Privacy Policy

    Last updated: May 2026

    1. Controller

    The data controller responsible for processing your personal data is the company that publishes, operates and develops Krak Stack:

    EEvolve Me SA
    Société Anonyme (SA) · Registered office: Genève, Switzerland
    Rue de l'Arquebuse 22, 1204 Genève, Switzerland
    Company ID: CHE-219.272.576 · VAT: CHE-219.272.576 TVA
    Email: info@krak-stack.com

    More about the company behind Krak Stack: eevolve.ch

    2. What Personal Data We Collect

    We may collect the following categories of personal data:

    • Identity data: name, job title, company name
    • Contact data: email address, phone number
    • Account data: login credentials, user preferences
    • Usage data: pages visited, features used, session duration
    • Technical data: IP address, browser type, device information, operating system
    • Communication data: messages sent through contact forms or support channels

    3. Legal Basis for Processing

    We process your personal data on the following legal grounds under the GDPR (Art. 6(1)):

    • Consent (Art. 6(1)(a)): For analytics cookies and marketing communications. You may withdraw consent at any time.
    • Contract performance (Art. 6(1)(b)): To provide our platform services and fulfill subscription agreements.
    • Legitimate interest (Art. 6(1)(f)): To improve our services, ensure security, and conduct business analytics. We balance these interests against your rights.
    • Legal obligation (Art. 6(1)(c)): To comply with tax, accounting, and regulatory requirements.

    4. How We Use Your Data

    • To provide, operate, and maintain our platform
    • To respond to demo requests, inquiries, and support tickets
    • To send service-related communications
    • To analyze usage and improve our products
    • To detect, prevent, and address security issues
    • To comply with legal obligations

    We do not sell your personal data to third parties.

    5. Data Recipients & Processors

    We may share your data with the following categories of recipients:

    • Cloud infrastructure providers (application hosting in Germany, EU; network protection and encrypted backup copy by Cloudflare; email sending by Resend, Ireland)
    • Analytics providers (website usage analysis)
    • Payment processors (subscription billing)
    • Communication tools (email delivery, support ticketing)

    All processors are bound by Data Processing Agreements (DPAs) and process data only on our instructions.

    6. International Data Transfers

    Your data is primarily processed within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure adequate safeguards are in place, such as EU Standard Contractual Clauses (SCCs) or an adequacy decision by the European Commission.

    7. Data Retention

    We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

    • Account data: For the duration of your account plus 30 days after deletion
    • Contact form submissions: Up to 12 months
    • Invoicing and financial records: 10 years (Swiss legal obligation under the Code of Obligations)
    • Analytics data: 26 months (anonymized thereafter)

    8. Your Rights Under the GDPR

    You have the following rights regarding your personal data:

    • Right of access (Art. 15): Obtain a copy of your personal data
    • Right to rectification (Art. 16): Correct inaccurate data
    • Right to erasure (Art. 17): Request deletion of your data
    • Right to restrict processing (Art. 18): Limit how we use your data
    • Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
    • Right to object (Art. 21): Object to processing based on legitimate interest
    • Right to withdraw consent: At any time, without affecting the lawfulness of prior processing

    To exercise any of these rights, contact us at info@krak-stack.com. We will respond within 30 days.

    9. Cookies

    We use cookies and similar technologies on our website. For full details, please see our Cookie Policy.

    10. Data Security

    We implement appropriate technical and organizational measures to protect your personal data, including encrypted connections (TLS), encrypted off-site backups, role-based access controls and optional two-step sign-in.

    11. Supervisory Authority

    If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC):

    Federal Data Protection and Information Commissioner (FDPIC)
    Feldeggweg 1, 3003 Bern, Switzerland
    edoeb.admin.ch

    If your local supervisory authority is in the EU/EEA (under the GDPR), you may also lodge a complaint with that authority.

    12. Changes to This Policy

    We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on our website. The "Last updated" date at the top reflects the most recent revision.

    13. Contact

    For any questions about this Privacy Policy or your personal data, contact:
    EEvolve Me SA
    Rue de l'Arquebuse 22, 1204 Genève, Switzerland
    Email: info@krak-stack.com