Skip to content
Krimnizo

Privacy Policy

Last updated: January 2025

1. Data Controller

Krimnizo Inc. is the data controller responsible for your personal data. We are based in the Netherlands. If you have any questions about how we handle your data, you can contact us at [email protected].

2. What We Collect

We collect the following categories of personal data when you use our services:

  • Account data:Username, email address, and password (hashed) provided during registration.
  • Usage analytics:Dashboard interactions, feature usage patterns, and performance logs necessary for operating and improving the service.
  • Payment information:Billing details processed through our payment provider. We do not store full card numbers on our servers.
  • Technical data:IP addresses, browser type, and device information collected for security and fraud prevention.

3. How We Use Your Data

We use your personal data for the following purposes:

  • Providing and maintaining your access to SS Ultimate
  • Processing payments and managing your subscription
  • Communicating with you about your account, support requests, and service updates
  • Detecting and preventing fraud, abuse, and security incidents
  • Improving our products based on aggregated, anonymised usage patterns
  • Complying with legal obligations

Our legal basis for processing is primarily contract performance (to provide the service you subscribed to) and legitimate interest (security, fraud prevention, service improvement). Where required by law, we will seek your consent.

4. Third-Party Services

We work with a small number of trusted third-party service providers:

  • Stripe:Used to process subscription payments. Stripe handles all payment card data under their own PCI-DSS compliant infrastructure. See Stripe's privacy policy at stripe.com/privacy.
  • Analytics:We may use privacy-respecting analytics tools to understand how customers use our dashboard. These tools are configured to minimise data collection and do not share data with advertisers.

We do not sell your personal data to any third party, and we do not use your data for advertising purposes.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. Account data is deleted within 30 days of account closure, unless we are required to retain it longer for legal or financial compliance reasons (typically up to 7 years for transaction records under Dutch tax law). Anonymised, aggregated usage data may be retained indefinitely for service improvement purposes.

6. Your GDPR Rights

As a resident of the European Economic Area, you have the following rights under GDPR:

  • Right of access:Request a copy of the personal data we hold about you.
  • Right to deletion:Request that we delete your personal data ("right to be forgotten"), subject to legal retention obligations.
  • Right to portability:Receive your data in a structured, machine-readable format and transfer it to another controller.
  • Right to object:Object to processing based on legitimate interest, including profiling for direct marketing.
  • Right to rectification:Request correction of inaccurate personal data.
  • Right to restrict processing:Request that we limit how we use your data in certain circumstances.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch data protection authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

7. Contact Us

For any privacy-related questions, requests, or concerns, please contact us: