Legal
Last updated: March 2026
This policy explains what information kapkit.com collects, how it's used, and your rights. The short version: I collect the minimum needed to run the platform and respond to inquiries. I don't sell your data.
01
KapKit is the data controller for kapkit.com. If you have any questions about this policy or how your data is handled, reach out via the contact page.
02
When you create an account, the following is stored in a PostgreSQL database hosted on a dedicated server (Hetzner, Helsinki, Finland):
When you purchase a module (e.g., ServiceKit), we store a record of the purchase linked to your account. Payment processing is handled entirely by Stripe. We do not store your credit card number, CVV, or billing address.
If you buy Booking Kit and choose to connect GitHub for private source access, we collect the GitHub username you submit, normalize it, verify it with GitHub, and may store immutable GitHub account identifiers, invite status, timestamps, and revocation/audit metadata. This is used only to provide, reconcile, support, or revoke access to the Booking Kit install repository. Your submitted username is sent to GitHub for lookup and invitation. You can request correction or deletion, but purchase, license, fraud-prevention, and access-audit records may be retained where reasonably necessary.
Lesson completion progress is stored locally in your browser (localStorage). It is not transmitted to our servers.
When you submit the contact form, your name, email address, and message are sent via Web3Forms. This data is used solely to respond to your inquiry.
If you book a consultation, the following is stored in the database:
03
When you sign in, a session cookie is set to keep you logged in. These are HttpOnly, SameSite=Strict cookies that cannot be read by JavaScript. Sessions expire after 7 days of inactivity.
No analytics, advertising, or third-party tracking cookies are set. No retargeting pixels are loaded.
04
05
06
When you purchase and deploy ServiceKit or Booking Kit, the application you deploy stores your customers' data on your server. KapKit / kapkit.com has no access to, control over, or responsibility for data stored in your deployed instance. You are the data controller for your deployment. See the Terms of Service for details on your responsibilities.
07
Contact form submissions are retained only as long as needed to respond. Account and purchase records are kept for the lifetime of your account and for a reasonable period after deletion to comply with business record-keeping requirements. Booking records are kept for scheduling history. You can request deletion at any time.
08
You have the right to:
To exercise these rights, use the contact page.
09
If this policy changes in a material way, the updated date at the top of this page will reflect it. Continued use of the site after changes are posted constitutes acceptance of the updated policy.