Privacy policy
This policy covers this website, Kelune CRM Cloud at app.kelunecrm.com, and the Kelune CRM Pro license check. It explains what each one collects, why, and who else handles it.
This website
If you send a message through the contact form, we receive your name, email address and message, and use them only to answer you. The form is checked by Cloudflare Turnstile to stop spam, and the message is delivered to us through Amazon SES. We do not add you to a mailing list because you wrote to us.
The site uses no advertising or tracking cookies. Our host, Cloudflare, keeps standard request logs and aggregate traffic counts. The docs remember which edition you last read in your browser's local storage, which never leaves your device.
Kelune CRM Cloud
For your account we store your name, email address, a hash of your password, your passkeys and two-factor settings, and for each sign-in session its IP address and browser. We use them to sign you in, keep the account secure and send account email such as confirmations, password resets and invitations.
Everything you put in a workspace — contacts, lists, tags, segments, campaigns, templates, automations, media and settings — belongs to the workspace. The workspace owner decides what goes in and why; we store and process it only to run the service for them. When a workspace sends email, it goes out through the email provider the workspace connected, not through ours. Opens and clicks are tracked unless the workspace turns tracking off, and smart link clicks record the device, browser and IP address.
Email logs and the audit log are kept for as long as the workspace's plan allows, and then deleted. A deleted workspace can be restored for 30 days; after that it and all of its data are deleted for good. Workspace owners can export all of a workspace's data at any time, and can export or erase a single contact on request.
Credentials for connected email providers, API keys and similar secrets are encrypted at rest.
Who else handles data
- Railway hosts the Cloud application and its database.
- Amazon Web Services stores uploaded media and exports (S3), serves media (CloudFront) and sends account email (SES).
- Lemon Squeezy is the merchant of record for Cloud plans and Pro licenses. It collects the payment and billing details and issues invoices; we receive your name, email address and what you bought.
- Cloudflare hosts this website and checks the contact form.
We do not sell personal data, and we do not share it with advertising networks.
The WordPress plugins
Kelune CRM for WordPress runs on your own server and stores its records in your own database. The free plugin sends nothing to us. Kelune CRM Pro contacts our license server to activate its license and look for updates; that check sends the license key, the email it was bought with, the site URL and the plugin version, and nothing about your contacts, campaigns or emails.
Your choices
Ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it, including your Cloud account, and we will — except where we have to keep a record for tax or accounting reasons. If you are a contact in someone else's workspace, ask that business first: they decide what is kept about you. Write to [email protected].