Privacy notice

Productomat is operated by Kinetal. Contact kinetal.systems@gmail.com about your data, access, correction or removal.

Account and hosted project data

Productomat processes your email address, username, password hash, sessions and security records to provide accounts, verify email, protect access and recover passwords. Hosted projects and their membership information are stored in the server database. Project access follows owner and member permissions. Operational and security records may include request metadata such as IP addresses.

Browser storage

Browser-local projects and preferences are stored in your browser profile on the Productomat app’s origin. They can remain after sign-out and are shared by accounts using that profile. Clearing browser storage can erase them. They do not automatically move to another domain or device. Authentication uses cookies to maintain your session.

Google Drive data

Only connect Google Drive if you want the snapshot feature. Productomat requests your Google email address to identify the connected account and the drive.file permission to work with files created by or made available to this app, rather than unrestricted access to your Drive.

The server processes file names, metadata and project snapshot contents to list, save, verify and restore your snapshots. Snapshot files are stored in your Google Drive; restored browser-local projects are stored in your browser. Google access and refresh tokens are encrypted in the server database so your connection can continue without repeated consent while valid.

Google data is used to provide these user-facing storage features, not for advertising or sale. Productomat's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Service providers

Railway runs the application, Neon stores the hosted database, and Resend delivers account verification and recovery emails. Google processes connected Drive requests. Cloudflare serves the public information pages and processes network request metadata to deliver and protect that site. These providers process the data needed to deliver their services. The app may also request Google-hosted fonts, exposing network request metadata to Google. Operator database backups are encrypted and may be kept off-device in Google Drive, separately from users' project snapshots.

Retention, deletion and disconnection

Hosted data remains until it is removed through supported product operations or operator handling. There is no automatic account-expiry or fixed backup-deletion schedule currently promised. Backups and security records may outlast deletion of current project records; ask the operator about copies and retention when requesting removal.

Project owners can delete hosted projects. Remove browser-local copies in each browser separately. Downloaded exports and Google Drive snapshots must also be managed separately. Disconnecting Drive removes the stored Productomat connection; it does not delete Drive files or revoke Google's grant. You can revoke access in your Google account connections.

There is no self-service account deletion yet. Email the contact above to request account removal or a data export; we will need to verify your identity. Do not email project contents or secrets. Removing live records does not automatically erase older backup copies.

Changes

This notice describes the current beta. Review the updated date for changes and contact us if you need clarification before storing data.