Privacy Policy

1. Introduction

KaamFlow ("we," "our," or "us") provides project management software and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

This Privacy Policy is effective as of June 8, 2026. By using KaamFlow, you consent to the data practices described in this policy.

2. Information We Collect

Account Information

• Name, email address, and profile details you provide during registration
• Workspace information and organizational structure
• Preferences and settings for customizing your KaamFlow experience

User Content

• Projects, tasks, boards, files, and documents you create or upload
• Comments, notes, activity logs, and communications within your workspace
• Project timelines, deadlines, and workflow configurations

Technical Information

• Browser type and version
• Device information and operating system
• IP address and approximate location (city/country level only)

Usage Information

• How you interact with our services, features, and interfaces
• Feature usage patterns and service performance data
• Error reports and crash logs

3. How We Use Information

We use your information to provide, improve, and protect our services:

• Create and manage accounts – To register you and provide access to our Service
• Provide services – To deliver features you request and maintain core functionality
• Improve platform – To analyze usage patterns and develop new features
• Respond to support requests – To assist with technical issues and questions
• Send service notifications – To share important updates, security alerts, and billing information
• Prevent abuse – To detect and prevent fraudulent or malicious activity

4. Payment Information

We do not store full payment card information on our servers. All payment processing is handled by our secure third-party payment service providers.

These payment processors are certified under PCI-DSS Level 1, the highest level of security. Your payment information is transmitted directly to them, and we only receive confirmation of payment status and basic billing details (such as last four digits of your card, expiration date, and billing address).

Depending on your location and currency, we may use one or more of the following types of payment processors:

• Credit and debit card processors
• Digital wallet providers
• Bank transfer services

For subscription billing, your payment method will be charged automatically at the start of each billing period. You can update your payment method or cancel your subscription at any time from your account settings.

5. Cookies and Analytics

We use cookies and similar tracking technologies to enhance your experience:

• Essential cookies – Required for authentication, security, and core functionality
• Preference cookies – Remember your settings and preferences
• Analytics cookies – Help us understand how users interact with our Service

We use Google Analytics to collect anonymous usage data. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

You can control cookie settings through your browser preferences. However, disabling essential cookies may affect Service functionality.

6. How We Share Information

We do not sell your personal information. We only share information in these limited circumstances:

• Hosting providers – Secure cloud infrastructure providers (AWS, Google Cloud)
• Analytics providers – To understand usage patterns (anonymized)
• Payment processors – Secure third-party payment service providers for subscription billing
• Legal authorities – When required by law, regulation, or legal process
• Business transfers – In connection with a merger, acquisition, or sale of assets
• With your consent – When you explicitly authorize sharing

All third-party service providers undergo vetting and are contractually bound to protect your data.

7. Data Retention

We retain your information as follows:

• Active accounts – Information is retained while your account is active
• After cancellation – Your account will downgrade to Free plan; data is retained for 90 days
• After deletion request – We will delete your data within 30 days of your verified request
• Backups – Archived data may persist in secure backups for up to 90 days after deletion

You may export your data at any time before canceling or requesting deletion.

8. Data Security

We implement reasonable security measures to protect your information:

• Encryption – Data encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access controls – Strict authentication and role-based permissions
• Monitoring – Regular security audits and intrusion detection
• Employee access – Limited to personnel who need it to provide the Service

No system is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access – Request a copy of your data
• Correction – Update inaccurate information
• Deletion – Request permanent deletion of your account and associated data
• Portability – Obtain a copy of your data in a machine-readable format
• Opt-out – Unsubscribe from marketing communications
• Restriction – Limit how we process your information in certain circumstances

To exercise these rights, contact us at privacy@kaamflow.com. We respond to all legitimate requests within 30 days.

10. International Users

KaamFlow is accessible globally. Your information may be processed and stored on servers located in different jurisdictions, including Pakistan, the United States, and the European Union.

By using our Service, you consent to the transfer of your information to countries with data protection laws that may differ from your country of residence. We take steps to ensure adequate protection for your information regardless of where it is processed.

11. Children's Privacy

Our Service is not intended for children under the age of 13 (or the local age of digital consent in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. When we make material changes, we will:

• Post the updated policy on this page with a new "last updated" date
• Notify registered users via email or in-app notification
• Provide advance notice for significant changes affecting your rights

We encourage you to review this policy periodically to stay informed about how we protect your information.