Privacy Policy

Konfigurator is operated by Kolosseum International Pty Ltd. Before app access, we record your affirmative agreement to the current Terms of Use and acknowledgement of this Privacy Policy. The record includes the server date and time, terms version, a fingerprint and copy of the accepted terms, a random browser identifier and, if you are signed in, your Clerk account identifier. Guest acceptance is linked to a browser identifier rather than a verified named identity.

These records are held in our Neon database to administer app access and establish which terms were accepted. A secure HttpOnly cookie remembers acceptance on your browser for up to one year. We require renewed acceptance when the terms change, the cookie expires or the account context changes. This acceptance is separate from marketing consent or project-sharing consent.

The current room study saves locally in your browser. When you explicitly submit your room and contact details from Review, they are sent through our configured lead-delivery service to Kolosseum. Browser storage may be removed by clearing site data. This does not remove an acceptance or enquiry record already held by Kolosseum.

Konfigurator requires email verification from the Screen step. Abstract API checks address deliverability, disposable-address signals and risk; a separate emailed link confirms control of the inbox. Until verification, new trial changes remain in the current tab without automatic saving. Verification links expire after 20 minutes. An HttpOnly browser cookie remembers the verified email for up to 180 days, separately for sandbox and live use. We pass confirmed contact details, the reached step and the separately chosen marketing preference through n8n for a private Kolosseum notification. Marketing is optional. The verified email prefills Stripe checkout, and purchase emails go to the purchase address. When you create your PRO drawing set, you confirm the email for its drawing confirmation and accept two statements; we record that email, the statements and when you accepted them. We retain the purchased room, equipment, adjustments and drawing settings for fulfilment, project history and support. A drawing confirmation includes your accepted statements, a concise room and equipment summary and a copy of your saved configuration. Choosing Leave and discard room removes the current local draft and session cookies; it does not erase existing purchase, drawing or legal acceptance records. You can request access, correction or deletion using the contact details below.

Vercel provides hosting and assets, Neon stores acceptance records, and Clerk supplies signed-in account identity. These providers may process data outside Australia under their applicable service arrangements. Acceptance records are retained only as reasonably necessary for access administration, security, dispute resolution and legal obligations. Contact contact@kolosseum.io to request access, correction or deletion, or to raise a privacy complaint; legal retention requirements may apply.

When you contact us via our website, email, or phone, we collect the information you choose to share, your name, contact details, and the nature of your enquiry. We do not operate forms that capture data without your knowledge.

If you visit our website, standard server logs may capture your IP address, browser type, and pages visited. We do not sell, share, or trade this information.

Information you provide is used solely to respond to your enquiry, fulfil an engagement, and maintain our working relationship with you. We do not use your contact information for marketing without your explicit consent.

For integrator and studio clients, project-related information is retained for the duration of the engagement and a reasonable period thereafter to support warranty queries, design revisions, or future project phases.

Confidentiality is not a policy item at Kolosseum, it is a founding principle. Client names, project addresses, system specifications, and design documentation are never disclosed to third parties without written authorisation.

Staff and contractors who access project materials are bound by confidentiality obligations. We operate under NDA where requested and apply the same standard of discretion regardless of whether a formal agreement is in place.

Our website uses third-party services including Google Analytics, Google Tag Manager, and Meta Pixel to understand site use and measure enquiries. These services may process device, browser, page, and interaction data under their own privacy policies.

We do not sell personal information or use affiliate links. Analytics and advertising measurement technologies may use cookies or pixels to attribute visits and enquiries.

We retain client and enquiry records for as long as is reasonably necessary to support the relationship. You may request deletion of your information at any time by contacting us directly, we will honour that request except where retention is required by law.

You have the right to access the personal information we hold about you, to correct inaccuracies, and to request deletion. To exercise any of these rights, use our Work email channel via /contact.

If you are located in Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles apply. If you are located in the European Economic Area, the GDPR applies to the processing of your data.

We may update this policy from time to time. Changes will be published on this page with a revised effective date. If you have an active engagement with us, we will notify you directly of any material changes.