K2S Apps ("we", "our", or "us") operates the K2S ProjectOS platform. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our service.
1. Information We Collect
Account Information
When your organization subscribes to K2S ProjectOS, we collect information necessary to create and manage your tenant workspace:
- Full name and email address
- Organization name and subdomain preference
- Role within the organization (Admin, Consultant, or Client)
- Billing contact details
Usage Data
We automatically collect certain information when you interact with our platform:
- Timesheet entries, project assignments, and approval actions
- Login timestamps and session duration
- Browser type, device information, and IP address
- Pages visited and features used within the application
Billing Information
Payment processing is handled by our third-party payment provider (Razorpay). We do not store full credit card numbers or bank account details on our servers. We receive and store only transaction confirmations and subscription status.
2. How We Use Your Information
We use the information we collect to:
- Provide the Service: Operate your tenant workspace, manage user accounts, process timesheets, and generate reports.
- Process Payments: Manage subscriptions, generate invoices, and handle billing inquiries.
- Improve the Platform: Analyze usage patterns to enhance features, performance, and user experience.
- Communicate: Send service-related notifications, respond to support requests, and provide updates about your account.
- Ensure Security: Detect and prevent unauthorized access, fraud, and other security threats.
3. Data Storage & Tenant Isolation
K2S ProjectOS is built with a multi-tenant architecture where each organization receives a fully isolated database. This means:
- Your organization's data is stored in a dedicated database instance, separate from other tenants.
- No other organization can access, view, or interact with your data.
- Each tenant operates on its own custom subdomain for additional access control.
- Data is stored on secure, encrypted servers with regular automated backups.
4. Data Sharing & Third Parties
We do not sell, trade, or rent your personal information. We share data only in the following circumstances:
- Payment Processing: Billing information is shared with Razorpay to process payments securely.
- Legal Obligations: We may disclose information if required by law, regulation, or legal process.
- Service Providers: We may use trusted third-party services for hosting, analytics, and email delivery, all bound by data processing agreements.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction with prior notice.
5. Cookies & Analytics
We use essential cookies to maintain your session and authentication state. These are strictly necessary for the platform to function. We may use analytics tools to understand how the platform is used. You can control cookie preferences through your browser settings.
6. Data Retention
We retain your data for as long as your organization maintains an active subscription. Upon account termination:
- Your data will be retained for 30 days to allow for account recovery.
- After 30 days, all tenant data is permanently deleted from our servers.
- Billing records may be retained for up to 7 years as required by applicable tax and accounting laws.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data, subject to legal retention requirements.
- Export: Request your data in a portable, machine-readable format.
- Objection: Object to certain types of data processing.
To exercise any of these rights, contact us at [email protected].
8. Children's Privacy
K2S ProjectOS is a business-to-business platform and is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. For material changes, we will notify active subscribers via email.
If you have questions about this Privacy Policy or our data practices, please contact us:
Email: [email protected]