Privacy Policy
Last updated: November 9, 2026
This Privacy Policy explains how VKT SaaS Pro (the "Service"), operated by VKT ("we", "us"), collects, uses, stores and protects your personal data when you visit remind.annmax1983.com or use the VKT SaaS Pro application at app.remind.annmax1983.com.
1. Data controller
VKT operates the Service and is the controller of the personal data described below. Contact: support@remind.annmax1983.com.
2. Data we collect
2.1 Account data
- Email address (account owners) or login name (member accounts)
- Password, stored only as a cryptographic hash — never in plain text
- Role, account status, subscription and billing status
- Preferred time zone and interface language
2.2 Business data you enter
Depending on your product line: worker records and their certificates (including uploaded scans/photos), equipment and maintenance records, tasks and project groups, and reminder settings. This data typically relates to your employees or subcontractors — when you enter personal data about your staff or subcontractors, you act as the data controller and are responsible for having a lawful basis for entering it; we process it on your behalf as a processor.
2.3 Billing data
Payments are processed by our payment provider Creem. We do not store full card numbers. We store your Creem customer identifier, subscription plan, billing cycle dates and payment status. If you open the customer billing portal, we request a one-time portal link from Creem using your customer identifier.
2.4 Technical data
- IP address and login timestamps, used for security and rate limiting
- Cloudflare Turnstile captcha verification results on login (verification happens on Cloudflare's servers; we receive only a pass/fail result)
- Delivery status of emails we send you
- Operational audit logs recording changes made to records in your account
During registration we process your email address, chosen product line and plan, and a temporary registration reference that expires within 24 hours if checkout is not completed.
This site uses no advertising trackers and no third-party analytics platform. Visit statistics come from a first-party service we operate ourselves: the script is loaded from annmax.ccwu.cc and reports to api.annmax.ccwu.cc, both of which we control. It records aggregate page views, referrers and device types only — it does not build cross-site profiles, share data with ad networks, or identify individuals.
2.5 Cookies and local storage
- Interface language (localStorage, key
locale) — remembers the language you picked. - Sign-in session (localStorage, key
jwt) — the credential that keeps you signed in is stored in your browser only. - Anonymous visitor ID — the analytics service may use a cookie or local storage to distinguish unique visitors when counting visits.
We use no advertising cookies and no cross-site tracking. That analytics service is operated by us and is not a third-party processor. You can clear this data in your browser at any time; clearing the sign-in credential signs you out.
3. How we use your data
- To provide the Service: account management, expiry scanning, reminder emails, reports and exports
- To process payments and manage subscriptions
- To send transactional emails (registration password, password reset, expiry reminders)
- To secure the Service and prevent abuse
- To comply with legal obligations
We do not sell your data and we do not use it to train AI models.
4. Legal bases (EEA/UK users)
Where the GDPR applies: performance of a contract (Art. 6(1)(b)) for providing the Service; legitimate interests (Art. 6(1)(f)) for security and abuse prevention; consent (Art. 6(1)(a)) where required, e.g. for optional communications.
5. Email communications
Email is sent from the domain annmax1983.com (e.g. from VKT SaaS Pro <noreply@remind.annmax1983.com>) via the transactional email provider Resend. We send only transactional email:
- account creation (your initial password) and password resets;
- expiry reminder emails tied to your data, up to the monthly alert quota of your plan (500 emails/month on all current plans). If the quota is exhausted, reminder sending pauses until the next billing cycle — all other features keep working. Reminder delivery respects your configured time zone and quiet hours (no reminders between 00:00 and 07:00 local time).
We do not send marketing email. You can reduce reminder volume in your reminder settings, or cancel your subscription to stop reminders entirely.
6. Data sharing and processors
We share data only with the processors necessary to run the Service:
- Cloudflare — hosting, CDN, DDoS protection, object storage for uploaded attachments (Cloudflare R2), and captcha (Cloudflare Turnstile)
- Creem — payment processing and customer billing portal
- Resend — transactional email delivery
We may disclose data if required by law, or as part of a merger or asset sale, with notice where permitted.
7. International transfers
Our processors operate globally (Cloudflare and Resend may process data outside your country of residence). Where required, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses implemented by our processors.
8. Retention
- Account and business data are retained while your subscription is active and for 90 days after subscription expiry or cancellation, after which they may be permanently deleted. Once a subscription has expired, sign-in is limited to the Billing page so you can renew; when a refund has been granted and the account frozen, sign-in is blocked entirely. During that retention period the data is held by us but is not readable by you; renewing restores access, and you may request a copy of your data at any time under Section 9.
- Reminder/sending logs are retained for up to 12 months for deduplication and audit purposes.
- Operational audit logs are retained as append-only records for account activity history.
- You can export your data (CSV) at any time while your account is active. Uploaded attachments (certificate scans, maintenance reports, task photos) are stored in Cloudflare R2 object storage; the account owner should download and archive any attachments they need before the retention period ends.
9. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection regarding your personal data, and withdraw consent. To exercise these rights, email support@remind.annmax1983.com. EEA/UK users may also lodge a complaint with their local supervisory authority.
10. Security
We protect data with encryption in transit (TLS), hashed passwords (the initial registration password is generated randomly and emailed once; it is never stored in plain text), tenant isolation (each account's data is segregated by account ID, and business data is physically isolated per product line), JWT-based session control, captcha-protected login, and Cloudflare-managed infrastructure. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
11. Children
The Service is intended for business use and is not directed at children under 16. We do not knowingly collect data from children.
12. Changes to this policy
We may update this Privacy Policy. Material changes will be announced on the site or by email (see the changelog). The "Last updated" date above reflects the current version.