Privacy Policy

Effective Date: 2026/07/08

At Open2b Software, we believe that data integrity and privacy are the foundation of trust. As a warehouse-native Customer Data Platform, we apply the same principles of security and transparency to our own website and cloud services that we build into our product.

This Privacy Policy explains how we collect, use, and protect your information when you visit our website www.krenalis.com, interact with our contact forms, or subscribe to the Krenalis Managed Cloud platform (the "Service").


Important Core Architecture Note: Warehouse-Native Cloud

Krenalis Managed Cloud operates strictly on a warehouse-native architecture. This fundamentally alters how data privacy is handled compared to traditional Customer Data Platforms (CDPs):
• No Ingestion or Storage of Your End-User PII: Krenalis Managed Cloud does not copy, duplicate, ingest, or permanently store any behavioral profiles, transaction histories, or personally identifiable information (PII) belonging to your end-user customers onto Krenalis-owned infrastructure.
• In-Flight Processing Only: Any end-user customer data processed through Krenalis connectors passes strictly "in-flight" (transiently processed in volatile server memory) or is computed directly within your own secure cloud data warehouse environment (e.g., Snowflake). Krenalis retains zero persistence of this data once a synchronization pipeline run concludes.


  1. Data Controller & Data Processor Roles
    The Data Controller for this website and account management data is:
    Open2b Software snc
    via di Gello 110/C
    56038 Ponsacco (PI)
    Italy
    Contact email: info@open2b.com
    Open2b Software snc determines the purposes and means of processing personal data collected through this website, including usage and interaction data collected through Krenalis's event tracking technology for analytics purposes.

    Open2b Software (Krenalis) as a Data Processor: To the extent that cloud orchestration metadata, workspace definitions, or transient pipeline transit involve your end-user personal data, Open2b Software acts strictly as a Data Processor on your behalf. These activities are governed by our dedicated Data Processing Agreement (DPA).
  2. Information We Collect
    We collect information that you voluntarily provide, certain usage data through analytics, and technical configurations necessary to securely host and operate our Managed Cloud environment.
    • Contact and Account Information: when you fill out our contact forms, request a demo, or register for a Krenalis Managed Cloud account, we collect your name, professional email address, company name, account credentials, and any information you include in your messages.
    • Technical and Cloud Service Data: to orchestrate data movement safely, the Service processes and stores warehouse connection credentials (connection strings, API keys, service account tokens, or database credentials which are fully encrypted at rest and in transit) and orchestration metadata (system configuration data, table schemas, identity mapping definitions, synchronization schedules, and pipeline execution logs).
    • Usage and Behavioral Data: we collect information about how users interact with our website, dashboard, and documentation, including pages visited, buttons clicked, searches performed, navigation paths, session timestamps, and similar interaction events.
      This information may include technical identifiers such as IP address, browser type, device information, and approximate geographic location.
      This data is collected using Krenalis's event tracking technology and may be transmitted to our analytics service provider for statistical analysis and visualization of user interactions.
    • Technical Log Data: like most websites and cloud services, our servers automatically log basic technical information (such as IP address, browser type, and time of access) to ensure the security, stability, and correct functioning of the infrastructure.
  3. Purpose of Processing
    We use your data strictly for the following purposes:
    • To respond to your inquiries and deliver the Service: we process your information to provide the assistance you requested or to operate, maintain, and optimize the Krenalis Managed Cloud dashboard and API layers.
      (legal basis: performance of a contract or pre-contractual measures – Art. 6(1)(b) GDPR)
    • Website analytics and product improvement: we analyze how users interact with our website and cloud interface in order to understand usage patterns, improve usability, optimize content, and enhance our services.
      (legal basis: consent – Art. 6(1)(a) GDPR)
    • Security: to protect our website and cloud hosting infrastructure from cyber threats and ensure global operational stability.
      (legal basis: legitimate interest – Art. 6(1)(f) GDPR)
  4. Third-Party Data Sharing & Sub-processors
    We do not sell, rent, or trade your personal information to third parties.

    Certain usage and interaction data collected through our website and documentation may be shared with trusted third-party service providers who assist us in analyzing how our services are used.

    To reliably deliver the Managed Cloud environment, we utilize trusted third-party infrastructure sub-processors bound by strict data protection agreements:
    • Cloud Infrastructure & Hosting Providers: Used to securely host the platform dashboard, API gateways, metadata databases, and orchestration layers within secure regions.
    • User Authentication Providers: Used for secure identity verification, workspace access management, and multi-factor authentication.
    These providers act as data processors under applicable data protection laws and are contractually bound to process personal data only in accordance with our instructions.
  5. International Data Transfers
    Some of our third-party service providers or cloud infrastructure systems may process data outside the European Economic Area (EEA).
    Where such transfers occur, we ensure that appropriate safeguards are in place to protect your personal data, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission, in accordance with Articles 44–49 of the GDPR.
  6. Data Retention
    We retain the information submitted via our contact forms only for as long as necessary to fulfill your request or to manage a potential business relationship.

    Cloud Account Data: Core account data, workspace metadata, and encrypted credentials are retained for as long as your Krenalis Managed Cloud subscription is active. Upon termination of service, all credentials, configurations, and schemas are permanently deleted from our active databases within thirty (30) days.

    Usage and behavioral analytics data are retained only for as long as necessary to fulfill the purposes described in this policy. Technical logs are typically deleted within 90 days.
  7. Data Security and Location
    Your account data and cloud metadata are stored on secure servers located within the European Economic Area (EEA). In line with our Warehouse-Native philosophy, we implement rigorous technical and organizational measures (including AES-256 encryption at rest, TLS 1.3 encryption in transit, and strict role-based access controls) to prevent unauthorized access, loss, or misuse of your information.
  8. Your Rights (GDPR)
    Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
    • Access: you can request a copy of the data we hold about you.
    • Rectification: you can ask us to correct inaccurate information.
    • Erasure ("Right to be forgotten"): you can request the deletion of your data.
    • Objection/Withdrawal: you can object to the processing of your data or withdraw your consent at any time.
    To exercise any of these rights, please contact us at info@open2b.com.
  9. Updates to this Policy
    We may update this Privacy Policy from time to time to reflect changes in our practices, our cloud offerings, or for legal reasons. Any updates will be posted on this page with an updated "Effective Date".