1. Who we are
Kybernao Corp, a Delaware corporation ("Kybernao", "we", "us"), operates the website at kybernao.ai and its subdomains (the "Site"). We are the controller of personal data collected through the Site. Our contact details are in Section 13.
2. What we collect
Information you give us
When you submit a form on the Site we collect what you enter. Depending on the form this may include:
- Demo and contact requests: name, work email, organization, phone (optional), topic, environment, and your message.
- Job applications: anything you send to careers@kybernao.ai, such as your name, email, résumé, and message.
- Status updates: the email address you subscribe with.
- Events and business development: if you meet us at a conference, trade show, briefing, or other event, or exchange business cards, we may record your name, employer, role, and contact details so we can follow up.
Information from other sources
To prepare for a conversation you have requested, or to reach organizations we believe may benefit from Kybernao, we may obtain business contact details (name, employer, role, work email) from public sources such as company websites and professional networks, or from providers of business contact data. We use this only for business-to-business communication and you can ask us to stop at any time.
Information collected automatically
- Request logs. Our hosting provider, Cloudflare, records standard request data such as IP address, user agent, requested URL, and timestamp for security and operations.
- Rate limiting. When you submit a form, we store a one-way hash of your IP address for ten minutes to limit abuse. The hash cannot be reversed to your address and is deleted automatically.
- Analytics. See Section 4.
We do not collect precise location, device identifiers, or data from your other online activity.
3. Why we use it
- To respond to your demo, contact, or application request and to arrange follow-up conversations you have asked for.
- To send status notifications you have subscribed to.
- To operate, secure, and improve the Site, including preventing abuse.
- To send occasional product or event communications where you have asked for them or where permitted by law. Every such email includes an unsubscribe link, and you can also opt out by emailing us. You will still receive replies to requests you have made and notices about changes to these policies.
- To assess and pursue business opportunities with organizations, using business contact information.
- To comply with legal obligations, enforce our agreements, and protect our rights and the safety of others.
De-identified and aggregated data. We may create aggregated or de-identified information, such as counts of page views or requests by sector, that cannot reasonably be linked to you. We may use and share that information for any lawful purpose.
Where the GDPR or similar law applies, our legal bases are performance of steps you request before entering a contract, our legitimate interests in operating and securing the Site and responding to enquiries, and compliance with legal obligations. We do not use personal data from the Site for automated decision-making or profiling.
4. Analytics and cookies
The Site sets no cookies and does not use local storage to track you. We use Cloudflare Web Analytics, which measures page views and performance using a script that does not set cookies, does not fingerprint devices, and does not track users across sites. The Site does not respond to "Do Not Track" signals because it does not track you in the first place.
6. How long we keep it
- Form submissions: kept while we handle your request and for up to 24 months afterward so we can follow up, then deleted. You can ask us to delete them sooner at any time.
- Job applications: kept for up to 12 months after the role closes unless you ask us to delete them or ask us to keep them for future roles.
- Status subscriptions: kept until you unsubscribe.
- Rate-limit hashes: deleted automatically after ten minutes.
- Business contact records: kept while there is an active or reasonably anticipated business relationship, and deleted on request.
- Request logs: retained by Cloudflare according to its own retention schedule.
In setting these periods we consider the purpose of the data, its sensitivity, legal and audit requirements, and whether the purpose can be met another way. We may keep data longer where required to resolve a dispute, establish a legal defense, or comply with law.
7. How we protect it
The Site is served only over HTTPS with HSTS. Form submissions are validated, rate-limited, and stored in an access-controlled data store. Access to submissions is limited to staff who need it to respond to you. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. International transfers
Our infrastructure is provided by Cloudflare, which operates a global network. Personal data may be processed in countries other than your own, including the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, email privacy@kybernao.ai. An authorized agent may submit a request on your behalf if they provide evidence of authorization. We will respond within the time required by applicable law and may need to verify your identity first. Withdrawing consent affects only future processing. You also have the right to lodge a complaint with your local data protection authority.
California residents: we do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not use sensitive personal information for purposes that would give rise to a right to limit. We will not discriminate against you for exercising your rights.
10. Children
The Site is intended for professionals and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.
11. The Kybernao platform and customer data
This policy covers the public website only. It does not apply to data that Kybernao processes on behalf of customers through the platform ("Customer Data"). The platform is designed so that Customer Data stays on customer-controlled nodes. How Customer Data is handled is governed by the customer's agreement with Kybernao, including any data processing agreement, and by the customer's own policies. If you have a request about Customer Data, including access, correction, or deletion, direct it to the relevant customer; Kybernao will assist the customer as its agreement requires.
Third-party sites. The Site links to other websites that we do not control. Their privacy practices are their own, and we encourage you to read their policies before providing personal data to them.
12. Changes to this policy
We may update this policy from time to time. The "Last updated" date shows when it last changed, and material changes will be noted on this page.
13. Contact
Privacy questions and rights requests: privacy@kybernao.ai.
Kybernao Corp · [Registered address].
EU or UK representative, where required: [Representative details, if applicable].