Privacy Policy

Last updated: May 2026

Kagox is a service of MeijdenMedia, located at Ravelijn 28, 4194CP Meteren, the Netherlands (hereinafter: "Kagox", "we", "us"). This privacy policy explains what personal data we collect, why we collect it, and what rights you have under the General Data Protection Regulation (GDPR).

Questions? Contact us at info@kagox.io.

1. Who are we?

Data controller
MeijdenMedia, trading under the name Kagox
Ravelijn 28, 4194CP Meteren
The Netherlands
Email: info@kagox.io

2. What data do we collect?

We process the following categories of personal data:

Account data: first name, last name, and email address.
Role and organisation data: the agency you belong to and your role within it (employee or creator).
User-uploaded content: photos, videos and documents you attach to tasks or messages within the app.
Device data: push notification token of your mobile device, required to send you notifications.
Usage data (website): anonymised visitor statistics via Google Analytics (IP address, page views, device type).

We do not collect special categories of personal data (such as health data, political opinions or biometric data).

3. Why do we process your data?

3.1 Performance of a contract

We use your name, email address and role data to give you access to the Kagox platform, authenticate you via a login link (magic link), and deliver the service for which your agency holds a subscription. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

3.2 Transactional emails

We send emails directly related to your use of the service, such as login links and notifications about your account or activity. You cannot unsubscribe from these emails while you are using Kagox. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

3.3 Push notifications

With your permission we send push notifications to your device about task updates and deadlines. You can withdraw this permission at any time via your device settings. Legal basis: consent (Art. 6(1)(a) GDPR).

3.4 Newsletter

With your explicit consent we occasionally send you an email about updates and new features of Kagox. You can unsubscribe at any time via the unsubscribe link in any newsletter or by emailing info@kagox.io. Legal basis: consent (Art. 6(1)(a) GDPR).

3.5 Website analytics

On our website kagox.io we use Google Analytics to gain insight into visitor behaviour. We have enabled IP anonymisation and do not share data with Google for advertising purposes. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

4. How long do we retain your data?

Account data: for as long as your account is active. After deletion of your account, your personal data will be erased within 30 days, unless we are legally required to retain it for longer.
Uploaded files: for as long as the deliverable or task they were uploaded for is active on the platform, or until you or your agency deletes them.
Newsletter: until you unsubscribe.
Google Analytics data: 14 months by default (retention period managed by Google).

5. Who do we share your data with?

We do not sell your personal data and do not use it for advertising purposes. We work with the following processors with whom we have data processing agreements:

Expo (Expo Technology, Inc.) — for sending push notifications to iOS and Android devices.
Google LLC — for website analytics (Google Analytics) and email delivery.
Cloud storage provider — for storing user-uploaded files.

Within the platform your name and email address are shared with colleagues within your agency, to the extent necessary for collaboration.

Some of the above parties are located outside the European Economic Area (EEA), in particular in the United States. Transfers take place on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission, or on the basis of an adequacy decision.

6. Your rights under the GDPR

You have the following rights regarding your personal data:

Access: you can request what data we hold about you.
Rectification: you can have incorrect data corrected.
Erasure: you can request deletion of your data ("right to be forgotten").
Restriction: you can request that we restrict the processing of your data.
Portability: you can request your data in a structured, commonly used format.
Objection: you can object to processing based on legitimate interest.
Withdrawal of consent: where processing is based on consent, you may withdraw it at any time.

Send your request to info@kagox.io. We will respond within four weeks.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): www.autoriteitpersoonsgegevens.nl.

7. Security

We take appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS/TLS), secure storage of access tokens, and restricted access to production systems.

8. Cookies

Our website uses functional cookies and analytical cookies (Google Analytics). Analytical cookies are processed in anonymised form. You can disable cookies via your browser settings, although this may affect the functionality of the website.

9. Changes to this policy

We may update this privacy policy from time to time. For material changes we will notify you by email or via a notice in the app. The date of the last update is shown at the top of this page.

10. Contact

For questions about this privacy policy or your personal data, please contact us at:
info@kagox.io
MeijdenMedia / Kagox
Ravelijn 28, 4194CP Meteren
The Netherlands