If you are a Kumbu customer or subscriber, or just visiting our website, this policy applies to you. It applies to our website, web applications, browser extension and mobile apps.
If you are a registered Kumbu customer or a visitor to our website we act as the data controller of personal data. This means we determine how and why your data are processed.
From the first moment you interact with Kumbu, we are collecting data. Sometimes you provide us with data, sometimes data about you is collected automatically.
Here’s when and how we do this:
Data protection law means that we can only use your data for certain reasons and where we have a legal basis to do so. Here are the reasons for which we process your data:
You can exercise your rights by sending us an email at email@example.com .
This includes the right to ask us supplementary information about:
We will provide you with the information within one month of your request, unless doing so would adversely affect the rights and freedoms of other (e.g. another person’s confidentiality or intellectual property rights). We’ll tell you if we can’t meet your request for that reason.
You can object to us using your data for profiling you or making automated decisions about you
We may use your data to determine whether we should let you know information that might be relevant to you (for example, tailoring emails to you based on your behaviour). Otherwise, the only circumstances in which we will do this is to provide the Kumbu service to you.
You have the right to port your data to another service
We will give you a copy of your data in CSV or JSON so that you can provide it to another service. If you ask us and it is technically possible, we will help transfer the data to the other service with you.
You have the right to be ‘forgotten’ by us
You can do this by asking us to erase any personal data we hold about you, if it is no longer necessary for us to hold the data for purposes of your use of Kumbu.
You have the right to lodge a complaint regarding our use of your data
Please tell us first, so we have a chance to address your concerns. If we fail in this, you can address any complaint to the French Data Protection Agency here
We have physical, electronic, and managerial procedures to safeguard and secure the information we collect. We use encryption throughout Kumbu to make sure only you can access your data.
And please remember:
The personal data we collect is processed at our offices in Paris and Bordeaux and in any data processing facilities operated by the third parties identified below.
As long as you have a Kumbu account, we keep PII such as your email adress, as well as your memories of course. If you ask us to delete your Kumbu account, we delete all your personal information within a week (7 days). Personal information residing in our backups may take up to a year to be rotated out of backups.
Tech businesses often use third parties to help them host their application, communicate with customers, power their emails etc. We partner with third parties who we believe are the best in their field at what they do.
Here are the details of our main third-party service providers, and what data they collect or we share with them, where they store the data and why they need it.
Well done for getting to the bottom of this policy. We have designed it with inspiration from other beautiful privacy policies to be as transparent, useful and engaging as possible and we would love to hear your feedback on how we can make it even better - please contact us at firstname.lastname@example.org
Please don’t make this the last time you read it as we will post any changes on this page - significant changes will of course be notified to you by email.
Previous Versions of this Policy: