Privacy Policy

THIS PRIVACY POLICY IS AN INTEGRAL PART OF THE PUBLIC AGREEMENT (TERMS OF USE) BETWEEN KROCK.IO SERVICE AND THE USER. YOU ARE REQUIRED TO READ THIS PRIVACY POLICY TO HAVE A POSSIBILITY TO USE KROCK.IO SERVICE. IF YOU REGISTER AN ACCOUNT OR USE KROCK.IO SERVICE, IT IS AUTOMATICALLY DEEMED THAT YOU ACCEPTED THE TERMS OF THIS PRIVACY POLICY.

We may apply changes to this Policy from time to time, so please review it regularly. This Policy was last updated on January 27, 2026. If you have any questions about this Policy, please contact us at legal@krock.io

Collection, processing, and use of data that You (hereinafter referred to as “User” /”You”) provided during the use of the KROCK.IO service (hereinafter referred to as “Service” / “KROCK.IO Service “/ “We”) is performed exclusively in accordance with international treaties and the current legislation of Estonia.

BY USING THE SERVICE, YOU WILL BE DEEMED TO HAVE AGREED TO THIS POLICY, SO IF YOU DO NOT AGREE, PLEASE DO NOT USE THE SERVICE.

Types of data that may be collected, processed, and used during your use of the Service.

“User Personal Information” is any personal information about one of Our users which could, alone or together with other information, personally identify them. Information such as a username and password (encrypted), an email address, a real name, and a photograph, IP address, cookies are examples of “User Personal Information.”

Sensitive data – data that is considered sensitive in accordance with the legislation.

“Technical Information” may include information we collect from website browsers, such as web server logs, or other log information, such as User session, HTTP REFERER, User-Agent or activity logs. Technical Information may be connected to User Personal Information such as a username or email address, or other potentially personally-identifying information like Internet Protocol (IP) addresses.

Which information do we collect?

If you create an account, We require some basic information at the time of account creation. You will create Your username and password, and We will ask you for a valid email address. You also have the option to give us more information if You want to, and this may include “User Personal Information.”

In the Live Demo regime, we collect only essential information needed to provide services of fast sign-up to our Users. The information we collect in the Live Demo may include email, name, and IP address.If You intend to use the advanced functionality that We offer, please, specify the additional information which is necessary to process required transactions. These transactions are directly processed by stripe.com.

You can find stripe.com Privacy Policy here: https://stripe.com. In case of change of this link by stripe.com, please, find the latest version of their Privacy Policy on the stripe.com website or request stripe.com to help You to find their Privacy Policy.

We also automatically collect the same basic information that most websites collect, i.e. certain non-personally identifiable information when You visit the website, such as Your IP address, work session, time of activity, pages viewed, quotations, the type of browser You are using, the type of operating system You are using and the domain name of Your Internet service.

We may collect sensitive information about you, but We will never collect Your sensitive information without Your explicit consent.

How We Use Cookies

We use “cookies” and similar technologies. Cookies is a text-only string of information that a website transfers to the cookie file of the browser on a user’s computer hard disk. This occurs so that the website can remember who the user is. Cookies will typically contain the name of the domain from which the cookies have come, the ‘lifetime’ of the cookies, and a value, usually a randomly generated unique number. Cookies may also be stored in your internet browser by or on behalf of third parties, such as Google.

When you visit the Service, the Service sends you cookies. Cookies enable us to record anonymous information about you, including: the type of internet browser you use to access the Service, your computer operating system, the websites you visited before visiting the Service, the areas of the Service you visit and your IP address (which can provide information about your approximate geographic location). Cookies cannot be used to disclose your identity.

We may use cookies in order to learn how the Service is being used and which types of individuals are using the Platform; record and report user behaviour, location, audience and interest data; record which other websites have referred You to the Service; optimize the Service and improve it; make it easier for you to fill in forms on the Service.

We will retain information received from Our use of cookies indefinitely.

If You do not wish for Us to use cookies when You access the Service, please adjust Your Internet browser settings to decline cookies (your computer’s help file should tell you how to do this). If You choose to decline cookies, some parts of the Service may not work properly. By using the Service, You agree to Our use of cookies as described above.

