Privacy Policy

1. Introduction

Kiraah, publisher of the kiraah platform, places great importance on the protection of your personal data. This Privacy Policy explains how we collect, use and protect your data.

We are committed to complying with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

2. Data controller

Data controller: Kiraah

Address: 12 RUE DE LA PART-DIEU, 69003 LYON

Phone: 04 28 29 09 31

Email: hello@kiraah.com

Data Protection Officer (DPO): dpo@kiraah.com

3. Data collected

We collect the following data:

3.1. Identification data

• First and last name
• Professional email address
• Phone number
• Role and company

3.2. Connection data

• IP address
• Connection logs
• Browser type
• Pages visited

3.3. Usage data

• Data entered in the applications
• Documents uploaded
• Settings and preferences
• Content, votes and attachments linked to feature requests when the user chooses to publish them in the cross-tenant roadmap

4. Purposes of processing

Your data is collected for the following purposes:

• Provision and management of kiraah services
• Management of your user account
• Technical support and assistance
• Billing and accounting management
• Improvement of our services
• Communication about our products and services (with your consent)
• Compliance with our legal obligations

5. Legal basis for processing

The processing of your data is based on:

• Performance of the service contract (provision of the platform)
• Your consent (marketing communications)
• Our legal obligations (billing, data retention)
• Our legitimate interest (service improvement, security)

6. Data recipients

Your data is accessible only to:

• Our authorised staff (least-privilege principle)
• Our technical processors (hosting, maintenance)
• Our payment service providers (for billing)
• Legal authorities upon judicial request
• Authorised users from other tenants and Kiraah product teams for feature requests published to the cross-tenant roadmap

We do not sell or rent your data to third parties.

Cross-tenant publication of feature requests is carried out only after explicit consent. Withdrawal of consent stops future publications but does not affect processing already performed on a valid legal basis.

7. Data transfers outside the EU

Your data is hosted exclusively in France. No transfer outside the European Union is carried out.

8. Retention period

We retain your data for:

• Account data: duration of the subscription + 1 year
• Billing data: 10 years (legal obligation)
• Connection logs: 1 year
• Marketing data: until consent is withdrawn

At the end of these periods, your data is deleted or anonymised.

9. Data security

We implement technical and organisational measures to protect your data:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Multi-factor authentication (MFA)
• Encrypted daily backups
• Strict access controls
• Monitoring and intrusion detection
• Regular security testing

For more information, see our Security & Compliance page.

10. Your rights

In accordance with the GDPR, you have the following rights:

• Right of access: obtain a copy of your data
• Right to rectification: correct inaccurate data
• Right to erasure: delete your data (subject to conditions)
• Right to restriction: limit the processing of your data
• Right to portability: retrieve your data in a standard format
• Right to object: object to the processing of your data
• Right to withdraw consent: at any time

To exercise your rights, contact our DPO at: dpo@kiraah.com.

You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

11. Cookies

We use cookies to improve your experience. You can manage your cookie preferences at any time.

Types of cookies used:

• Essential cookies (required for operation)
• Performance cookies (anonymised analytics)
• Preference cookies (remembering your choices)

12. Changes to the policy

We reserve the right to amend this Privacy Policy. Any material change will be notified to you by email.

13. Contact

If you have any question about this Privacy Policy or the exercise of your rights:

DPO email: dpo@kiraah.com

General email: hello@kiraah.com

Phone: 04 28 29 09 31

Post: 12 RUE DE LA PART-DIEU, 69003 LYON

Contact form: Contact us