Privacy

Kronikl is a product of Asumafy. It reads your Azure environment so it can tell you what changed in it. This page says what we collect, what we do with it, and what we will never do with it.

Last updated 30 August 2026.

What Kronikl reads

With your administrator's approval, Kronikl reads the record of changes in your Azure environment: resource configuration, role assignments, policy assignments, and the directory information needed to show a change as a person's name rather than an identifier.

Access is read-only. The role Kronikl holds in your environment is Azure's built-in Reader, which you can see for yourself in your own portal.

Who can see your data

People you invite to your organization, and nobody else. Your data is separated from every other customer's at the database level, so an account belonging to one customer cannot read another's.

We do not sell your data. We do not share it with third parties. We do not use it to train models, and we do not use it for advertising.

Our own staff can see your account — your plan, your team, and whether your tenant connection is healthy — and not what Kronikl collects from your Azure environment.

Where it is stored

In Microsoft Azure, in the United States, encrypted in transit and at rest. Microsoft is our only infrastructure provider.

We collect anonymised operational telemetry — timings, error rates, and similar — so we can keep the service healthy. Identifiers and configuration values are stripped from it before it leaves the application.

How long it is kept

Your plan sets how far back your history goes: 14 days on Free, 90 days on Pro. Older history is not part of what your plan provides. Close your account and we remove your data.

Your account

You sign in with your existing Microsoft work account. We store your name, work email address and the organization you belong to. There is no Kronikl password, so there is none for us to lose.

This website

Separately from the product, this marketing site records which pages are visited and which link brought you here, so we know what people find useful. That much is first-party, sets no cookie and stores nothing on your device. We also use Google Analytics and Microsoft Clarity to understand how these pages are used, and both set cookies. All of it is limited to this marketing site: none of it runs in the product, and none of it sees anything from your Azure environment. Once you are signed in there is no third-party analytics at all.

Deleting your data

An owner can close the account from inside Kronikl. We delete the organization and everything in it — change history, configuration snapshots, diffs, alerts, users and tenant connections — within seven days, and email you when it is done.

Two records survive, and neither holds anything collected from your tenant: our own access log, and what plan you were on. Copies in routine encrypted backups age out on their own and are never restored to serve anyone.

Your access to your Azure environment is yours to end: remove Kronikl's role assignment, or withdraw its consent in your directory, and Kronikl loses access. There is no stored credential — nothing to expire and nothing for us to forget to delete.

Withdrawing consent stops Microsoft issuing new tokens rather than canceling one already in hand, so access ends within minutes — at the outside, the life of a single Entra token, which Microsoft sets and which is typically an hour.

Contact

Kronikl is operated by Asumafy LLC. Questions about this page, or anything else: hello@kronikl.io. Security issues go to security@kronikl.io or through security.txt, so they are not queued behind general inquiries.

If this page changes, the date at the top changes with it, and a change affecting what we collect will be told to customers directly.