Privacy notice
Last updated: 8 October 2026
This notice explains what personal data Foudra MRP collects, why, where it is kept, and the rights you have over it. We have tried to write it plainly. If anything is unclear, ask us: the contact details are at the end.
In short
- We collect only what we need to run your account.
- We use no advertising and no tracking. On foudra.com and the demo we count visits with Umami, which we run ourselves: it sets no cookies and doesn't keep your IP address. A customer's own company pages are never counted.
- We set one cookie, and only once you sign in.
- We don't sell or share your data. A small number of service providers help us run Foudra; they are listed below, and they may use your data only to do that job.
- Your data is stored on servers in the European Union, owned and operated by companies based in the EU. The emails we send you pass through our mail server in London.
Who we are
Foudra MRP is run by Kalopa Robotics Limited, a company registered in Ireland (company number 647350), whose registered office is at Somerset Studios, Aughinish, County Clare, Ireland. In this notice, "we" and "us" mean Kalopa Robotics Limited.
Two kinds of data, two roles
Your account data. The details about you and your company that we need to provide the service: names, email addresses, passwords, company details, billing. For this data we are the controller: we decide how it is used, and this notice describes that.
Your business data. Everything you put into Foudra to run your business: parts, stock, suppliers, orders, work orders, images. Some of it may be personal data, such as the name and email address of a contact at one of your suppliers. For this data your company is the controller and we are its processor: we hold it and process it only to provide Foudra to you, on the terms in the data-processing section of our Terms of service. If you want to exercise rights over data a Foudra customer holds about you, please contact that customer.
What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| Your name, email address and password | To create your account and let you sign in | Performing our contract with you |
| Your company's name, address, VAT number and contact details | To set up your company, and to show on your purchase orders | Performing our contract |
| Your role and the users you invite | To decide who can see and change what | Performing our contract |
| Records of sign-ins and changes, with the IP address and browser that made them | To keep accounts secure, investigate misuse, and show you who changed what | Our legitimate interest in security, and yours |
| Server request logs, including IP addresses | To keep the service running and spot attacks | Our legitimate interest in security |
| When each user last used Foudra: one date and time per user, updated at most once an hour | To count how many people use Foudra each day and each month | Our legitimate interest in running and improving the service |
| Your plan, payments, VAT treatment and invoices | To bill you and keep the records the law requires | Performing our contract; legal obligation (tax records) |
| Emails you send us | To answer them | Our legitimate interest in supporting you |
Visitor statistics. On foudra.com (this site, the manual and the sign-up pages) and on the live demo, we count visits with Umami, an open-source tool we run on our own server at analytics.kalopa.com, in the EU. For each page viewed it records the page, the site you came from, your browser, operating system, device type and country. The country is worked out from your IP address, which is then discarded: Umami keeps no IP addresses and sets no cookies, and it can't follow you to other sites. We use these figures only to see how the site is used, which is our legitimate interest in running and improving it, and keep them for up to two years. Once you sign in to your own company's address, nothing is counted.
Passwords are never stored as typed. We keep only a one-way hash, from which the password can't be recovered.
Paying. You enter card or bank details on Mollie's payment page, not on ours, so we never see or store them. We send Mollie your company's name, the name and email address of the person paying, and the amount; Mollie tells us whether the payment went through and, for a renewing subscription, keeps the payment method on file to charge each renewal.
VAT numbers. If your company gives us a VAT number from an EU country, we check it with the European Commission's VIES service, which confirms whether it is valid, and keep the result as evidence for our VAT returns.
Signing up. When you start a sign-up, we keep your name, email address, a hash of your password and your IP address until you confirm your email address. If you don't confirm within 24 hours, they are deleted automatically.
Cookies
On foudra.com itself (this site, the reference manual and the sign-up pages) we set no cookies at all.
When you sign in at your company's address (for example yourcompany.foudra.com),
we set one cookie, named session.
It holds a random token that keeps you signed in, and nothing else.
It can't be read by scripts, is sent only over encrypted connections,
and expires after 7 days without use, or 30 days at most.
It is strictly necessary for the service to work, so the law doesn't
require us to ask for consent, and we don't show a cookie banner.
The live demo site sets the same session cookie, so that you can click around it.
Who else handles your data
We use a few service providers ("sub-processors") to run Foudra. Each may use your data only to provide its service to us, under a contract that requires it to protect your data.
| Provider | What they do | Where |
|---|---|---|
| Hetzner Online GmbH | Servers, database and file storage | Germany and Finland, EU |
| Mollie B.V. | Taking card and bank payments | Netherlands, EU |
| Intuit QuickBooks Online | Issuing invoices and keeping our accounts | Ireland, EU |
| Atlassian (Jira Service Management) | Handling the support requests you send us with "Report a problem", and replying to them | Ireland, EU |
| DigitalOcean, LLC | Hosting our mail server, which sends Foudra's emails (sign-up, password reset, renewal notices) | London, United Kingdom |
We will tell customers about any new sub-processor before it starts handling customer data.
We don't sell personal data, we don't share it for marketing, and we don't use it to train AI models. We will disclose it to authorities only where the law requires us to.
Where your data is stored
Your data is stored on servers in the European Union, operated by companies based in the EU. Backups are kept in the EU as well. Except as stated in the table above, it does not leave the EU. The one exception is email: the emails Foudra sends you, and so your email address, pass through our mail server in London. The United Kingdom is covered by an EU adequacy decision, which recognises its data protection as equivalent to the EU's.
How long we keep it
| Data | Kept for |
|---|---|
| Unconfirmed sign-ups | 24 hours, then deleted |
| Your account and business data | While your account is active |
| After your trial or subscription ends | 3 months, so you can come back or export your data; then deleted. Copies in backups are overwritten within 30 days |
| Records of sign-ins and changes | As long as your account exists |
| Server request logs | 30 days |
| Visitor statistics (foudra.com and the demo) | Up to 2 years |
| Invoices and payment records | 6 years, as Irish tax law requires |
How we protect it
All connections to Foudra are encrypted. Each company's data is kept apart inside the database itself, so that one customer's account can't read another's. Passwords are hashed, and access to our servers, and to customer data, is limited to the people who run Foudra and to what running and supporting the service needs.
Your rights
Under the General Data Protection Regulation you have the right to:
- See the personal data we hold about you, and get a copy;
- Correct it if it's wrong;
- Delete it, where we have no legal reason to keep it;
- Restrict or Object to how we use it;
- Take it with you in a machine-readable form.
Your company's details can be changed on its settings page. Your lists (parts, stock, orders and the rest) can be exported from Foudra at any time, and we will export anything else for you on request. For anything else, including changes to your own name or email address, email us. We will answer within one month.
If you're not happy with how we've handled your data, you can complain to the Data Protection Commission in Ireland (dataprotection.ie), or to the authority where you live. We would appreciate the chance to put it right first.
Children
Foudra is a service for businesses and is not meant for anyone under 18.
Changes to this notice
If we change this notice in a way that matters, we will tell account owners by email before the change takes effect. The date at the top shows when it last changed.
Contact
Email privacy@foudra.com, or write to us at the address under Who we are.