Privacy

Krolda is run by Spotbo, Inc. This page describes exactly what the site collects, which is one form and nothing else. There is no analytics script, no advertising pixel, no session recording and no cookie on this site.

What the form collects

The early-access form at /welcome asks for a company domain, which certification schemes the site holds, how many sites the group runs, roughly how many documents it receives a month, a name, a role, a work email address, a country, an optional phone number and whether the respondent is willing to run part of an audit on the product. The email address and the domain are the only two required to submit.

Nothing else is collected. The form does not read a browser fingerprint, a location, a referrer or an IP address into the record, and the site sets no cookie of its own.

Why, and on what basis

Krolda is not a shipping product. The form exists to find out whether the product should be built and to contact the people who said they want it. The lawful basis is legitimate interest in a business-to-business context: the details asked for are professional ones, and the reply is about the thing that was asked for. Nothing is used for advertising and nothing is sold or shared with a third party for their own purposes.

Where it is stored and who reads it

A submission is appended as one line to a file on the server that runs this site. It is not in a public repository and is not copied to any network drive. One notification email is sent to krolda@vcorp.co through Resend, which is the email provider and processes it only to deliver that message. No other service receives the data: no CRM, no spreadsheet, no analytics product.

The people who read it are the people building Krolda, which today is a small team at Spotbo, Inc. The data is held in the United States, where the server and the email provider are.

How long it is kept

Until the early-access programme ends or the person asks for it to be deleted, whichever comes first. When the programme ends, the file is deleted. There is no archive of it anywhere else.

Asking for a copy, a correction or a deletion

Email krolda@vcorp.co from the address used on the form, or name it in the message. A copy of everything held about the sender, a correction, or a deletion will be sent or made within thirty days. No account or verification step is required beyond identifying the record. Anybody in the United Kingdom or the European Union also has the right to complain to their data protection authority.

The recall data on this site

The FDA recall records published under /recalls are public records released by the U.S. Food and Drug Administration in the public domain. They name companies rather than individuals, and Krolda publishes them as the agency published them, with a hazard classification and a clause mapping added. Neither addition is an FDA determination. A firm that believes a record is wrong should take it up with the FDA, which is the source; if a page here misrepresents a record, email krolda@vcorp.co and it will be corrected.

Changes

If the form starts collecting something else, or the data starts going somewhere else, this page changes at the same time. It is written from the code that runs the intake rather than from a template, so it describes what actually happens rather than what a site of this kind usually reserves the right to do.

Questions: krolda@vcorp.co