Data processing
How Kaam360 handles the information your organization puts in, for customers who need this in writing (for example under European or UK data protection law).
Who does what
Your organization decides what information is put into Kaam360 and why: it is the controller. Kaam360 stores and processes that information only to provide the service, on your organization's instructions: it is the processor.
What we do with your information
- Store it, show it to the people your organization allows, and send the emails your organization's people ask for.
- Keep each organization's information apart from every other organization's.
- Make backups so the service can be restored.
- We do not sell it, use it for advertising, or use it to train models.
Security
- Passwords are stored scrambled; access is checked on every request; organizations cannot see each other's information.
- Connections to the service are encrypted.
- Administrators can see who is signed in and switch people off at any time.
- Everyone at Kaam360 with access to the platform is bound to confidentiality.
Helping you meet your own duties
- Access and portability: an administrator can download everything (spreadsheets and files) under Settings > Data & privacy.
- Deletion: an administrator can delete the whole organization from the same page. It is erased from the live system after a 14-day cancellable delay, and from backups as they rotate (up to about 30 days).
- One person's data: under Settings > Data & privacy > Privacy requests, your team can find everything held about one person, download it for them, or erase it at their request (records the law requires you to keep, such as invoices, keep their amounts but lose the person's details), and keep a register of requests with their due dates.
- Individual requests: if one of your people asks us directly about their information, we pass the request to you.
- Incidents: if we learn that your organization's information has been accessed or lost without permission, we tell your administrators without undue delay.
Companies that help us (sub-processors)
| Company | What for |
|---|---|
| Backblaze, Inc. (backup storage) | Stores encrypted nightly backup copies. The copies are locked before they leave our server and we alone hold the key. |
| Velia (velia.net) (hosting) | Runs the server that Kaam360 runs on, and stores the data and the working copy of the backups. |
| Cloudflare (the network in front of the website) | Every visit to Kaam360 passes through Cloudflare, which protects the website from attacks and makes it faster. The connection is encrypted; Cloudflare handles what is sent on its way to our server and tells us the country and city a visit came from. |
| Hostinger (hostinger.com) (email) | Sends confirmation, notification and support emails, and holds the support mailbox where customer emails arrive. |
| Anthropic (AI assistant, optional) | Only when an organization has switched on the AI assistant and someone asks it a question: the question, the few help pages that match it and the titles of that person's own open tasks are sent to Anthropic, which writes the answer. Kaam360 does not keep the conversation. |
| Google and Microsoft (calendar and email sync, optional) | Only for people who connect their own Google or Microsoft 365 account: Kaam360 reads and writes their calendar events and reads or sends their emails with CRM contacts through that account, as they allowed. The account belongs to the person (or their company) and Google or Microsoft hold that data under their own terms. |
| Paddle | Takes card payments, issues invoices and handles sales tax (as merchant of record). |
We will update this list before adding another company that handles your organization's information.
Where it is kept
Information is kept on the server we rent from Velia, and encrypted backup copies are kept with Backblaze. Emails we send, and emails sent to our support address, pass through and are stored by Hostinger's mail service. If you need to know the country, or need a signed agreement with standard contractual clauses for transfers outside your region, please ask through Help & support.
Questions
Ask through Help & support inside the app, or contact us if you are not yet a customer.