Privacy Policy
Draft: this text is not yet in force.
Controller
The controller for this website, for orders and for billing is Maintenance Data Services OÜ, registry code 14861504, Sepapaja tn 6, 15551 Tallinn, Estonia. For the project content that customers put into the Kroons web app, MDS acts as processor.
Data we collect on this website
When you request an invoice or start a Mini project we receive your company name, VAT ID, name, work email address, country, project name and prefix (for an extension, the ID of the project to extend instead), and an optional PO number and message. When you buy a project online, the details you enter before the checkout (company name, admin email, project name, project prefix and an optional VAT ID) are sent to our server when you continue to payment; our server passes them to Stripe with your order, and we use them to create your project and send the project admin invitation. Orders paid through Stripe are recorded with the Stripe order reference. We store your IP address only as a salted hash for abuse protection.
Processors and recipients
Stripe (payment provider and merchant of record for online payments), our hosting provider, and our email provider. The plugin download and this site do not use analytics or advertising services.
Purposes and legal bases
Completed by counsel before launch.
Retention
Locked project data is permanently deleted 90 days after the lock (15 months after expiry); we email the project admin 30 days before the deletion. Order and invoice records are kept for the period required by Estonian accounting law, to be confirmed by our accountant.
Cookies and checkout
This website itself sets no cookies and uses no analytics. When you continue to payment you are sent to a Stripe-hosted Checkout page; Stripe sets its cookies there, on stripe.com, not on kroons.co. Payment details are entered only with Stripe; they never reach this website.
The plugin
No telemetry is sent from the plugin. Model files are never uploaded. Saved logins are encrypted on your machine and connections use https only.
Your rights
Completed by counsel before launch. You may complain to the Estonian Data Protection Inspectorate or to the authority where you live.
Hosting
Developed in the EU. Hosted in the EU; the provider and region are named in the footer of this site. Designed with GDPR requirements in mind.