Personvernerklæring

Effective Date: May 7, 2026

Website: https://www.kunbord.com

Service Provider: Haglund Software

Privacy Contact: Vegard Haglund

Contact: support@kunbord.com

This Privacy Policy explains how Haglund Software ("we", "us", or "our") collects, uses, stores, protects, discloses, and otherwise processes personal information in connection with Kunbord, our privacy-friendly Kanban board service available at https://www.kunbord.com.

Kunbord is designed as a software-as-a-service platform for creating and managing boards, workspaces, cards, tasks, and related content. The service uses third-party providers for authentication, payment processing, hosting, database services, analytics, and error monitoring. This Policy applies to the website, account dashboard, subscription features, and related online services.

1. Who Is Responsible for Your Personal Information

Haglund Software is generally the data controller for personal information processed for account creation, login, subscription management, customer support, billing administration, website operation, security, analytics, and legal compliance.

If you use Kunbord as a business user and place personal information about your own customers, staff, contractors, clients, invitees, or other third parties into boards, cards, tasks, notes, or similar workspace content, you are responsible for ensuring you have a valid legal basis to do so. In that context, we may act as your processor only to the extent required by applicable data protection law and any separate data processing terms agreed with you.

Business users that require formal processor terms, a data processing agreement, or specific sub-processor information should contact us before using Kunbord for third-party personal data. This Privacy Policy does not replace your own privacy notices, legal basis assessments, access controls, or compliance obligations as a business user.

Where we act as a processor for workspace content, we process that content only as necessary to provide, secure, maintain, troubleshoot, and support Kunbord, or as otherwise required by law, our agreements, or the business user’s lawful instructions.

2. Information We Collect

We may collect the following categories of information, depending on how you use the service:

• Account and identity information, such as full name, email address, login provider, account identifier, and information received through Clerk when you sign in using email, Google, or GitHub.
• Connected account profile information, such as display name, email address, profile image or avatar, provider account ID, username, and Google or GitHub profile details made available through the selected login provider.
• Subscription and billing information, such as plan type, billing status, subscription dates, cancellation status, invoices, payment references, and payment processing information handled through Clerk and Stripe. We do not intentionally store full payment card numbers on our own systems.
• Workspace and service content, such as board names, workspace information, lists, cards, tasks, descriptions, labels, preferences, and other content you create or store inside Kunbord.
• Device, log, and technical information, such as device type, browser type, operating system, approximate location derived from technical data, IP address, timestamps, referral information, pages viewed, feature interactions, diagnostic logs, and error information.
• Support and communication information, such as messages, requests, feedback, support tickets, and any other information you send to us.
• Security and fraud prevention information, such as login events, account activity, authentication signals, abuse reports, suspicious behavior, and technical indicators used to protect the service.

3. Information We Do Not Intentionally Collect

Kunbord is not intended to collect special category or sensitive personal information, such as health data, biometric data, precise location data, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or information about criminal offences. You should not place sensitive personal information into Kunbord unless you have a lawful basis and it is necessary for your own use of the service.

We do not currently target children under the age of 13, and the service is not designed for use by children. If you believe a child has provided personal information to us without appropriate permission, please contact us so we can review and take appropriate action.

4. How We Collect Information

We collect information directly from you when you create an account, use the service, manage your subscription, contact us, submit support requests, or create content inside Kunbord. We also collect information automatically through the website, web application, authentication tools, analytics tools, logs, cookies, similar technologies, and error monitoring systems. Some information is collected from service providers such as Clerk, Stripe, Umami, Railway, Neon, and Sentry where necessary to operate and secure the service.

5. Purposes and Legal Bases for Processing

We process personal information only where we have a lawful basis to do so. Depending on the context, this may include performance of a contract, legitimate interests, consent, compliance with legal obligations, or your instructions where we act as a processor.

In general, we rely on performance of a contract for account access, subscriptions, and core service delivery; legitimate interests for security, fraud prevention, diagnostics, service reliability, and product improvement; legal obligations for tax, accounting, consumer, and compliance records; consent for optional non-essential cookies, optional communications, or other consent-based processing where required; and user instructions where we process workspace content on behalf of a business user.

• To create and manage user accounts, authenticate users, and allow login via email, Google, or GitHub.
• To provide, maintain, secure, improve, and personalize the Kunbord service.
• To process subscriptions, payments, free trials, renewals, cancellations, billing records, and customer support requests.
• To store and display boards, workspaces, cards, tasks, and related user content.
• To monitor performance, diagnose errors, fix bugs, prevent misuse, detect fraud, and protect the security of users and our systems.
• To analyze website and service usage through privacy-friendly analytics, including Umami, where applicable.
• To communicate with you about your account, service updates, policy changes, security issues, support requests, and administrative matters.
• To comply with legal, tax, accounting, consumer protection, security, and regulatory obligations.

