Effective date: May 20, 2026. This Privacy Policy applies to the KanbanBot Cyprus service experience, including KanbanBot.online, the web app, Telegram integration, AI-assisted features, analytics, collaboration tools, and related services.
1. Overview
This Privacy Policy explains how KanbanBot collects, uses, discloses, stores, and protects personal data when you access or use the Service from Cyprus.
This notice is designed to reflect the EU GDPR and applicable Cyprus data protection law. It is intended to be transparent and protective of user rights without creating obligations beyond those required by applicable law.
If you use KanbanBot on behalf of a company, team, school, client, or other organisation, that organisation may control the content placed into boards and may have separate privacy duties to its users.
2. Controller and contact
KanbanBot determines how the core Service is operated and is responsible for account, usage, security, analytics, support, billing, and service-administration data. Shared board owners decide what personal data they add to tasks, comments, checklists, and invitations.
For privacy questions, requests, or complaints, contact us at support@kanban.online. We may ask for information reasonably needed to verify your identity, authority, account relationship, or the scope of your request.
3. Information we collect
Information you or your workspace provide
- account and contact details, such as name, email address, Telegram username, Telegram ID, profile data, workspace role, and support messages;
- board, task, checklist, label, status, deadline, assignee, comment, invite, prompt, uploaded text, and other content entered into the Service;
- voice input, audio-derived text, or transcriptions when you use voice-related features through Telegram or another supported channel;
- billing, subscription, invoice, tax, plan, and transaction information if paid features are offered or used. Full payment card details are normally handled by payment providers rather than by KanbanBot.
Information collected automatically
- device, browser, IP address, approximate location, language, timezone, referral, and log data;
- feature use, board events, sync events, errors, performance, diagnostics, security events, and analytics data;
- cookie identifiers, local storage identifiers, and similar technologies used for security, preferences, analytics, and service improvement.
4. Purposes and legal bases
We process personal data to provide accounts, boards, task cards, comments, notifications, collaboration, web access, Telegram access, AI-assisted task creation, support, security, abuse prevention, analytics, billing, compliance, and product improvement.
Depending on the law that applies in Cyprus, our grounds may include performance of a contract, consent, legitimate business interests, compliance with legal obligations, protection of the Service and users, or another permitted basis. Where consent is required, you may withdraw it as allowed by law.
7. AI features and Telegram
When you use AI-assisted features, prompts, task text, board context, or related inputs may be processed to generate suggestions, tasks, boards, summaries, or other outputs. AI outputs may be inaccurate and should be reviewed before use for legal, financial, medical, safety, employment, or other high-impact decisions.
Telegram access depends on Telegram's platform, account, bot, and messaging systems. Telegram may process your Telegram account and message data under its own terms and privacy notices. KanbanBot is not responsible for Telegram's independent processing, outages, account decisions, or platform changes.
8. International transfers
KanbanBot, its providers, and infrastructure may process data in countries other than Cyprus. Where required, we use contractual, organisational, and technical safeguards intended to protect personal data during international transfers.
By using a globally delivered web and Telegram service, you understand that data may be routed, stored, supported, or accessed internationally as needed to operate, secure, and improve the Service.
9. Retention
We retain personal data for as long as reasonably needed to provide the Service, maintain accounts, support collaboration, comply with legal obligations, resolve disputes, enforce terms, prevent fraud or abuse, keep backups, and maintain security logs.
Deleted board content may remain for a limited period in backups, audit logs, anti-abuse systems, or archival records before it is overwritten or removed according to retention practices.
10. Your Cyprus rights
Depending on your location and the law that applies, you may have rights to access, correct, delete, export, restrict, object to, withdraw consent for, or complain about the handling of your personal data.
We will respond to valid requests as required by applicable law. Rights may be limited where necessary to protect other users, confidential information, legal claims, security, fraud prevention, backups, or compliance obligations.
11. Security
We use administrative, technical, and organisational safeguards designed to protect personal data against unauthorised access, loss, misuse, alteration, and disclosure. No online service can guarantee absolute security, and users are responsible for protecting their own devices, accounts, Telegram access, and credentials.
12. Children
KanbanBot is not intended for children below the age at which they can lawfully use online services or provide valid consent in Cyprus. If you believe a child has provided personal data without appropriate permission, contact us so we can review and respond.
13. Changes, complaints, and contact
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date. If changes are material, we will provide notice where reasonably practical.
You may contact us at support@kanban.online. You may also have the right to complain to the relevant privacy or data protection authority in Cyprus.