Privacy Policy

Welcome to Kragzam. We respect your privacy and are committed to protecting your personal data. This policy describes how we collect, use, and handle your personal data when you visit kragzam.com, sign up for an account, or use Kragzam once you are signed in.

We may collect the following data:

• Account data: your email address, your name, and the credentials you use to sign in, provided when you create an account at app.kragzam.com.
• Sign-up source: where you came from when you created your account (campaign tags in the link, the site that referred you, and the page you landed on), and your optional answer to “How did you hear about Kragzam?”. Campaign tags, the referring site (its domain only) and the landing page travel on sign-up links from kragzam.com and are saved when you sign up, whether or not you accept analytics cookies.
• Technical data: aggregated, cookieless analytics from Cloudflare Web Analytics, and PostHog counts of the pages you visit and the links that brought you. A random visitor ID is stored in a cookie only if you accept analytics on kragzam.com (see the Analytics sections below).
• Product usage data: events about what you do once you are signed in, tied to your user ID (see Product usage data below).

When you create an account, we collect your email address, your name, and the credentials you choose, and we email you a code to verify the address. This information is used to create and run your account. We do not sell this data to third parties, we do not use it for advertising, and we do not combine it with data from any other source. That commitment covers every kind of data described in this policy, not only what you enter at sign-up.

The sign-up form is protected by Cloudflare Turnstile, a privacy-preserving CAPTCHA alternative that does not set tracking cookies or build a behavioral profile.

We use Cloudflare Web Analytics to understand aggregate traffic patterns on kragzam.com. Cloudflare Web Analytics is cookieless: it does not set any cookies, does not fingerprint individual visitors, and does not build cross-site behavioral profiles. The data we receive is aggregated and anonymous: page views, referrers, country-level geography, and device type. It runs whatever you choose in the banner. We do not use Google Analytics or any advertising tracker on this site.

We use PostHog Cloud (EU region) for product analytics. On kragzam.com, if you accept in the banner, it recognises your visit with the cookies listed in our Cookie Policy and connects it to your sign-up. If you decline, or your browser sends Do Not Track or Global Privacy Control, PostHog sets no analytics cookie (only your choice is stored) and still counts the visit anonymously, without recognising you from one day to the next.

app.kragzam.com shows its own consent banner. The choice is stored in the kz_ph_consent cookie and shared between the two sites, so a choice made on either one applies to both. Signing in does not turn analytics on. Viewer interactions on a shared document are reported to analytics only when the document owner has switched engagement tracking on.

When something breaks on app.kragzam.com, it sends an error report to PostHog (EU region) so we can fix it. A report holds the error type, a cleaned-up error message, where in our code it happened, the page address without its query string, and your browser and device type. We remove email addresses and quoted text from the message and the parameters from any link in it, and we do not intentionally include document content. PostHog receives your IP address to deliver the report. If you declined analytics, reports are sent without cookies and are not linked to your account.

Once you are signed in to Kragzam, we record which plans and packs you express interest in, and where in the product you did it. That is the whole record: an account we already hold, plus a plan or pack code from a fixed list. We ask for nothing extra, no field is free text, and a visitor who is not signed in cannot produce one of these records.

We also record product usage events in PostHog against your user ID, such as signing up, publishing a template, generating or sharing a document, and starting a subscription. Events carry identifiers, counts, and categories only. They never include your email address, your name, document content, variable values, or recipient details.

We use this data to decide what to build next, how to price Kragzam, and which channels bring people who use it. These are product decisions, not advertising. Our lawful basis is our legitimate interest in operating and improving the service. If you declined analytics on either site, the app sets no analytics cookies and does not attach your browser activity to your account. Events our servers record about actions on your account, such as publishing a template, do not depend on a cookie and continue. To object, contact us at the address below. The commitment made under “Account sign-up” above applies to this data in full.

We use your data only for the following purposes:

• To create your account, verify your email address, and run the service for you.
• To decide what to build next and how to price Kragzam, using the plan and pack interest recorded in the product.
• To monitor site traffic and performance, and to see which pages and links bring people to Kragzam (Cloudflare Web Analytics and PostHog).
• To understand which steps people complete in the product and which sign-up sources lead to active accounts.
• To detect and prevent abuse of the sign-up form (Turnstile).

We implement appropriate technical measures to protect your data from unauthorised access, loss, or disclosure. Account data is stored in a controlled environment accessible only to the founding team. We will update this section when a formal data processor is in place.

Depending on your jurisdiction, you may have rights including access, rectification, erasure, and data portability. To exercise these rights, or to close your account, contact us at hello@kragzam.com.

When you delete your account, we delete your analytics profile and its events from PostHog within 30 days.

We use Cloudflare services (Pages hosting, cookieless Web Analytics, and Turnstile) and PostHog Cloud in the EU region for product analytics. Cloudflare's and PostHog's own privacy policies govern the data they process on our behalf. We do not share your personal data with any other third party for their own marketing or commercial purposes.

When you buy a paid plan, Paddle.com processes the payment as our Merchant of Record. Paddle collects your billing details, such as your name, email address, country, and payment method, under its own privacy policy. We never see or store your full card details. Paddle shares with us what we need to run your subscription, such as your plan, billing status, and country.

We may update this policy as the product evolves. Material changes will be noted at the top of this page with a revised date.

Questions about this policy? Email hello@kragzam.com.