Privacy — Kroy

This notice covers the kroydb.com website, its waitlist and its analytics. The Kroy product itself will have its own terms and data processing agreement.

Who we are

kroydb.com is operated by Hartsmith Ltd, registered in England & Wales under company number 12674532, of 662 High Road, London N12 0NL. Hartsmith Ltd is the controller of the personal data described here.

For anything about your data, email privacy@kroydb.com.

What we collect

When you join the waitlist

Your email address. If you choose to give them: your name, organisation, role, team size, the AI tools your team uses, what you would connect first, and whether you want product updates. We also record the plan or integration page you came from, the campaign that brought you (UTM tags), the referring website, the first page you visited, the date, and the country Cloudflare reports for the request. We do not store your IP address.

When you browse the site

We measure how the site is used with PostHog, hosted in the EU, in cookieless mode. We record pages viewed, how far you scroll, which buttons you click, the steps of our explainers you reach, and what you search for on the site. PostHog links events within a day using a hash that it computes and rotates on its servers. We set no cookies, don’t build a profile of you, and don’t record your screen. We never send your name or email to analytics.

Cloudflare, which hosts the site, also counts visits without cookies, and briefly keeps the security logs any web server needs.

If your browser sends Global Privacy Control or Do Not Track, our analytics doesn’t load.

Storage on your device

We set no cookies. While you browse, your browser keeps a note of the campaign that brought you and the page you first landed on, in session storage for that tab. This lets us credit the right campaign if you join the waitlist, and it is deleted when you close the tab.

Why we use it, and the legal basis

To contact you about early access to Kroy, because you asked us to. The legal basis is our legitimate interest in responding to your request.
To send occasional product updates, only if you tick the box. The legal basis is your consent, which you can withdraw at any time.
To understand which pages and campaigns help people, using aggregated, cookieless analytics. The legal basis is our legitimate interest in improving the site, using the least intrusive method we could find.
To keep the site secure and working. The legal basis is our legitimate interest.

Who processes it for us

Cloudflare, Inc. runs the site, stores waitlist entries (Cloudflare D1, Western Europe) and handles email for kroydb.com.
PostHog Inc. provides site analytics, with data hosted in the EU.

We don’t sell personal data or share it for advertising. Where a provider handles data outside the UK, it does so under the UK’s approved safeguards, such as the International Data Transfer Addendum or an adequacy decision.

How long we keep it

Waitlist entries: until we offer you access and you decide, or for up to 24 months after you join, whichever comes first. We delete them sooner if you ask.
Analytics events: up to 24 months, then deleted.

Your rights

You can ask to see the data we hold about you, correct it, delete it, or object to how we use it. You can also withdraw consent for updates at any time. Email privacy@kroydb.com and we will reply within one month.

If you’re unhappy with how we handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We’d appreciate the chance to put it right first.

Changes

If we change how we use personal data, we’ll update this page and the date at the top.