Privacy policy

Who operates this service

Kumrah operates Kumrah Workspace, an invited-team application for managing client projects, tasks, files and work communications. This notice applies to this workspace and its optional WhatsApp integration. Privacy questions and requests are handled by Kumrah at hello@kumrah.net.

Information we process

• Accounts: name, work email, username, role, profile information, password hash, authentication and security records.
• Workspace content: client and project information, tasks, assignments, comments, uploaded files, internal messages and the changes users make to those records.
• Activity and device information: application activity, session times, login and request diagnostics, browser storage and notification subscriptions when enabled. Activity reporting covers use of this workspace; it does not capture keystrokes, screenshots or activity in other applications.
• Optional WhatsApp connection: approved account and phone identifiers, contact identifiers, supported message text and captions, timestamps, message direction, send requests, delivery states and errors. Incoming events are temporarily queued for processing.

Why we use information

We use information to provide the workspace, manage projects and responsibilities, communicate with clients, support authorized supervision of work conversations, authenticate users, prevent misuse, diagnose failures and respond to requests. Workspaces should contain information needed for these purposes. Administrators must inform team members about work monitoring and ensure that they are authorized to connect business numbers and handle client information.

The application does not sell personal information, build advertising audiences or send conversation content to an AI service. This version does not import historical WhatsApp chats, synchronize group chats or download WhatsApp attachments. Linking a number to a business portfolio alone does not enable the integration.

Access and service providers

Workspace access requires an account and is restricted by role. The WhatsApp monitoring and sending controls are limited to authorized administrators. Authorized server administrators may access stored records for maintenance and support. We use hosting infrastructure to run the application, Meta when the WhatsApp integration is enabled, and our email provider to handle requests sent to hello@kumrah.net. These providers process information needed to deliver their services.

The online workspace runs on Kumrah’s GoDaddy server in Europe. International processing may occur through hosting, email and Meta services. The preview starts with a separate database and no connected WhatsApp number. Adding a connection requires separate configuration and authorization.

Cookies, local storage and security

Essential session cookies keep users signed in. Browser storage supports display preferences and offline workspace features. Offline copies may remain on a shared device until the user signs out or clears site data; use a private device for sensitive work. The application uses password hashing, role checks and signed-in sessions. Public deployment requires HTTPS. No internet service can guarantee absolute security.

How long information remains

• Workspace records, account settings and audit records remain while needed for the workspace unless an authorized deletion is performed. They have no automatic expiry in this version. Moving a record to Trash is different from permanently deleting it.
• When WhatsApp is enabled, received messages are scheduled for removal 90 days after first receipt; outgoing requests after 90 days from creation; delivery events after 90 days from their event time.
• Successfully processed raw webhook payloads are cleared immediately. Processed receipt records and failed events are scheduled for removal after seven days. Pending events remain queued. Scheduled cleanup requires the background worker to be running.
• Backup retention depends on the hosting configuration. Deletion from the active database does not instantly remove backup copies. We check applicable backups when handling a deletion request and explain any remaining retention or restriction.

Your choices and requests

You can contact hello@kumrah.net to request access, correction or deletion, raise an objection or ask about processing of your information. We may need proportionate proof that the request relates to you. We aim to respond within 30 calendar days and will explain if more time or information is required. Records may be retained where necessary for a legal obligation, security investigation or resolution of a dispute; we will explain applicable limits.

See our data deletion instructions. Removing data here does not remove copies held by other WhatsApp participants or by separate services. Disconnecting Meta access and deleting previously stored information are separate actions.

Changes to this notice

We update this page when the service or its processing changes. The date above identifies the current version. Material changes affecting existing users will be communicated through the workspace or the contact details available to Kumrah.