Privacy Policy

Last updated: 23 March 2026

Data Controller

KPI Chief is the data controller for personal data processed through KPI Chief.

Contact: hello@kpichief.com

What Data We Collect

  • Name and email address
  • KPI submissions and associated data
  • IP addresses
  • Session cookies

Why We Process Your Data

We process personal data to operate the KPI Chief management platform, enabling your organisation to track, submit, and review key performance indicators.

Legal Basis

  • Legitimate interests: Operating a B2B SaaS platform for KPI management
  • Contractual necessity: Fulfilling our obligations under service agreements

Data Retention

  • Active data: Retained while your account is active
  • Audit logs: Retained for 7 years
  • Exports: Automatically deleted after 30 days

Data Processors

We use the following third-party processors:

  • Anthropic — AI summaries and analysis (USA, Standard Contractual Clauses)
  • Resend — Email delivery (USA, Standard Contractual Clauses)
  • Supabase — Database and authentication (EU West, Ireland)
  • Vercel — Hosting and deployment (EU West)

Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectification of inaccurate data
  • Erasure of your data
  • Data portability
  • Restriction of processing
  • Object to processing

To exercise any of these rights, contact us at hello@kpichief.com.

Supervisory Authority

You have the right to lodge a complaint with the Data Protection Commission (DPC) of Ireland: dataprotection.ie

Contact

For any privacy-related queries, email hello@kpichief.com.