Privacy policy

Last updated: August 2026

1. Who this covers

This policy explains how Korbel collects, uses, and protects personal information. It covers visitors, account holders, and people who submit content.

2. What we collect

Account information: the contact person's name, email address, and a password (passwords are stored in a hashed form by our authentication provider, so we never see them). Company information: the business details you enter, such as name, type, location, website, contact details, descriptions, logos, and images. Submissions: anything sent through forms, including the public submit a project form (project details, your contact email, image links). Billing: subscriptions are processed by our payment provider, and we receive subscription status and identifiers, never card numbers. Activity: a log of actions taken with your account, such as registrations, claims, edits, and approvals, kept for security, moderation, and audit purposes. Technical data: standard web logs (such as IP address, browser type, and pages visited) collected by our hosting providers, and analytics data described in section 6.

3. How we use it

To operate the Service: running accounts and logins; reviewing and publishing listings and claims; showing public project, company, and product pages; sending the emails described below; processing subscriptions; preventing spam, fraud, and abuse; meeting our legal obligations; and understanding how the site is used so we can improve it. We do not sell personal information, and we do not use your information for third-party advertising.

4. What is public

Company pages, project listings, roles on projects, and product listings are public, since that is the purpose of the Service. Your personal name and login email are not published; they are visible only to us. A company's public page shows only the business contact details entered for public display. Content you ask us to remove may persist briefly in caches and backups after removal.

5. Emails

We send operational emails only: account emails (confirmation and password reset), and notifications about things you or we did, such as approvals, claim outcomes, and subscription changes. We do not send marketing emails.

6. Cookies and analytics

We use a strictly necessary cookie to keep you logged in. We also use, or may use, Google Analytics to understand site usage. It sets its own cookies and collects information such as pages visited, approximate location, device, and browser, which Google processes on our behalf and may transfer to servers overseas. You can opt out of Google Analytics using Google's browser add-on, or by blocking analytics cookies in your browser. The site works fully without them.

7. Who we share information with

Service providers who process data for us: our database, authentication, and file storage provider; our hosting provider; our payments provider; our email delivery provider; and our analytics provider. Each receives only what it needs for its function, and some are located overseas. Beyond these providers, we disclose personal information only if required by law, to enforce our terms, or to protect the safety or rights of anyone.

8. Security

Access to personal information is restricted; data is encrypted in transit; passwords are hashed; database access is controlled by security rules; and administrative access is limited to us. No internet service can promise absolute security, but we take reasonable steps to protect information from loss, misuse, and unauthorised access.

9. Retention

We keep information while your account or listing is active, and for as long as needed for the purposes above. Activity logs are kept for audit and security purposes. When information is deleted, residual copies may remain in backups for a limited period before being overwritten.

10. Your rights

You may ask to see, and to correct, the personal information we hold about you. You can also ask us to delete your account and personal details. Company and project listings may remain, since they are business information about the company and history about projects, with your personal details unlinked. Contact us using the address below and we will respond within a reasonable time.

11. Children

The Service is for businesses and is not directed at children. We do not knowingly collect their information.

12. Changes

We may update this policy from time to time by posting the new version here with an updated date. Material changes will be flagged on the site or by email.

13. Contact

Privacy questions or requests can be sent to hello@korbelapp.com.