← kolumn.co

Privacy Policy

Effective July 7, 2026

kolumn ("kolumn," "we," "us") provides a project management platform that helps teams turn email into organized, trackable work. This policy explains what information we collect, how we use it, and the choices you have. If you do not agree with this policy, please do not use the service.

1. Information we collect

  • Account information: your name, email address, company name, and password (stored in hashed form; we never see your plain password).
  • Workspace content: the projects, kolumns, cards, comments, files, and photos you and your team create in the service.
  • Connected email data: if you choose to connect an email account (such as Google Gmail or Microsoft Outlook), we access messages on a read only basis to identify action items and create cards. We store only what is needed to operate the feature: message identifiers, subject lines, sender addresses, short body excerpts used on cards, and an audit log of processing decisions. We do not send, delete, or modify your email, and you can disconnect at any time.
  • Waitlist and contact information: email and company name you submit when joining the waitlist or contacting us.
  • Payment information: handled by Stripe, our payment processor. We never see or store full card numbers.
  • Usage and technical data: log data such as browser type, pages visited, and timestamps used for security and reliability.

2. How we use information

  • To provide, maintain, and improve the service, including creating cards from email you have connected.
  • To send service emails: signup alerts, team invitations, overdue alerts, and weekly digests. You can adjust these by contacting us.
  • To process subscriptions and payments.
  • To protect the service against fraud, abuse, and security threats.

We do not sell your personal information, and we do not use your workspace content or email data for advertising.

3. Google user data

kolumn's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: Gmail data is used only to provide the email to card feature you requested; it is not used for advertising; it is not transferred to third parties except as necessary to provide the feature, comply with law, or as part of a merger or acquisition with equivalent protections; and humans do not read your Gmail data except with your explicit permission, for security purposes, or to comply with law.

4. Microsoft user data

When Outlook connections are available, the same commitments apply to data received through Microsoft APIs: read only access, used solely to provide the email to card feature, never for advertising, and revocable by you at any time through your Microsoft account settings or within kolumn.

5. Service providers

We rely on a small set of providers to run kolumn, each processing data only as needed to provide their function: Vercel (hosting), Supabase (database and file storage), Stripe (payments), Resend (transactional email delivery), Anthropic (automated text analysis for email triage), and Google or Microsoft (email connections you authorize). Workspace data is separated per company and protected by access rules enforced at the database level.

6. Retention and deletion

We keep your data while your account is active. If you cancel, you may export your data (CSV and PDF) at any time before or after cancellation. Upon written request to admin@kolumn.co, we will delete your workspace data within 30 days, except records we must keep for legal or accounting reasons.

7. Security

Data is encrypted in transit, stored with industry standard providers, and protected by per workspace access controls. File downloads use expiring links. No system is perfectly secure; please use a strong, unique password.

8. Your rights

You may access, correct, export, or delete your personal information by contacting admin@kolumn.co. Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act.

9. Children

kolumn is a business tool and is not directed to children under 16. We do not knowingly collect information from children.

10. Changes

We may update this policy as the service evolves. We will post changes here and update the effective date. Material changes will be announced by email to account owners.

11. Contact

Questions about privacy: admin@kolumn.co

kolumn · Your projects. At your fingertips.