Privacy Policy

KRONO Ltd (“Krono”, “we”, “us”, or “our”) operates krono-labs.com. We publish video courses and e-books on hardware regulatory compliance (CE marking, FCC authorization, and related markets), and offer a free compliance roadmap tool that helps you identify which requirements apply to your product.

Questions about this policy can be directed to [email protected].

Account data: When you create an account (including auto-created accounts on purchase), we store your email address and a hashed password. We never store plaintext passwords.

Payment data: Course and book payments are processed by Paddle. We receive a payment token and your email address confirming a completed transaction. We do not store card numbers, bank details, or any raw payment instrument data.

Course and book access records: We store which courses you are enrolled in, which books you own (including books included free with a course purchase), and your lesson and reading progress, so we can resume where you left off and grant access to purchased content.

Free roadmap tool data: The roadmap tool does not require an account. If you use it, we store the product details you provide (product name, product type, target markets, and questionnaire answers) and any files you optionally upload (such as spec sheets or photos) in order to generate your compliance roadmap. This data is linked to a browser session unless you are signed in.

Usage analytics: We collect anonymised aggregate data on course, book, and roadmap tool usage to operate and improve the service. This data is not linked to your identity.

Log data: Our servers collect standard access logs (IP address, browser type, pages visited, timestamps). These are retained for up to 30 days for security and debugging purposes.

We use your data solely to:

• Provide and operate courses, books, and the free roadmap tool
• Grant and maintain access to courses and books you have purchased, and deliver course artifacts (worksheets, templates) to enrolled students
• Generate your compliance roadmap from the information you provide
• Send transactional emails (purchase confirmation, account credentials, password reset)
• Detect and prevent fraud and abuse
• Comply with legal obligations

We do not use your data for advertising, profiling, or sell it to third parties.

Where the GDPR applies, we process your personal data on the following legal bases:

• Contract performance: Processing your email and payment token to deliver the course, book, or content you paid for.
• Legitimate interests: Security logging, fraud prevention, and service improvement analytics.
• Consent: Where you choose to submit product details or files to the free roadmap tool.
• Legal obligation: Where required by applicable law.

We share personal data with the following third-party processors only to the extent necessary to provide the service:

• Paddle: Payment processing for courses and books. Your email address and purchase details are transmitted to Paddle to process your transaction. We do not store card numbers or raw payment instrument data. Privacy Policy
• Resend: Transactional email delivery. Your email address is transmitted to Resend solely to deliver purchase receipts, account credentials, and notifications. Privacy Policy
• Cloudflare (R2): Storage of course videos, downloadable course artifacts, and book files. Files are served to you via short-lived signed links generated only after we verify you own or are enrolled in the relevant content.
• Cloud infrastructure provider: Hosting and database services. Data is stored on servers within the EU/EEA where possible.

We do not share your data with any other third parties without your explicit consent, unless required by law.

• Account data (email, password hash): retained while your account is active. You may request deletion at any time.
• Course enrollment, book ownership, and progress records: retained while your account is active, so you retain access to content you have purchased.
• Free roadmap tool data (product details, uploaded files): retained for as long as your roadmap project exists. You may request deletion at any time even if you never created an account.
• Payment records (token, email, timestamp): retained for 7 years for financial compliance purposes.
• Server access logs: 30 days.
• Anonymised analytics: indefinitely (no personal data).

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and personal data
• Object to or restrict certain processing
• Receive your data in a portable format
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email [email protected]. We will respond within 30 days.

We use one strictly necessary cookie to maintain your login session (NextAuth). We also use Google Analytics, configured in cookieless mode — it does not set any cookies or persistent identifiers and cannot track you across sites or visits. We do not use advertising or tracking cookies of any kind.

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (TLS), hashed password storage (bcrypt), and access controls on all databases. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Krono is intended for use by businesses and professionals. We do not knowingly collect personal data from individuals under 16 years of age.

We may update this policy from time to time. When we do, we will update the effective date at the top of this page. Material changes will be communicated by email to registered users.

For any privacy-related questions or requests:
KRONO Ltd
[email protected]