Personal data in Kentico Cloud

This article lists the types of personal data handled by Kentico Cloud and its flow in the system, as well as the data exchanged with third party services. Kentico Cloud uses Microsoft Azure to store all customer data.

Table of contents

    Personal data

    You can use the following information when analyzing the GDPR (General Data Protection Regulation) compliance of your projects. The regulation applies to organizations that collect or process data from EU residents or cooperate with EU-based organizations that process the data on their behalf.

    For example, you need to comply with the GDPR in the following cases:

    • Your company uses Kentico Cloud and is based in the EU.
    • You provide products or services to customers based in the EU.

    For more information about the GDPR, see the Official Journal of the European Union.

    Disclaimers

    • This page only covers the built-in Kentico Cloud functionality. You also need to check any custom functionality in your project for personal data handling.
    • This page is provided for informational purposes only and should not be relied upon as legal advice. You can use the information to identify personal data and its flow in the system, and take appropriate measures. However, we recommend consulting with a legally qualified professional to verify that your project complies with the GDPR.

    Kentico Cloud users

    A Kentico Cloud user represents any person who signed up for a Kentico Cloud account.

    DataSourcePurpose / Description
    AddressProvided by the user when entering payment informationBilling – used for invoicing
    BrowserExtracted from the user's browserAzure Application Insights – debugging and problem analysis
    Business typeProvided by the user during sign-upIntercom – used for service usage tracking
    Business roleProvided by the user during sign-upIntercom – used for service usage tracking
    ContentProvided by the user when using Kentico CloudAny content typed in by the user. Also includes user information in comments, revisions, workflows, and so on
    Device typeExtracted from the user's browserAzure Application Insights – debugging and problem analysis
    Email addressProvided by the user during sign-up
    Provided by other user when inviting the user
    Authentication – used to authenticate the user during sign-in (Auth0)
    Azure Application Insights – debugging and problem analysis
    Billing – used for invoices and reports
    Emails – sending service and subscription notifications (SendGrid)
    Intercom – used for service usage tracking
    Invitations – used to invite new users to Kentico Cloud projects
    User profile – managing user profile information
    Events and activity trackingLogged by the system when user performs an actionAzure Application Insights – debugging and problem analysis
    Inline Manual – used for user onboarding
    Intercom – used for service usage tracking
    GeolocationExtracted from network communication with the userAzure Application Insights – debugging and problem analysis
    IP addressExtracted from network communication with the userAzure Application Insights – debugging and problem analysis
    NameProvided by the user during sign-up
    Provided by the user on the user profile page
    Provided by other user when inviting the user
    Billing – used for generating reports and subscription management
    Intercom – used for service usage tracking
    User profile – managing user profile information
    Operating systemExtracted from the user's browserAzure Application Insights – debugging and problem analysis
    PasswordProvided by the user during sign-upAuthentication – used to authenticate the user during sign-in (Auth0)
    Payer IDPayer IDBilling – used to identify the user in the billing system
    Subscription planAssigned by the system during sign-up
    Managed by the user
    Billing – subscription management
    User creation dateSystem-generated during sign-upAzure Application Insights – debugging and problem analysis
    User IDSystem-generated during sign-upAzure Application Insights – debugging and problem analysis
    Unique identification in the product
    User roleConfigured by other user with required permissionsDetermines what the user can access in Kentico Cloud

    Third-party services

    Amplitude

    Amplitude is an event tracking, growth and product analytics tool. Kentico Cloud uses Amplitude to see how users interact with Kentico Cloud in order to gather insights and improve the product. Learn more.

    Data we send:

    • Business role
    • Business type
    • Domain of the email address
    • Name (First name, Last name)
    • User ID

    Auth0

    Auth0 is an identity management platform. Kentico Cloud uses Auth0 to manage user sign-ups and sign-ins. Learn more.

    Data we send:

    • User ID

    Data we receive:

    • Email address

    Hotjar

    Hotjar is an online behavior and feedback tool. Kentico Cloud uses Hotjar to see how users work with the service and optimize the user experience. Learn more.

    Inline Manual

    Inline Manual is a digital adoption platform used for smooth user onboarding. Kentico Cloud uses Inline Manual to provide interactive guides for users. Learn more.

    Data we send:

    • Events and activity tracking
    • Email address
    • First name
    • Subscription plan
    • User creation date

    Intercom

    Intercom is a customer messaging platform. Kentico Cloud uses Intercom to send targeted messages to Kentico Cloud users and manage conversations with leads and customers. Learn more.

    Data we send:

    • Business role
    • Business type
    • Name (First name, Last name)
    • User ID

    SendGrid

    SendGrid is a cloud-based email delivery platform. Kentico Cloud uses SendGrid to send service notifications to Kentico Cloud users. For example, notifications about subscription, content assignment change, new comments, and others. Learn more.

    Data we send:

    • Email address