Kioskwell privacy policy
Last updated: October 7, 2026
Kioskwell is made by Great Work LLC, 651 N Broad St, Suite 206, Middletown, DE 19709, USA ("we"). This policy covers the Kioskwell app for your CRM's app marketplace and the pages at hl.greatwork.company/directory: the public directory pages, the claim confirmation page and the owners' listing pages. It applies to you (the business running a directory), to the business owners who claim listings and to the visitors who send requests.
What we collect
When you install Kioskwell on a business account, your CRM gives us access tokens for the permissions you approve. We use them for that business account only.
Directories and listings. What you set up (name, categories, rules, colors, logo link) and the business details you, your imports or the owners enter: name, category, description, phone, public email, website, address, hours, service area, logo and photo links. Listing details are published on the directory's public pages. We look addresses up on our address service to place them on the map and store the coordinates.
Owners who claim a listing. Their name, email, phone and role, the exact agreement text they accepted, and when, from which IP address and with which browser they accepted it. They become (or are matched to) a contact in your CRM.
Visitors who send a request. Their name, email or phone and message, and which listing they asked. They become (or are matched to) a contact in your CRM with a note. We don't keep their IP address. To recognize the same person asking the same listing twice in a day we keep a one-way fingerprint of their email and phone.
Payments. When an order or invoice in your account is paid, we read its products, quantities and the buyer's contact id to find featured purchases. We never see card details.
When you open Kioskwell inside your CRM, your CRM shares a signed record of who you are (user id, name, email, role and business account id). We use it to confirm you belong to that business account and, for changes, that you are an admin.
The public pages set no cookies and run no analytics or advertising code. Pages with a map load the map library and map tiles from their providers (unpkg.com and OpenFreeMap), which see the visitor's IP address like any website they serve.
What we do with it
Only what the app does for you: publish the directory, search it, confirm and record claims, show owners their listing page, forward requests to owners by your rules, add contacts and notes to your CRM, feature listings that were paid for, and run your workflow triggers. We don't sell data, use it for advertising, combine it across customers or use it to train any model. The app makes no calls to any AI service.
Where it is stored and how it is protected
On our server in the United States (DigitalOcean, New York). Access tokens, directory settings, listing details, owner details and agreements, requests and workflow subscriptions are encrypted at rest with AES-256-GCM. Connections use HTTPS. Owner pages and claim confirmation pages can't be embedded in other sites, aren't indexed by search engines and send no referrer.
How long we keep it
- Requests: one year after they arrive (the contact and note in your CRM stay; you control those).
- Claims that were never confirmed, or were rejected: 30 days.
- Listings and approved claims (with their agreement record): while the directory exists, so you can show when and how an owner agreed.
- When a contact is deleted in your CRM, we erase their requests and claims, and release any listing they owned (their details are erased; the business listing stays).
- When you delete a directory, uninstall the app or click Disconnect, we delete everything for it immediately.
Sharing
Listing addresses and the ZIP codes or towns visitors search near go to our address service (geo.greatwork.company, run by us, which uses Geocodio) to place them on the map. We use DigitalOcean (hosting). Otherwise we disclose data only if the law requires it.
Your choices
You choose what's published, whether owners and new businesses are reviewed first, who receives requests and the agreement owners accept. Owners can update their listing from their page and ask you to remove it. Visitors and owners can ask you to delete their data; deleting their contact in your CRM erases it from Kioskwell too.
Contact
hello@greatwork.company. We reply within one business day.