6. Third-Party Services and Processors

We use third-party providers to operate Kunbord. These providers may process personal information on our behalf or as independent controllers depending on their role and applicable law. Current third-party services include:

• Clerk, for authentication, user account management, login providers, and subscription dashboard functionality.
• Stripe, through Clerk where applicable, for payment processing, billing, subscription handling, invoices, and payment security.
• Neon, for Postgres cloud database services and data storage.
• Railway, for application hosting and cloud infrastructure.
• Umami, for analytics and usage statistics.
• Sentry, for crash reporting, error monitoring, diagnostics, and service reliability.

We may update our providers over time as our service changes. Where required, we use appropriate contractual, technical, and organizational safeguards with providers that process personal information for us.

Some providers, such as Stripe, Clerk, Google, or GitHub, may also process certain information as independent controllers under their own terms and privacy notices when they provide authentication, payment, security, or account-related services directly to you.

7. Cookies and Similar Technologies

Kunbord uses cookies and similar technologies for essential service functions, authentication, account management, security, preferences, functionality, diagnostics, and analytics. Where consent is required, non-essential cookies or similar technologies will be used only after valid consent. We do not currently use advertising cookies because ads are not active on the site. If advertising is introduced in the future, we will update our relevant policies and, where required, request appropriate consent.

For more information, please read our Cookie Policy.

8. User Content and Workspace Data

You remain responsible for the content you create, upload, store, organize, or process through Kunbord. This may include board data, workspace names, task details, lists, cards, notes, labels, and similar content. We process this content to provide the service, display it to you, store it securely, synchronize features, troubleshoot issues, and comply with legal obligations.

Kunbord is designed as a privacy-friendly service and uses security measures, including encryption and access controls, to protect user information. However, no online service can guarantee absolute security. You should avoid storing highly sensitive personal information, confidential credentials, payment card numbers, or regulated data unless you have independently assessed that Kunbord is appropriate for that use.

9. International Data Transfers

Personal information may be stored or processed in Norway, the Netherlands, Germany, the United States, and other locations where our service providers operate. Where personal information is transferred outside Norway, the European Union, or the European Economic Area, we rely on appropriate safeguards where required by applicable law, such as adequacy decisions, standard contractual clauses, data processing terms, technical safeguards, or other lawful transfer mechanisms.

10. Data Retention

We retain personal information for as long as reasonably necessary to provide the service, manage your account, process subscriptions, comply with legal obligations, resolve disputes, prevent fraud, maintain security, enforce our agreements, and operate backups and logs.

• Account and subscription information is generally retained while your account remains active and for a reasonable period afterwards where needed for legal, tax, accounting, security, or dispute purposes.
• Workspace content is generally retained while your account or workspace remains active, unless you delete it or request deletion according to available service features and applicable law.
• Technical logs, analytics, and error data are retained for a limited period appropriate to their purpose, unless longer retention is needed for security, fraud prevention, legal compliance, or service integrity.
• When you request deletion of your personal information, we aim to respond within the time required by applicable data protection law. Technical deletion from backups, archives, and operational systems may take up to 180 days where legally permitted and technically necessary.

11. Your Privacy Rights

Depending on where you live and how you use Kunbord, you may have the right to request access to your personal information, correction, deletion, restriction, objection, data portability, withdrawal of consent, and information about how your data is processed. You may also have the right to object to certain processing based on legitimate interests and to complain to a data protection authority, including the Norwegian Data Protection Authority where applicable.

To exercise your rights, contact us at support@kunbord.com or through https://www.kunbord.com/contact. We may need to verify your identity before responding to a request. We will respond within the time required by applicable law.

12. Account Deletion and Data Export

Users may manage certain account and subscription settings through the available account dashboard, including features provided by Clerk. If self-service export or deletion features are not available, you may contact us to request access, correction, deletion, or portability of personal information. Some information may be retained where required for legal, tax, accounting, fraud prevention, security, dispute resolution, backup, or compliance reasons.

13. Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction. These measures may include access controls, authentication controls, encryption, provider security safeguards, monitoring, backups, and error detection. You are responsible for keeping your login credentials secure and for controlling access to your account and devices.

14. No Current Advertising

Kunbord does not currently run ads on the site and does not currently use advertising display services. If we later introduce advertising, including Ethical Ads or another ad provider, we will review and update this Privacy Policy, Cookie Policy, and consent approach before using advertising technologies where required.

We do not sell personal information, use workspace content for targeted advertising, or use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects for users. We may use limited technical, account, and usage information for security, fraud prevention, billing administration, diagnostics, and product improvement as described in this Policy.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Kunbord, our providers, legal requirements, or data practices. The updated version will be effective when posted on our website unless a later effective date is stated. If changes are material, we may provide additional notice where appropriate.

16. Contact Us

If you have questions about this Privacy Policy or want to exercise privacy rights, contact us at:

Haglund Software | Website: https://www.kunbord.com | Email: support@kunbord.com | Privacy Contact: Vegard Haglund