Privacy Policy

1. Data Controller

Data Controller

Andrea Camillo Anastasi

P.IVA (VAT): IT05992760875

Email: andrea@vinket.eu

Operating as: KadmilOS — kadmilos.vinket.eu

2. What We Collect

What We Collect

• Account data: name, email, company name (provided at registration or checkout).
• API usage logs: request timestamps, endpoint, response codes — no request body content stored.
• Payment data: handled entirely by Stripe — we receive only payment confirmation, amount, and Stripe customer ID. No card data stored.
• Questionnaire data: answers submitted via the pre-kickoff form.
• Cookies: session cookie (auth), analytics (Vercel/Axiom — aggregate only, no fingerprinting).

3. Legal Basis

Legal Basis

• Contract performance (Art. 6(1)(b) GDPR): account management, API delivery, invoicing.
• Legal obligation (Art. 6(1)(c)): invoice retention per Italian tax law (7 years).
• Legitimate interest (Art. 6(1)(f)): service improvement via aggregate logs.

4. How We Use Your Data

How We Use Your Data

• Provide and maintain the KadmilOS API
• Issue invoices (name, email, VAT number retained 7 years per Italian law)
• Send service communications (credentials, updates, support replies)
• Improve service via aggregate usage analytics — no individual profiling

5. Third-Party Processors

Third-Party Processors

• Stripe (payments) — EU/US — stripe.com/privacy
• Supabase (database hosting) — EU region — supabase.com/privacy
• Resend (transactional email) — resend.com/privacy
• Vercel (hosting + edge) — vercel.com/legal/privacy
• Axiom (aggregate logs) — axiom.co/privacy

No data sold to third parties. No advertising networks.

6. Retention

Retention

• Account + API data: retained for duration of subscription + 12 months
• Invoice data: 7 years (Italian tax law)
• Usage logs: 90 days rolling
• Questionnaire data: deleted on request or 24 months after pilot end

7. Your Rights (GDPR)

Your Rights (GDPR)

You have the right to access, correction, deletion, portability, restriction, and objection.

Contact: andrea@vinket.eu — response within 30 days.

You have the right to lodge a complaint with Garante Privacy (garante.it) if you believe your data is processed unlawfully.

8. Cookies

Cookies

• Session cookie: required for authentication — no consent required.
• Analytics: aggregate, anonymised — no tracking across sites, no fingerprinting.

No advertising cookies. No third-party tracking pixels.

9. Contact

Contact

Andrea Camillo Anastasi

Email: andrea@vinket.eu

Related: Terms & Conditions

Response time: 1 business day (Monday–Friday, CET).