Privacy Policy

Kumulator is a CRM platform designed for sales teams, accessible at app.kumulator.com. We are responsible for processing your personal data in compliance with GDPR and applicable legislation.

• —Account data: Name, email address, encrypted password.
• —CRM data: Contacts, companies, deals, activities and notes entered by you.
• —Usage data: In-app actions, authentication data, IP address, browser type.
• —OAuth tokens: If you connect Gmail or Outlook, we store access tokens encrypted with AES-256-GCM. We do not read or store the content of your messages.
• —Session cookie: A single secure cookie (httpOnly) for authentication. We do not use tracking cookies.
• —Website language cookies: On kumulator.com, kum_lang remembers the language you chose (or that a campaign link set) and kum_lang_banner remembers that you closed the language suggestion. They are strictly functional, contain only a language code or a flag, and are not used for tracking. To pick a language for you we use only the country your request comes from, as computed by our hosting provider; we do not store your IP address and use no third-party geolocation service.
• —Cookie consent: kum_consent stores your choice from the cookie banner (analytics and marketing allowed or not) for 6 months. It is strictly necessary and contains only that choice and its date. Analytics and marketing cookies are set only if you allow them; you can change or withdraw your consent at any time from “Cookie settings” at the bottom of every page.

• —Providing and improving the Kumulator service.
• —Authentication and management of your account.
• —Sending transactional emails (invitations, account notifications).
• —Sending CRM emails on your behalf, if you connected Gmail or Outlook.
• —Technical support and responding to your requests.

We do not sell your data to third parties and do not use it for advertising purposes.

We process your data based on: (i) execution of the usage contract; (ii) our legitimate interest in providing the service; (iii) your consent, where explicitly requested; (iv) applicable legal obligations.

Data is stored on secure servers (Vercel, Neon/PostgreSQL). OAuth tokens are encrypted with AES-256-GCM. We apply appropriate technical and organizational measures to protect data against unauthorized access.

Data is retained for the duration of account activity and up to 12 months after deactivation, unless the law requires otherwise.

• —Access: You can request a copy of the data we hold.
• —Rectification: You can correct inaccurate data.
• —Erasure: You can request deletion of data (right to be forgotten).
• —Restriction: You can request limitation of processing.
• —Portability: You can receive your data in a structured format.

Contact: privacy@kumulator.com

• —Vercel: Application hosting.
• —Neon / PostgreSQL: Database.
• —Resend: System transactional emails.
• —Google / Microsoft: OAuth for Gmail and Outlook, with your consent.

We may periodically update this policy. Significant changes will be communicated via email or in-app notification.

privacy@kumulator.com