Last updated: 8 July 2026
01Who we are
The controller of your personal data is Flare Vision Sp. z o.o., ul. Zamknięta 10/1.5, 30-554 Kraków, Poland, entered in the register of entrepreneurs of the National Court Register (KRS) under number 0001205614 by the District Court for Kraków-Śródmieście in Kraków, XI Commercial Division of the KRS, NIP 6762706919, REGON 543255030, share capital PLN 5,000.00 ("we", "Flare Vision"). Kilnio is our product. You can reach us at info@kilnio.co.
02What data we process, and why
- Contact form and email. If you write to us (name, email, company, message), we process it to answer you and follow up on your request. Legal basis: our legitimate interest in responding to enquiries (art. 6(1)(f) GDPR), and taking steps prior to entering into a contract where your enquiry concerns using Kilnio (art. 6(1)(b) GDPR).
- Account data. If a workspace is set up for you, we process your name, email, role and language preference to provide the service and secure access to it (art. 6(1)(b) GDPR).
- Workspace content. The records, files and other content that Kilnio customers store in their workspaces belong to the customer. For that data the customer is the controller and Flare Vision acts as a processor under a data processing agreement. We only process it to provide the service, and we never use it to train AI models.
- Technical data. Our infrastructure keeps standard server logs (IP address, time, requested URL, user agent) to run the service securely, prevent abuse and diagnose faults (art. 6(1)(f) GDPR).
03Cookies and local storage
This marketing site sets no cookies and uses no analytics or advertising trackers. Fonts and all other assets are served from our own infrastructure. The Kilnio application (console.kilnio.co) uses strictly necessary browser storage to keep you signed in; it is not used for tracking.
04Who receives your data
We use a small set of service providers (sub-processors) to run Kilnio:
- Amazon Web Services EMEA SARL — hosting and storage, data centre in Frankfurt, Germany (EU).
- Anthropic — the AI features (spreadsheet import, "Ask Kilnio"). Content is sent to Anthropic only when you actively use an AI feature, and is not used to train their models.
- Cloudflare — DNS and network security in front of the service.
Where a provider processes data outside the European Economic Area (for example Anthropic in the United States), the transfer is protected by the European Commission's Standard Contractual Clauses or an adequacy decision such as the EU-US Data Privacy Framework.
05How long we keep data
- Contact enquiries: as long as needed to handle your request, at most 24 months after our last exchange.
- Account data: for the duration of the service agreement and afterwards for as long as legal claims or obligations require.
- Workspace content: retained and deleted according to the customer's instructions and our data processing agreement.
- Server logs: up to 12 months.
06Your rights
Under the GDPR you can ask us for access to your data, a copy of it, correction, deletion, restriction of processing, or transfer to another provider, and you can object to processing based on legitimate interest. Write to info@kilnio.co and we will respond within a month. You also have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
07Changes
We will update this policy when our practices change and adjust the date at the top. Material changes affecting workspace customers are announced to account owners by email.