Privacy Policy

Who is responsible

Kanttila Management, Arcisstrasse 43, 80799 Munich, Germany, is responsible for KIP. Privacy questions can be sent to the contact address below.

Information KIP processes

KIP processes only the information needed to provide the agency workspace, including:

• account identity, role, permissions, session, and security information;
• authorized Tasks, Projects, Agenda, notification, relationship, and audit information;
• Gmail messages, headers, labels, drafts, and attachments when an authorized user opens or changes Email;
• Google Contacts, Workspace Directory entries, and recent authorized correspondents used for contact suggestions;
• authorized Google Calendar, Drive, and Docs information needed for the requested KIP feature;
• privacy-safe operational and security diagnostics that exclude Email bodies, attachments, credentials, and tokens.

Why KIP uses this information

KIP uses information to authenticate users, enforce permissions, provide agency Tasks and communications, synchronize requested Google services, protect drafts and recent working state, diagnose failures, and secure the platform. KIP does not use this information for advertising or sell personal information.

Google user data

Gmail remains the canonical Email service and Google Drive and Docs remain the canonical file and document services. KIP accesses Google user data only to provide the user-facing Email, contact suggestion, Calendar, Drive, and Docs functions requested by authorized users.

KIP's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

Storage and caching

KIP stores operational metadata needed for permissions, indexing, relationships, synchronization, and recovery. It does not create a permanent second mailbox or Google Drive. Web and native caches are private, permission-scoped, bounded, disposable, and cleared or invalidated when access ends.

Sharing

Information is available only to authorized KIP users and to service providers needed to operate and secure KIP. Access is limited by role and mailbox or resource permission. Information is not shared for advertising and is not sold.

Retention

Canonical Google content follows the retention settings of the relevant Google account. KIP operational records are retained for legitimate agency operations, accountability, security, and legal needs, then deleted or de-identified when no longer required. Disposable caches and temporary attachments use shorter lifecycles.

Security

KIP uses server-side authorization, private cache controls, encrypted transport, protected credentials, audit records, and account-scoped access. No internet service can promise absolute security, but access is designed to fail closed when identity or permission cannot be verified.

Your choices

Authorized users may ask to review or correct their KIP account information and may revoke KIP's Google access from Google Account permissions.

Contact

For privacy questions, access requests, or deletion requests, contact info@kanttilamanagement.com.