Privacy Policy

1. Introduction

Kribble, LLC ("Kribble," "we," "us," or "our") operates the Kribble platform, accessible at gokribble.com and app.gokribble.com. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website or use our platform.

By accessing or using Kribble, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform.

2. Information We Collect

Information You Provide Directly

• Account registration information — name, email address, and password
• Organization information — company name, billing email, and account configuration
• Project and operational data — project names, item records, workflow stages, and task logs you create within the platform
• Communications — messages you send to us via email or support channels

Information Collected Automatically

• Log data — IP addresses, browser type, pages visited, and timestamps when you access our services
• Usage data — feature interactions, session duration, and navigation patterns within the platform
• Device information — operating system, browser version, and screen resolution

Information from Third Parties

• Authentication data from AWS Cognito when you log in
• Payment processing data handled exclusively by Stripe — we never receive or store your full payment card number

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Kribble platform
• Process account creation, authentication, and user management
• Generate and deliver platform invoices and billing records
• Respond to support requests and communicate with you about your account
• Monitor platform performance, diagnose technical issues, and improve our services
• Comply with applicable laws and legal obligations
• Protect the security and integrity of the platform

We do not sell your personal information to third parties. We do not use your data to train AI or machine learning models.

4. Data Sharing and Disclosure

We may share your information only in the following circumstances:

• Service providers — We share data with trusted vendors who help us operate the platform, including Amazon Web Services (hosting, authentication, storage) and Stripe (payment processing). These vendors are contractually obligated to protect your data.
• Legal requirements — We may disclose information if required to do so by law, subpoena, or court order, or to protect the rights, property, or safety of Kribble, our users, or the public.
• Business transfers — In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

We do not share your data with advertisers or marketing platforms.

5. Data Retention

We retain your account and operational data for as long as your organization's account remains active. If you cancel your account, we will retain your data for a period of 90 days to allow for reactivation or data export, after which it will be permanently deleted from our systems unless we are required by law to retain it longer.

Immutable audit logs and task event records may be retained for up to 7 years to support compliance requirements.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit via TLS/HTTPS
• Encryption of data at rest on AWS infrastructure
• Multi-factor authentication (MFA/TOTP) support for all user accounts
• Role-based access controls — users only access data within their own organization
• Organization-level data isolation at the database query level

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. HIPAA Compliance

For organizations operating under the Health Insurance Portability and Accountability Act (HIPAA), Kribble offers a HIPAA mode that enables enhanced data handling practices. Organizations requiring HIPAA compliance should contact us to discuss a Business Associate Agreement (BAA) prior to processing any Protected Health Information (PHI) through the platform.

8. Cookies and Tracking

Kribble uses session cookies necessary for authentication and platform functionality. We do not use third-party advertising cookies or cross-site tracking technologies. You may configure your browser to refuse cookies, but this may affect your ability to use certain features of the platform.

9. Your Rights

Depending on your location, you may have rights regarding your personal data, including:

• The right to access the personal information we hold about you
• The right to correct inaccurate or incomplete information
• The right to request deletion of your personal information
• The right to data portability
• The right to object to or restrict processing of your data

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

10. Children's Privacy

Kribble is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. Your continued use of the platform after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: