Legal

During the registration process in Kaiten you specify email and other information about yourself.

Email is your login to the system. Also email allows us to inform you about important events related to the operation of the service.

All the other data that you specify in your profile, comments, cards and other forms for entering inside Kaiten is more necessary to you for communication with colleagues than for us for any actions.

It is also worth mentioning that if you exchange any documents with colleagues by uploading files to Kaiten cards, personal information (yours or other people) can also be stored there.

Where personal data stored

All the data you enter inside Kaiten is stored in databases that are located in the Europe on Amazon servers (https://aws.amazon.com).

We use several third-party services, where we transfer data from your profile: Intercom (https://intercom.com) and Wootric (https://wootric.com). These are well-known international services, trusted by tens of thousands of companies.

The other third-party services, which are involved in Kaiten, do not receive from us your personal data, but can have access to technical information: IP, browser version, etc., because Your browser interacts directly with them in the process of working with Kaiten. These services include: Heroku (https://heroku.com), Google Analytics (http://analytics.google.com), and others.

How we protect your data

We use a set of measures to protect not only your personal data, but also the data posted by your company as a whole:

• - minimization of employee access to data by replacing manual operations with automated ones;
• - use only a secure communication channel to exchange information with the user's browser (TLS);
• - internal regulations that prohibit Kaiten employees from working with your company's data without obtaining prior approval from the owner of your account in Kaiten;
• - scanning the system for programs that are looking for common vulnerabilities;
• - and others...

We undertake to notify you of any incidents that we ourselves have discovered, as a result of which your personal data may be removed from our control.

How we access your data

There are several reasons for accessing your personal data:

• You made request that contains personal data inside or directly allows us to work with your data inside Kaiten;
• A technical process that requires us to operate with data, like database maintenance or data migration.

How you can manage your data

In case you want to receive more detailed explanations for the storage and operations with your personal data, please write us a request to the email address personaldata@kaiten.io

We undertake to respond to your request within 2 weeks and carry out all necessary procedures described in GDPR (https://www.eugdpr.org).