Privacy policy
Last updated: July 16, 2026
Who we are
Captrflow is an inspection and field-work platform operated by Komit, based in the Netherlands. This policy explains what personal data we process when you use the Captrflow web application, the Captrflow mobile app, or visit this website, and what rights you have under the EU General Data Protection Regulation (GDPR).
Data we process
- Account data — name, email address, and role, provided when your organization's administrator creates or invites your account.
- Work data — the content of inspection Flows and Jobs: form answers, photos, videos, signatures, and timestamps captured by your organization's operators. This data belongs to the organization (our customer); we process it on their behalf.
- Contact form data — name, email address, and message when you contact us through this website.
- Technical data — server logs (IP address, request metadata) kept for security and operations.
Why we process it
- To provide the service: authentication, running Jobs, generating reports and Share Links.
- To respond when you contact us (legitimate interest / pre-contractual steps).
- To keep the service secure and reliable (legitimate interest).
- To handle billing for paid subscriptions (contract).
We do not sell personal data and we do not use it for advertising.
Where your data lives
Captrflow is hosted on Microsoft Azure in the European Union (Germany West Central region). Photos, videos, and generated reports are stored in Azure Storage; application data is stored in Azure-hosted databases. Transactional email is sent through our email provider. Payment processing for subscriptions is handled by Stripe; we do not store card details ourselves.
Mobile app permissions
The Captrflow mobile app asks for camera and microphone access only to capture photos and videos for Jobs, and only when you start a capture. Captured media is uploaded to your organization's workspace and is not shared with any third party by the app.
Retention
Account and work data is kept for as long as your organization has an active Captrflow account, and deleted or returned after the account ends. Share Links expire automatically. Server logs are kept for a limited period for security purposes. Contact-form messages are kept only as long as needed to handle your request.
Your rights
Under the GDPR you can request access to, correction of, or deletion of your personal data, object to or restrict processing, and request data portability. If your data is processed as part of an organization's workspace, we may refer your request to that organization as the data controller. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Contact
For any privacy question or request, email info@komit.nl.