Privacy

Two kinds of people

Team members have an EkhaneMark account and use the dashboard. Clients have an account too, and leave feedback on a website after the team approves them; they only see the projects they were let into.

What we collect from team members

• Name, email and password (stored as a one-way hash), or your Google account's name and email if you sign in with Google.
• The workspaces you belong to, your role, and what you do in them: projects, replies, status changes.
• Your IP address and browser, kept with your sign-in sessions so you can be signed in securely.

What we collect when someone leaves feedback

• What they write, record or attach.
• A screenshot of the visible part of the page. Password fields, card fields and anything the site marks data-ekhanemark-private are blacked out before the screenshot leaves their browser.
• The page address, browser, operating system, screen size and language, so developers can reproduce the problem.
• Their name and email from their account (used to show who said what, and to tell them about their feedback).

What we don't do

• Visitors of a website with EkhaneMark installed are not tracked. Unless someone signs in on the site, the script makes no requests and stores nothing.
• No advertising, no selling data, no analytics or tracking scripts in the widget.
• Feedback is only visible to the workspace that owns the project, and to the clients it approved.

Cookies and storage

The dashboard uses one sign-in cookie. The widget stores its access token in the browser's session storage (or local storage on development and staging addresses), plus a few display preferences. No third-party cookies.

How long it's kept

• On the Free plan, feedback and its files are deleted after 30 days. On paid plans, for as long as the plan says (see Pricing).
• Deleting feedback or a project deletes its screenshots, voice notes, images and files.
• Unused invitations are deleted a week after they expire.

Who processes it

Data is stored in the EkhaneMark database and file storage of the server that runs this installation. Emails are sent through the email provider it is configured with. If a workspace connects Jira, feedback it sends there is handled by Atlassian under that workspace's own Jira account.

Your choices

• Team members can change their name and password in Account, and leave a workspace by asking an owner.
• Clients can ask the team that invited them to delete their feedback.
• To have an account and its data deleted, or to ask anything about this page, contact the team that runs this installation.

Technical details of access control are in Security and privacy.