Data controller
Jérémie Ollivier, self-employed professional, 70 avenue François Mitterrand, 31800 Saint-Gaudens, France, is the controller for the processing described below. For any question, or to exercise your rights: contact@hivekan.com.
The software installed on your server sends us nothing
Hivekan installs on your server. It makes no request to the Publisher or to any third-party service - apart from the mail server you yourself configure for notifications, if you choose to: no telemetry, no licence check, no automatic update. It runs with no Internet access at all.
The data you enter - boards, cards, files, your users' accounts - never reaches us. You are its sole controller; we are not your processor, having no access to it.
This is not a promise of good behaviour, it is a property of the code - verifiable in the sources delivered to you.
What this website does
The presentation pages, the licence agreement and this notice set no cookie and load no tracker: no analytics, no social buttons, no remote fonts. No consent banner is needed, there being nothing to consent to.
One exception, and it is a necessary one: the checkout page loads
Paddle's payment script from cdn.paddle.com. It is what displays the
tax-inclusive price and opens the payment window. Paddle may set cookies at that
point, governed by its own policy.
The demo
demo.hivekan.com is a public instance of the software. It asks for no sign-up, no account and no email address: there is nothing to fill in to try it.
The demo sets four technical cookies, all first-party and exempt
from consent as necessary to the service you asked for: hivekan_demo,
the randomly drawn identifier of your instance (four hours); the PHP session cookie
(deleted when the browser closes); kanban_lang, your language, and
kanban_last_board, the last board opened (one year each - these are the
software's standard settings; they carry no personal identifier and outlive the
instance without allowing any way back into it). None allows tracking across
sites.
Legal basis: the performance of the service you request by creating the instance.
Every visitor gets their own copy of the sample data, isolated from everyone else's. What you enter there - cards, comments, uploaded files - stays there, and all of it is deleted after four hours by an automatic task. So do not put anything real in it: that data will be erased, and it has no business being handed to a third party, the vendor included.
The demo server keeps the same technical logs as the rest of the site, on the same terms and for the same periods. Email sending is disabled there. No analytics, no trackers.
Server logs
The host keeps connection logs: IP address, date, page requested, browser. They serve security and fault diagnosis, never profiling. Legal basis: the legitimate interest in keeping a service available and secure.
If you place an order
Payment is handled by Paddle, which collects your billing details and passes them to us. We keep: name, email, company where applicable, postal address, VAT number where applicable, country, amount, date and transaction reference.
They are used to draw up the licence agreement - which is issued in your name -, to deliver the software, to provide the included support, and to keep our accounts. Legal bases: performance of the contract, and legal obligation for the accounting part.
They are never sold, rented, or passed on for advertising.
If you write to us
Your address and the content of your messages are kept for as long as it takes to handle your request, then as a record of the relationship. Legal basis: the legitimate interest in replying and keeping a trace of exchanges.
Retention periods
- Server logs: rotated by the host, twelve months at most.
- Order and billing data: ten years, the retention period for the limitation period for contracts concluded electronically (article L. 213-1 of the French Consumer Code) and tax obligations (article L. 102 B of the French tax procedures code).
- Email exchanges: three years from the last contact.
Recipients and transfers
Your data is accessible only to the Publisher and to two companies:
- Paddle.com Market Ltd (United Kingdom), our reseller (the “merchant of record”): it sells, takes payment and issues the invoice. For the transaction data, Paddle acts as an independent controller, under its own privacy policy: paddle.com/legal/privacy. The United Kingdom benefits from a European Commission adequacy decision.
- Infomaniak Network SA (Switzerland), for site hosting and email. Switzerland likewise benefits from an adequacy decision.
No other transfer outside the European Union takes place.
Your rights
Under French law you may also leave directives on what becomes of your data after your death (article 85 of the French Data Protection Act).
You have rights of access, rectification, erasure, restriction, objection and portability. Write to contact@hivekan.com: you will receive a reply within one month.
The right to erasure does not extend to accounting records, which the law requires us to keep for ten years.
If you disagree with how we handle it, you may lodge a complaint with the French supervisory authority, the CNIL, 3 place de Fontenoy, 75334 Paris Cedex 07, or with the authority of your own country of residence.
Changes to this document
Any change is published on this page, with its update date. Substantial changes are notified to customers by email.