Privacy Policy

This Privacy Policy applies to Kuptero services operated by Kuptero Ltd, a company registered in the Republic of Ireland.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@kuptero.ie.

We collect the following categories of personal data when you use our services:

• Name — to identify your account and records
• Email address — to create and manage your account and for service communications
• Organisation name — to associate your account with your organisation
• Time entries — hours worked, clients, tasks, and notes entered into Kuptero Track
• Attendance records — check-in timestamps and event records from Kuptero Attend
• IP address — logged automatically for security and fraud prevention purposes

We do not collect payment card data. All billing is handled by our payment processor.

We collect and process your personal data solely to provide the Kuptero service to you and your organisation. Specifically:

• To create and maintain your account
• To provide time tracking, attendance, and reporting features
• To send service-related communications (e.g. password resets)
• To maintain the security and integrity of the platform

We process your personal data on the legal basis of contract performance under GDPR Article 6(1)(b). Processing is necessary to provide the service you have signed up for.

Where we send optional marketing communications, we rely on your consent, which you may withdraw at any time.

Your data is stored securely using Supabase, hosted in the EU-West region (Republic of Ireland). All data remains within the European Economic Area and is subject to EU data protection law.

We do not transfer your personal data to third countries outside the EEA.

We retain your data for as long as your account is active and the service is in use. Upon account closure, your personal data will be deleted within 30 days unless you request earlier deletion.

You may request deletion of your data at any time by contacting support@kuptero.ie.

Under GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your personal data
• Right to data portability — request your data in a structured, machine-readable format
• Right to lodge a complaint — if you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Data Protection Commission (DPC), the supervisory authority in Ireland. You can contact the DPC at www.dataprotection.ie

To exercise any of these rights, contact us at support@kuptero.ie. We will respond within 30 days.

We do not sell your personal data to third parties. We do not share your data with advertising networks, data brokers, or analytics companies.

We use Supabase as our infrastructure provider solely for the purpose of hosting and operating the service. Supabase processes data on our behalf as a data processor and is bound by a data processing agreement.

We use session cookies only — strictly necessary cookies that keep you logged in while using the platform. We do not use advertising cookies, tracking cookies, or third-party analytics cookies.

For full details, see our Cookie Policy.

We may update this Privacy Policy from time to time. For minor changes, we will update the date at the top of this page. For material changes that affect how we process your personal data, we will notify you by email and require your acknowledgement before continued use of the Service. Your continued use of the Service after notification of minor changes constitutes acceptance of those changes.