We do not use Google advertising cookies, therefore We do not share them with Google.

Information about You, which will be visible within your workspace

Other users within your workspace may see your Personal Data that You have specified in the “Personal
Information” section in settings of the Service, which usually includes, but is not limited to your real
name or nickname, and email address. This information is only visible to users within workspaces you have joined or been invited to – it is not publicly visible to all Krock.io users. However, please note that no information specified in the “Personal Information” section will be considered/belong to Sensitive data.

You may update or remove any Personal Data of Yours at Your own discretion using the appropriate functionality in the “Personal Information” section. You must take full responsibility filling in “Personal data” section in Your account, as such Personal Data will be considered publicly available and we cannot be responsible for its disclosure.

Please, do not specify in Your Account any information that is Sensitive data e.g. about Your religion, political convictions, racial, ethnic or national origin, etc.

How We Use Information

We use information for the following purposes:

• Username and password: to register and administer Your user account via our server
• e-mail address: to contact you with your account notifications and other related matters; and
• Your Content: to host, store, reproduce, and display Your Content solely as necessary to operate the Service and provide it to you and your authorized collaborators within your workspace. We do not share your content with other Krock.io users outside your workspace or use it for purposes beyond service delivery.

We may also use the Information submitted to the Service to:

• enable our compliance with applicable laws and regulations;
  enable Your use of the Service and associated services;
• provide You with an up to date, efficient and reliable service;
• analyze aggregated, anonymized usage patterns to improve Service functionality and performance;
• run and improve the Service.

Content Ownership and License

You retain full ownership of all content you submit, upload, or display through the Service (“User Content”).

By uploading User Content, you grant Krock.io a limited, non-exclusive, worldwide, royalty-free license to use, host, reproduce, and display your User Content solely as necessary to:

• Operate and provide the Service to you
• Enable collaboration with team members and authorized users you invite to your workspace
• Provide technical support when requested by you

This license does not grant us any rights to:

• Share your content with other Krock.io customers or users outside your workspace
• Use your content for marketing purposes without your explicit permission
• Use your content to train machine learning models or AI systems
• Present your content to third parties for service improvement purposes

All User Content remains confidential and is protected in accordance with our Data Governance policy. You retain all rights to commercially exploit, publish, distribute, or otherwise use any deliverables created or managed within Krock.io.

We may share non-personally identifiable information with the current or potential commercial partners, i.e. investors, sponsors and advertisers.

Please be aware that it is possible, though unlikely, that the Service may be forced to disclose personally identifiable information in response to legal process or obliged to do so to comply with law, regulations or a court order; to enforce any of the terms and conditions or any other agreements to which we are a party; to protect our rights, property, or safety of Service users.

How We use information for marketing purposes

We may send you marketing emails about products or services which are related to the Service or contact You by email with information about the Service. We will not send You any other marketing emails or pass Your information on to third parties unless You give your consent or You have given it already.

How long do We store collected information

The collected information is kept for the time necessary to provide the service(s) requested by You. You can request for the collected information to be removed.

Our Commitment to Security

The Service employs appropriate technical and organizational security measures to prevent unauthorized access to information We collect online.

How We Protect Your Content

We implement industry-standard security measures to protect your User Content:

Infrastructure: All media files and project data are stored on Amazon Web Services (AWS) infrastructure with SOC 2 Type II and ISO 27001 certification. Core application servers are hosted on DigitalOcean with SOC 2 Type II certification.

Encryption: All connections to Krock.io servers use HTTPS (TLS) encryption. Media files are stored with encryption at rest.

Access Control: Your User Content is only accessible to:

• You and your team members within your workspace
• Users you explicitly invite as collaborators or reviewers
• Krock.io technical support staff, and only when you request assistance with a specific technical issue

Third-Party Access: We do not grant access to your User Content to any third parties except:

• Cloud infrastructure providers (AWS, DigitalOcean) operating under strict data processing agreements
• When required by law or valid legal process

AI Token Expiration

AI tokens purchased through our service have an expiration date. These tokens will expire 12 months after the date of purchase. This expiration policy applies to all AI tokens, regardless of the quantity purchased or the specific use case.

For more details, see our:

• Privacy & data governance
• Terms of Service