Kordano1. Who we are and the scope of this policy
Kordano LLC, a Wyoming limited liability company, United States. Mailing address: 30 N Gould St #25588, Sheridan, WY 82801, USA. Contact: [email protected]. This policy covers personal information handled for our website and Kordano Time web, desktop and mobile services. Send privacy questions and requests to [email protected].
We determine the purposes of processing for website inquiries, account administration and our own business operations. For workforce information processed on a customer organization’s instructions, that organization generally acts as controller and Kordano as its processor or service provider, subject to applicable law and the customer agreement. Your workspace administrator can explain your organization’s settings and use of work records.
2. Information we process
The information involved depends on the features used, workspace settings, device permissions and information provided. It may include:
- Account and contact details: name, business email, account identifiers, authentication information and phone details where supplied.
- Organization and work records: membership, roles, groups, settings, projects, tasks, notes, tracked sessions and durations, manual/mobile/computer time, schedules, attendance, leave, approvals and payroll-reporting information where used.
- Configured work evidence: aggregate keyboard/mouse activity levels, application and website usage, screenshots and screen recordings where those features are enabled. Captures can contain information visible on a device, including information about other people. Meeting detection may use the fact that a supported meeting app is using the microphone; this is microphone-use status, not an audio recording.
- Permission-dependent mobile information, such as location or an image where a feature requests it and you grant the applicable permission.
- Subscription and billing information: contact details, subscription status, transaction references and payment confirmations. For a Paddle purchase, Paddle handles payment-method information under its own privacy policy.
- Support messages, waitlist entries, contact-form submissions and other correspondence, including referral or campaign information submitted with a waitlist entry when optional analytics was accepted.
- Technical and security information, such as IP address, device/browser information and diagnostic logs; optional website analytics where enabled with your consent.
3. How and why we use information
We use information to operate accounts and workspaces; deliver configured tracking and reporting features; process customer instructions; administer subscriptions; answer support and privacy requests; protect against fraud, abuse and security threats; diagnose problems; communicate service information; and meet legal obligations.
Where a lawful basis is required, we rely on the relevant contract, legal obligation, legitimate interests such as security/support, or consent where required. The customer organization is responsible for the lawful basis for its workforce processing. You may withdraw consent where processing relies on it, without affecting earlier lawful processing.
Kordano does not sell personal data.
4. Workspace access and workplace monitoring
Authorized workspace users can access work information according to roles, settings and permissions. Your organization selects the enabled tracking, evidence and reporting features and is responsible for applicable worker notices and lawful use.
Do not enter unnecessary sensitive information in project notes or support messages. Device permissions and workspace privacy controls may limit what a feature collects; changing a permission can prevent the related feature from working. Account deletion does not automatically erase employer-controlled records of work.
5. Providers and sharing
Our primary service hosting is with Netcup in Germany. The marketing website uses Cloudflare for delivery/security, Resend for email delivery and Google Analytics for optional website measurement. A provider may process information needed for its role under its own service arrangements. Germany hosting does not mean every email, analytics or payment provider processes all information only in Germany.
For a transaction processed by Paddle, Paddle acts as merchant of record and handles transaction information under its Privacy Notice. Kordano receives information needed to supply and support the purchased service.
We may also disclose relevant information to comply with a lawful request, protect lawful rights or service security, or support a corporate transaction subject to applicable protections. Any international processing remains subject to applicable data-protection requirements. We do not claim a particular certification or exclusive worldwide data-residency guarantee.
6. Customer-managed media storage
Where your organization connects its own Amazon S3 or Cloudflare R2 bucket for screenshots or recordings, media in that bucket is subject to its configuration and control. Kordano may still process metadata and other information needed to operate the service.
Your organization is responsible for its bucket’s permissions, retention and deletion, including deleting media it wishes to remove. Customer-managed storage does not mean that no information is processed in Kordano systems.
7. Cookies, browser storage and analytics
Necessary session and security technologies help the service function. On the marketing website, optional Google Analytics and persistent first-touch attribution are enabled only after you accept analytics. You can reject optional analytics and still use the website.
Use to change your choice. Your preference is saved in browser storage for up to 180 days so we can respect it on later visits. Rejecting or withdrawing consent prevents further optional analytics from this browser and removes the first-touch attribution record stored in this browser. Referral information already submitted with a waitlist entry is stored separately with that submission; changing the browser preference does not erase it from our server records. To request deletion of submitted information, email [email protected]. Browser controls can also manage or remove cookies.
When enabled, analytics and first-touch attribution may include pages viewed, referring source, campaign tags and browser/device information. Avoid placing confidential information in marketing URLs. Read Google’s Privacy Policy for its processing information.
8. Retention and the end of a paid subscription
We keep information for the relevant service purpose, customer instructions and applicable legal requirements. While a subscription is active, evidence retention may depend on workspace and storage settings.
When a paid subscription ends, we delete customer workspace data held by Kordano, including screenshots, recordings and copies in our backups, within one calendar month. This period starts when paid access ends, not when a cancellation request is first made. Export records you need before paid access ends.
We may retain minimal transaction, tax or other records that we are legally required to keep for the required period. These exceptions do not permit routine continued use of deleted workspace content. Paddle keeps its own transaction records under its separate legal obligations. Media held in your organization’s own bucket is subject to its deletion controls.
Website inquiries and correspondence are retained for the relevant request or business purpose and legal requirements. You can ask us to delete them, subject to any applicable exception. Subscription cancellation, deletion of a login and deletion of a workspace are different actions.
9. Security
We use technical and organizational measures to protect information, including HTTPS and access controls. No system guarantees absolute security. Contact us if you believe your account or information is at risk. This policy does not assert an unverified certification or guarantee.
10. Your rights and requests
Depending on applicable law, you may have rights to access, correct, delete or receive a copy of information; restrict or object to processing; withdraw consent; and complain to a relevant privacy authority. Send requests to [email protected]. We may verify identity and authority before responding.
For employer-controlled workspace records, we may coordinate with the organization responsible for that information. We respond within applicable legal time limits and explain any lawful limitation. A workspace review process does not remove statutory rights.
11. Children and changes
Kordano Time is a workplace service, not a service directed to children. Users and customer organizations must have the legal capacity and authorization required for their use. Contact us if you believe information has been collected unlawfully from a child.
We may update this policy as the service changes. We will show the effective date and give additional notice of material changes where required. This policy does not cover the independent practices of linked websites.
12. Contact
Kordano LLC, a Wyoming limited liability company, United States. Mailing address: 30 N Gould St #25588, Sheridan, WY 82801, USA. Contact: [email protected]. Related pages: Terms and Conditions and Refund and Cancellation Policy.
Buyer support: [email protected] · +1 205 270 5025.