Privacy notice

Updated 8 October 2026. This notice covers the private KREYA OS workspace at os.kreya.design.

Who handles your information

KREYA, KVK 80939805, Kasteellaan 345, 2516 BJ, The Hague, The Netherlands operates this workspace. Contact info@kreya.design about your information or this notice.

What the workspace uses

KREYA OS stores account names, email addresses, profile images, roles, workspace membership and sign-in records. It also stores information you or your workspace colleagues add: projects, tasks, messages, attachments, brand assets, billing details, invoices, contracts and team profile details, including optional birthdays. These records support account access, collaboration, service delivery, billing, agreements and security.

Workspace content is visible to people authorized for that workspace or function. Owners have administrative access; staff access follows their assigned roles and permissions. Mentions and enabled notifications may share relevant message or task details with their intended recipients. Do not upload information you are not authorized to share with those people.

Google sign-in

If you choose Google sign-in, Google provides your account identifier, email address, email verification status and basic profile information, such as your name and profile image, to Supabase Authentication. We use this information to authenticate you and connect you to your invited KREYA OS account. Google credentials are handled by Google; KREYA OS does not receive your Google password.

This sign-in connection does not request access to Gmail, Google Drive or Google Calendar. Google account information is not used for advertising or sold. You can remove the connection in your Google Account settings. Revoking Google access does not automatically delete your existing workspace or business records; contact KREYA to request deletion.

Service providers

Vercel hosts the application. Supabase provides authentication, the database and file storage. Resend delivers service emails. Stripe processes subscription payments and billing information; payment card details are entered through Stripe. SignWell processes agreements and signing records when electronic signing is used. Slack receives notifications for configured workspace channels. Google processes Google sign-in when you choose it. Providers process relevant information to deliver these services under their own applicable terms and privacy notices.

Service providers may process information outside your country. Contact KREYA for information about the providers and transfer safeguards relevant to your workspace.

Storage and retention

Essential cookies maintain your session and authentication security. The application also stores interface preferences in your browser. Hosting and authentication services process technical information such as IP addresses and security logs to operate and protect the service.

Workspace records are retained while needed to provide services, maintain business records, resolve disputes or protect accounts. Archiving a workspace or marking an item deleted does not by itself erase every database record, attachment, audit record or provider backup. Financial and agreement records may need to be retained after account closure. Contact KREYA to discuss deletion and the retention requirements for specific records.

Your choices

You can ask KREYA to access, correct, export or delete your personal information, or to restrict or object to its use where applicable. We may need to verify your identity and retain records where required by law. You can also contact the Dutch Autoriteit Persoonsgegevens or your local data protection authority. We will update this notice when the service's data practices change.