stripe. We do not receive or store your full card number; we store limited billing metadata (such as your subscription status and plan) needed to provide the Service.

Usage and technical data

To operate and secure the Service we process technical data such as IP addresses, request and audit logs, sign-in records, and rate-limiting counters.

2. How We Use Your Information

• to provide, maintain, and improve the Service;
• to authenticate you and send account and transactional emails (such as magic links and billing notices);
• to process subscriptions and payments;
• to enforce usage limits, prevent abuse, and secure the Service;
• to respond to support requests;
• to comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Third-Party Services

We rely on a small set of trusted providers to run the Service. Each processes data only as needed to provide its function and under its own terms:

• Vercel — application hosting and delivery.
• Supabase — managed PostgreSQL database.
• Cloudflare R2 — storage for uploaded files and attachments.
• Stripe — payment processing and subscription billing.
• Resend — transactional email delivery.
• Upstash — rate limiting, caching, and background job processing.
• Cloudflare Turnstile — bot and abuse protection on sign-in.
• Giphy — optional GIF search within the app.

4. Data Security and Encryption

We use a range of measures to protect your information, including:

• AES-256-GCM encryption of sensitive fields at rest;
• encryption in transit using HTTPS/TLS;
• passwordless authentication with tokens stored in HTTP-only cookies;
• rate limiting, input validation, and security headers.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In addition, because some data is encrypted at rest, there are circumstances — such as key loss, corruption, or a failed restore — in which affected data may be permanently unrecoverable. For that reason, and as described in our Terms of Service, you are responsible for keeping your own backups of important data, and we are not liable for any loss of or inability to restore your data. We recommend that you export and back up important content regularly.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal data within a reasonable period (generally within 30 days), except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

6. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You can update much of your information directly in your account settings, export your data, or delete your account at any time. To make a request or ask a question, contact us at support@kanbark.com.

7. Cookies

We use essential, HTTP-only cookies to keep you signed in and to operate the Service. We do not use third-party advertising or cross-site tracking cookies.

8. Children’s Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If we learn that we have collected such data, we will delete it.

9. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above. Your continued use of the Service after an update means you accept the revised Policy.

10. Contact

If you have questions about this Policy or your data, contact us at support@kanbark.com.