Privacy Policy

We hold your email address, what you bought, and the seats attached to it. We do not sell your data and we do not run advertising. If you accept optional cookies, we measure which pages bring people here, and Apollo, a sales-data company, tells us which companies are visiting.

• Your account. Email address, and a display name and avatar if you set one.
• Your purchase. Which plan, how many seats, the amount and currency, and the identifiers Stripe gives us for the payment so we can match it to your account.
• Your seats. The codes on your license, the email address each was sent to, and when each was invited and redeemed.

We do not store card numbers. Stripe handles payment details and we never receive them.

Signing in sends a link to your email address rather than asking for a password, so there is no password for us to store or for anybody to steal. The link is single use and expires. Your session is held in a cookie that exists to keep you signed in and does nothing else.

• Supabase stores the accounts and the license records, and runs the sign-in.
• Stripe takes payments and holds the card details we never see.
• Resend sends the sign-in links and the seat invitations.
• Cloudflare serves the site and, in the ordinary way of a web host, sees the requests that reach it.
• PostHog receives, only if you accept optional cookies, the pages you view, and, once you are signed in, the account they belong to, by its ID and email address.
• Apollo receives, only if you accept optional cookies, the address your visit comes from and the pages you view. It matches them against its business database to tell us which company, and sometimes which person, is visiting.

The first five hold only what they need to do their job and are not given your data for their own purposes. Apollo is a sales-data company and handles what it receives under its own privacy policy. We have no other recipients.

Two are necessary and are always set: the one that keeps you signed in, and the one that remembers whether you chose the light or dark theme. Neither can be turned off without breaking the thing it does.

Two are optional, and nothing is loaded or stored for either until you say yes. The first is measurement. It shows which of our own pages people arrive from, so we know whether writing them was worth it; once you are signed in it is tied to your account, so we can see how the people who use Kobra move through it. It also lets Apollo match your visit to the company you work for, and sometimes to you, so we can see which companies are looking at Kobra. We do not run advertising and we do not sell what it collects. Choosing “Only essential” loads nothing at all; changing your mind later takes effect the next time the page loads, because a script that has already run cannot be unrun.

The second is for people who share Kobra in return for a commission. If you arrive through one of their links, it remembers whose link it was for 30 days, so they are credited if you buy. It holds their code and nothing about you. Without it, a purchase in the same visit is still credited to them, and nothing is stored.

Your account and license for as long as the license exists, because a permanent license is not much use if we forget you own it. Delete your account and we remove the profile and the seats. Records of the payment itself are kept as long as tax and accounting law requires, which is out of our hands.

A copy of what we hold, a correction to any of it, or its deletion. Email us and we will do it. If you are in the UK or the EU you have these rights under the GDPR, and you may complain to your data protection authority if you think we have handled something badly.

If what we collect changes, this page changes with it, and the date at the top moves.

Anything about your data goes to support@kobra.systems.