Privacy

Last updated · 30 May 2026 · boilerplate v0.1

This page describes how Kausframe Ltd (referred to as "Kausframe", "we", or "us") collects and uses personal data through the marketing site at kausframe.com and the product at kausframe.io. It is written to comply with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR). Where it makes sense, we have tried to write it in plain English rather than legal English.

Who we are

Kausframe is operated by Kausframe Ltd, a private limited company registered in England and Wales (company number TBC). Our registered address is provided on request — please email hello@kausframe.com.

For data-protection enquiries, contact privacy@kausframe.com.

What we collect on the marketing site

The marketing site (kausframe.com) collects only what is necessary to operate the site and respond to enquiries. We do not run third-party trackers, advertising pixels, or profiling cookies.

• Essential preference (theme): we store your light / dark preference in browser localStorage under the key ks-theme. This stays on your device. Lawful basis: necessary for the requested service.
• Cloudflare Web Analytics: we use Cloudflare's privacy-respecting analytics. It is cookieless, does not track individuals across sites, and does not require consent under PECR because it does not access information stored on your device. Lawful basis: legitimate interest in understanding aggregate site use.
• Request-access form: if you submit the request-access form or email us, we receive your email address and any other information you choose to share. We use it to reply to you and to consider you for early product access. Lawful basis: consent (when you submitted the form) and legitimate interest. We do not add you to any marketing list without separate opt-in.

What we collect in the product

Once you sign in to the product at kausframe.io we process additional data necessary to deliver the service. The full list and lawful bases are documented inside the product and in any customer agreement. In summary:

• Account data — name, email, workspace membership
• Project content you upload — briefs, frames, comments, schedules, attachments
• Authentication state - session cookies scoped to kausframe.io
• Operational logs needed for security, debugging, and abuse prevention

Connected Google services

Where users connect their Google account or other Google services to Kausframe, we use authorised access only to support project workflows the user has explicitly chosen — such as importing files from Google Drive, linking references, or working with production documents the user selects. We do not access Google account data for any purpose other than the user-initiated workflow. Access tokens are scoped to the minimum permissions required and may be revoked at any time from the user's Google account at myaccount.google.com/permissions.

How we share data

We do not sell personal data. We share data only with service providers we use to operate Kausframe. As of writing:

• Cloudflare (US / global) — hosting, CDN, analytics, security
• Resend or similar transactional email — outbound product emails
• Stripe (US / UK) — payment processing if and when paid plans launch

Where these providers are outside the UK, transfers rely on standard contractual clauses or the UK extension to the EU adequacy framework.

Retention

We keep account and project data for as long as you have an active workspace, plus a short period for backups and dispute resolution. Marketing-site enquiries are kept for up to 24 months unless you ask us to delete them sooner.

Your rights

Under the UK GDPR you have the right to access, rectify, erase, and port your personal data, to object to processing, and to lodge a complaint with the Information Commissioner's Office (ico.org.uk). To exercise any of these rights, email privacy@kausframe.com.

Changes to this notice

We will update this page when our practices change. The "Last updated" line at the top is the canonical version date.