Privacy policy

Data collected

We collect only the data strictly necessary for our services to work.

Joining the waiting list

• Email address
• Date you signed up
• Proof of your consent (ticked box)

Creating an account

Creating an account collects:

• Email address
• Password, stored securely as a hash, or sign-in through a Google or Microsoft account
• Information about your company: name and identification number (SIREN/SIRET, EU VAT or Companies House), verified against public registers — Sirene, VIES, Companies House
• Display language

Using the service

• The data you enter: registers, deadlines, notes, templates
• The contact details — name, email address — of the recipients you designate to receive reminders; you warrant that you have informed those people
• If you connect a cloud space, Google or Microsoft — this is optional: the authorisation tokens needed to file your supporting documents in your own Drive or OneDrive and to sync with your calendar. Your documents stay with you; Kimori keeps only the reference and the date. These authorisations can be revoked at any time.
• If you subscribe to a paid plan: the billing data needed for the subscription. Your card number is never passed to Kimori — it is entered directly with Stripe, our payment provider.

Measuring use

Use of the service is measured in order to fix and improve it: pages viewed, actions taken, errors encountered, and recordings of how sessions unfold. This measurement is carried out with PostHog, whose data is hosted in the European Union.

Session recordings are fully masked: displayed text and typed input are replaced by neutral blocks before anything is sent. Deadline labels, document names, custom fields and recipient contact details are excluded by design. IP addresses are not retained.

You may object at any time, without giving a reason and without any effect on your access to the service, from your account preferences. On the public site, the same measurement requires your prior consent — see the “Cookie settings” page.

Purposes of processing

Waiting list

To tell you when Kimori launches, at the stated pace: at most once a month.

Account and service

To provide the service: keeping your register, sending the reminders you have scheduled to the recipients you have designated, and running the integrations you have enabled.

Billing

To manage your subscription: signing up, renewal, invoices, and the accounting obligations that go with them.

Legal basis

• Consent: voluntarily joining the waiting list, voluntarily connecting a Google or Microsoft cloud space, analytics on the public site.
• Performance of the contract, within the meaning of the terms of use: account data, data entered in the service, billing.
• Legitimate interest: securing the service and measuring its use, which you may object to.
• Legal obligation: keeping invoices for the period required by law.

Data about your third parties

When you record data about third parties in Kimori — employees, contractors, reminder recipients — you are the data controller for it: you are the one who decides to collect it, and you warrant that you have informed the people concerned. Kimori then acts only as a processor, on your behalf and on your instructions.

Recipients and processors

Your data is neither sold nor transferred. It is passed only to the technical providers strictly required:

• OVH (France): hosting
• Mailjet (European Union): sending reminder and information emails
• Google: only if you sign in with a Google account or enable the Drive and Calendar integrations
• Microsoft: only if you sign in with a Microsoft account or enable the OneDrive and Outlook integrations
• Stripe: payment and billing for paid plans
• PostHog (European Union): usage measurement

Retention period

Waiting list

Your data is kept until Kimori officially launches or until you unsubscribe, which you can do at any time in one click.

Account

Your data is kept for as long as your account is active. You can delete your entire account and all of your organisation's data at any time, directly from the service; deletion is permanent.

Billing

Invoices are kept for ten years from their issue date, a period imposed by accounting obligations. They therefore survive the deletion of the account, reduced to what the law requires.

Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request the deletion of your data
• Right to object: object to the processing of your data
• Right to portability: receive your data in a structured format

The last two require no message to us: the service exports everything you have entered into an archive of files at any time, and permanently deletes your account at the press of a button.

Contact

For any question or request about your data: contact@kimoriapp.com

Complaint

If you consider that your rights are not being respected, you may lodge a complaint with the CNIL: cnil.fr