Privacy policy
Last updated: 27 October 2026
This policy explains what CinderTek ("we") collects when you use a CinderTek account at accounts.cindertek.com, apps.cindertek.com and CinderTek apps that sign in through it, and what we do with it. CinderTek is responsible for this information (the "data controller") and can be reached at contact@cindertek.com.
What we collect
- Account details: your email address and name. If you sign in with Google, we receive your name, email address and Google account ID from Google. We do not receive your Google password and we do not access your Gmail, contacts, files or anything else in your Google account.
- Business details: the names of businesses you create, the people you invite, and their roles.
- Security records: when you sign in, from which IP address and browser, your active sessions, and a log of security-related actions (for example sign-ins, invitations and member changes).
How we use it
- To sign you in, keep your account secure and let you use CinderTek apps.
- To send emails you ask for: sign-in codes and invitations. We do not send marketing emails.
- To detect and prevent abuse, such as repeated failed sign-in attempts.
We do not sell your information and we do not use it for advertising.
Who processes it for us
- Cloudflare hosts our account service and its database.
- Netlify hosts our web pages.
- Resend delivers our sign-in and invitation emails.
- Google provides "Continue with Google" sign-in, if you choose it.
Google user data
When you choose "Continue with Google", we request only the basic sign-in permissions (openid, email and profile). We use that information only to sign you in and to show your name and email in your account. CinderTek's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not share it with anyone except the service providers listed above, and never use it for advertising.
Legal basis
Where data-protection laws such as the GDPR apply, we process your information because it is needed to provide the account you asked for (contract), and to keep the service secure and prevent abuse (legitimate interests).
Where your information is stored
Our service providers may store and process your information in countries other than your own. We use only established providers that protect information with industry-standard security, including encryption in transit.
Your rights
You can ask us to access, correct, export or delete your information, or object to how we use it. Email contact@cindertek.com and we will reply within 30 days. If you are in the EU or UK, you may also complain to your local data-protection authority.
Security
Connections are encrypted (HTTPS). Sign-in codes and session keys are stored only in hashed form, sign-in attempts are rate-limited, and sensitive actions require a recent sign-in.
Children
CinderTek accounts are meant for businesses and are not intended for children under 16. We do not knowingly collect information from them.
Changes to this policy
If we make significant changes, we will update the date above and tell account owners by email.
Cookies
We use one essential cookie per site to keep you signed in. It is not used for tracking or advertising. Sessions end after 14 days without use, or 30 days at most.
Keeping and deleting your information
We keep your account information while your account exists. You can sign out of all devices at any time from your account page. To delete your account and its information, email contact@cindertek.com from the address on the account.
Contact
Questions about this policy: contact@cindertek.com.