Privacy policy
This policy describes how we process personal data when you use the Rakon Cloud platform. It is a practical summary for customers and visitors. For formal agreements with organizations (DPA), contact us at the address below.
Who we are
The data controller is Rakon Cloud (the provider’s full legal details are available on request at contact@rakon.cloud). For privacy questions, write to privacy@rakon.cloud.
What data we collect
We typically process: account data (name, email, password hash or OAuth identifiers), organization and membership data, technical logs needed to run and secure the service, and communications you send us (e.g. support). Application data you enter into products such as Flow is stored for your organization as described in the product.
How we use data
We use data to provide and improve the platform, authenticate users, bill where applicable, comply with law, and communicate with you about the service. We do not sell personal data.
Storage, security, and retention
We apply technical and organizational measures appropriate to the risk. Retention depends on the purpose: for example, account data is kept while your account exists; some logs may be kept for a limited period for security. You may request export or deletion subject to legal obligations.
Your rights
Depending on applicable law, you may have rights to access, rectify, delete, restrict, or object to processing, and to lodge a complaint with a supervisory authority. Contact us at privacy@rakon.cloud to exercise these rights.
Legal basis
We process data to perform the contract with you or your organization, to meet legal obligations (for example accounting and tax) and, based on legitimate interest, to keep the service secure. Data from the contact form is processed with your consent.
Processors
To run the service we use: a rented server and data storage (hosting), an email delivery service, Google (only if you sign in with a Google account) and an AI provider for the Flo assistant and AI features in Rakon Flow. Each processor receives only the data its part of the work needs. The exact list of processors and the countries where they process data is available on request at privacy@rakon.cloud.
Campaign measurement
When you reach the site through a link from an ad or campaign, the link carries source tags (utm parameters). We remember the first such tag in your session and count visits per day; the visit counts contain no IP address and no data about you. If you sign up or send an inquiry in the same session, we record the ad's source, medium, campaign, content and keyword, the page you landed on, the site you came from and the time of your first visit with the account or inquiry, so we know which campaigns really help. We use no external tracking scripts and no third-party cookies. We keep this data for 13 months and then delete it. The basis is our legitimate interest in measuring advertising; you can ask for this data to be deleted at the same address as for your other rights.
Changes
We may update this page when our practices change. The “last updated” date at the top reflects the latest revision.