Privacy policy

Who we are

Kellosolutions is a software studio. For anything in this policy, we are the data controller, and you can reach us at info@kellosolutions.com.

We are based in Latvia and operate under the GDPR.

What we collect, and when

When you send an enquiry through the contact form or the cost calculator: your name, email address, company if you give one, and whatever you write in the message. We use it to reply to you. The basis is our legitimate interest in answering people who contact us.

When you buy a project: your email address and payment details. Card details go directly to Stripe and never reach our servers — we store the fact of the purchase, the amount, and the email address Stripe reports. The basis is performance of a contract.

When you make an offer on a project: your name, email address, the amount, your message, and the IP address the offer came from. The IP is kept because it is the only durable record we have if a single person floods the form. The basis is our legitimate interest in taking and reviewing offers.

When you ask for the App Store transfer after a purchase: your Apple Developer Team ID and the Apple ID that owns your developer account. We pass these to Apple to start the transfer, which is the whole reason we ask.

When you subscribe to the newsletter: your email address, the time you consented, the IP address you consented from, and the exact wording you agreed to. We keep the last three because if you ever ask us to prove you opted in, that is the proof. The basis is consent.

Who we share it with

Stripe, for payments. Stripe is the controller of your card details, not us; see stripe.com/privacy.

Supabase, which hosts our database. Enquiries, purchases, offers and newsletter subscriptions are stored there.

Resend, which sends our email — confirmations, download links, offer correspondence and the newsletter.

Vercel, which hosts the site and provides Vercel Analytics. Vercel Analytics is cookieless and does not profile individuals.

Google Analytics, if it is enabled. Unlike Vercel Analytics it does set cookies; see the cookies section below.

We do not sell your data, and we do not share it for anyone else's marketing.

Cookies

The site sets a cookie after a purchase so that returning to the project page shows your download without you having to find the emailed link. It is strictly necessary for that and nothing else.

If you sign in to the admin dashboard, Supabase sets session cookies. That applies to us, not to visitors.

Vercel Analytics sets no cookies.

Google Analytics, where enabled, sets cookies that measure how the site is used across visits.

How long we keep it

Enquiries: for as long as the conversation is live, and afterwards while it is reasonable to expect a follow-up.

Purchases: kept indefinitely, because they are records of a sale and the download link has to keep working.

Offers: kept so we can see patterns of abuse and remember what was agreed. Tell us if you want yours removed.

Newsletter: until you unsubscribe. The record that you unsubscribed is kept afterwards, precisely so we do not accidentally add you back.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to us processing it. Email us and we will action it.

Where we rely on consent — the newsletter — you can withdraw it at any time. Every campaign carries a one-click unsubscribe link, and using it takes effect immediately.

If you think we have handled your data badly, you can complain to the Latvian Data State Inspectorate (Datu valsts inspekcija).