Privacy Policy
This policy explains the personal data Agilist Information Technologies Ltd handles for this website, AnyKanban licenses and correspondence. Paddle handles personal data for online sales under its own privacy notice.
- Version
- 1.0
- Effective
- 10 September 2026
Controller
- Company
- AGILIST INFORMATION TECHNOLOGIES limited liability company for informatics, consulting and services (Agilist Information Technologies Ltd)
- Registered office
- Ulica Ede Murtića 4, 10000 Zagreb, Croatia
- Registration
- Commercial Court in Zagreb, MBS 080760591, VAT ID HR50638052915
- Contact
- support@anykanban.com
Data in AnyKanban
AnyKanban does not send us your work items, queries, account data, telemetry or error reports. Data the extension stores remains in your Azure DevOps organization. We have no standing access to it.
In that organization's Extension Data Service, the extension stores:
- board definitions, and the default starting values for new boards
- per-user view preferences
- board baselines, which record who set each one and when, and the IDs, titles and lane values of the work items each lane held at that moment
- a temporary copy of the open board, kept only while the page reloads
- aggregate usage counters, which hold numbers only, never a work item, title, query or person, and which an administrator can switch off, export or delete on the AnyKanban page in Organization settings
- when the evaluation started
- which board uses which of the fields an administrator added to an inherited process through the extension
- the license key
None of these records is sent to us.
The extension requests four Azure DevOps scopes.
vso.work_write- Reads, updates and creates work items. It also allows a field to be added to an inherited process, which happens only after an administrator has read the exact plan under Organization settings > AnyKanban in Azure DevOps and pressed Execute plan. No state, rule, backlog level or system process is changed, and nothing is removed
vso.extension.data_write- Stores the records listed above
vso.analytics- Reads work item history for aging calculations
vso.memberentitlementmanagement- Reads an aggregate access-level summary, only when an administrator presses Count users on the AnyKanban page in Organization settings
If you choose to send us a screenshot, export, log or other content with a message, we receive what you send.
Website data
Cloudflare processes ordinary request data such as your IP address, request time, requested address and user agent to deliver and protect this website. We rely on our legitimate interest in operating and securing the site.
We count visits with Cloudflare Web Analytics, whose script every page of this site loads. It sets no cookie and does not identify you. We rely on the same legitimate interest, in knowing how the site is used. We use no advertising and set no cookies of our own. The checkout loads Paddle's service and Paddle controls its cookies.
The contact form
The form at anykanban.com/contact collects three things: the email address you give us so we can reply, the message you write, and the subject you pick from its four options, which shows us what a message is about before we open it. It asks for nothing else, and there is no field for a name, a company, a job title or a telephone number.
A submission becomes an email to our support mailbox and nothing more. We store no copy in a database and keep no record of the visit, so what the form produces is ordinary correspondence and is kept for the period set out below. It travels through Cloudflare, which answers the form, and Microsoft, which carries the mail. Both already appear under Recipients and transfers.
Because anyone can use the form, Cloudflare counts how often each IP address submits it, to limit abuse, and keeps that count for no longer than a minute. The count stays with Cloudflare. It is not part of the message and we never receive it.
The legal basis is our legitimate interest in answering inquiries, or the contract where the message concerns one. You can write to support@anykanban.com or to the postal address instead of using the form.
Online purchases
Paddle.com Market Ltd is the seller and Merchant of Record for online purchases. Paddle collects and controls checkout, payment, billing and tax data under Paddle's Privacy Policy. Card details do not come to us.
Paddle gives us the details needed to issue and administer a license. These may include a company and contact name, email address, country, tax or registration number, Azure DevOps organization, declared paid-user count and order details. We process them to perform the license agreement and meet accounting obligations.
Other data we receive
When you contact us, we process your email address, any name you give, your message and any attachments to answer you and administer our relationship. The legal basis is the contract where the message concerns one, or our legitimate interest in answering inquiries.
For an individually signed business arrangement, we process the contact, company and transaction details supplied to prepare and administer it. The legal basis is taking requested steps before a contract, performing the contract and meeting accounting obligations.
Recipients and transfers
Cloudflare hosts this website, counts its visits and hosts our licensing records. Microsoft provides our email service. Our accounting providers receive records needed for bookkeeping and legal compliance. Public authorities receive data where the law requires it.
These providers may process data outside the European Economic Area. Paddle is established in the United Kingdom, which is covered by an EU adequacy decision, and its Privacy Policy describes its own transfers. Where required, transfers by Microsoft and Cloudflare use the European Commission's standard contractual clauses.
We do not sell personal data, use it for advertising or build profiles from it.
Retention
- Accounting records
- 11 years from the end of the business year they concern
- License records
- The license term plus six years
- Correspondence
- 24 months, messages sent through the contact form included
- Incomplete orders
- Until the order is completed or closed
We may keep data longer where the law requires it or while needed to establish, exercise or defend a legal claim.
Automated decisions
We do not use personal data for profiling or automated decisions that produce legal or similarly significant effects.
Your rights
You may ask for access, correction, erasure, restriction or portability of your personal data. You may object where processing rests on legitimate interests and withdraw consent where processing rests on consent. Some rights depend on the circumstances and applicable law.
Send a request to support@anykanban.com or to Ulica Ede Murtića 4, 10000 Zagreb, Croatia. We normally respond within one month. You may lodge a complaint with the data protection authority where you live or work, or with the Croatian Personal Data Protection Agency (AZOP).
For checkout, payment and billing data controlled by Paddle, use the link in your Paddle receipt, Paddle's buyer portal, or the privacy contact in Paddle's Privacy Policy.
Changes
We update this policy when our processing changes. The version and effective date above identify the current text.
Related documents
- Legal information Company, seller and contact details.
- Terms and Conditions The terms governing this website.
- End User License Agreement The terms that govern use of the software.
- Refund and cancellation information Where to manage an online subscription, cancellation or refund.