Data processing

No separate DPA is offered.

Kroma is a consumer app. The reviewed source does not show an enterprise customer-processing program, hosted team workspace, or separate business data processing agreement.

01 · Consumer scope

Use consumer features for your own work.

Kroma’s local-first design is intended for individual creator work. Do not use Kroma as a contracted processor for employee, customer, patient, student, or other third-party personal data unless NexaraTech first confirms a written arrangement that covers that use.

02 · Current handling

Privacy policy describes current handling.

Local media and catalog records remain on the device during ordinary local use. Selected content can leave the device when you publish, share, export, connect an account, or use a provider feature. Diagnostics are optional and off by default. Apple, connected platforms, Sentry, RevenueCat, and OAuth infrastructure have their own terms and roles.

Read the Kroma Privacy Policy for categories, purposes, providers, retention limits, and privacy requests.

03 · Business requests

Ask before using business data.

Contact support@nexaratech.ca before using Kroma for business-controlled personal data. No DPA, security schedule, subprocessor schedule, international transfer terms, or enterprise support commitment is promised by this page.

Cloudflare uses __cf_bm for bot protection and cf_clearance for browser security checks. The hosting provider manages these cookies; they cannot be disabled here.

We have also observed __Host-appgarden-visitor on hosted pages. Its purpose and available controls are unconfirmed, so we do not classify it as essential or optional.

The website currently has no optional analytics or advertising technologies enabled. Vinext may use session storage in limited navigation-recovery paths. No optional category switches are available.

Your choice about optional website technologies is saved in this browser and can be changed anytime using Cookie Preferences in the footer. It does not change provider-managed cookies.