Privacy policy

Last updated: November 8, 2026

Kanstela is a service of IGIS EDUCATION, LLC, a company registered in the State of Delaware (USA). This policy explains what data we process, why, and what you can do. Questions: contact@kanstela.com.

1. Who is responsible for your data

Each customer organization (school, company, association) has its own copy of the intranet. It decides who has access and what is published: it is the controller of its members’ data. Kanstela processes that data on its behalf, following its instructions, only to provide the service.

For people who contact us or subscribe, Kanstela is responsible for the data needed for that relationship (name, email address, billing).

2. Data we process

• Identification: email address, name and, if you sign in with Google or Microsoft, your account identifier with that provider. We never receive your Google or Microsoft password, nor access to your email, files or contacts.
• Profile: information you or your organization add (photo, job title, groups).
• Content: messages, articles, comments, events, files and images added to the intranet.
• Technical data: sign-in and security logs (date, IP address, device) used to protect accounts and fix errors.

3. Why we process it

To run your organization’s intranet, sign you in securely, send the emails and notifications you expect, back up the data and bill the subscription. We sell no data, show no ads and do not track your browsing.

4. Cookies

The intranet uses a single sign-in cookie, required to keep your session open. No advertising or third-party analytics cookies. This website sets none.

5. Where data is hosted

Each organization’s data is stored separately with Cloudflare, in data centers located in Europe. Sign-in and alert emails are sent by Mailgun (EU region). Voice dictation, if enabled, is processed by Cloudflare’s AI service. These providers act on our instructions and are bound by confidentiality.

6. Retention

Data is kept while the organization is subscribed. A backup is made every night and kept for 90 days. When a subscription ends, data is kept for 90 days to allow a restart or an export, then deleted. Sign-in sessions expire after 30 days at most.

7. Security

Encrypted connections, single-use and short-lived sign-in links and codes, full separation between organizations, permissions managed by each organization’s administrators, and the ability to sign an account out of all its devices.

8. Your rights

You can request access to your data, its correction, deletion or export. Contact your organization’s administrator first, or write to contact@kanstela.com: we reply within one month.

9. Changes

We may update this policy. The date of the last update is shown at the top of this page; customer administrators are notified of significant changes.