Privacy Policy

We collect information that you provide directly to us when using our services, including:

• •Name and contact information (email, phone number)
• •Company information and job title
• •Technical information about your infrastructure and deployments
• •Communication preferences and feedback
• •Usage data and analytics from our platform

We use the information we collect to provide, maintain, and improve our services:

• •Deliver and manage our DevOps and platform engineering services
• •Communicate with you about services, updates, and technical issues
• •Send you technical notices, security alerts, and support messages
• •Respond to your questions, comments, and support requests
• •Monitor and analyze trends, usage, and activities to improve our platform
• •Detect, prevent, and address technical issues and security threats

We take data security seriously and implement industry-leading measures to protect your information:

• •End-to-end encryption for data in transit and at rest
• •Regular security audits and penetration testing
• •Multi-factor authentication and role-based access controls
• •Compliance with SOC 2, GDPR, HIPAA, and ISO 27001 standards
• •Continuous monitoring and incident response procedures
• •Annual third-party security assessments

We do not sell your personal information. We may share your data only in these limited circumstances:

• •With your explicit consent or at your direction
• •With trusted service providers who assist in our operations (under strict confidentiality)
• •To comply with legal obligations, court orders, or government requests
• •To protect the rights, property, or safety of Kevalix, our users, or the public
• •In connection with a merger, acquisition, or sale of assets (with prior notice)

You have comprehensive rights regarding your personal data:

• •Access: Request a copy of your personal data we hold
• •Correction: Update or correct inaccurate information
• •Deletion: Request deletion of your data (right to be forgotten)
• •Portability: Receive your data in a structured, machine-readable format
• •Restriction: Request limitation of processing your data
• •Objection: Object to processing of your data for certain purposes
• •Withdraw Consent: Revoke previously given consent at any time

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy:

• •Active account data: Retained while your account is active
• •Service logs and analytics: Retained for 90 days
• •Financial records: Retained for 7 years (legal requirement)
• •Marketing communications: Until you unsubscribe
• •Support tickets: Retained for 3 years for quality assurance

We use cookies and similar technologies to improve your experience:

• •Essential cookies: Required for platform functionality
• •Analytics cookies: Help us understand how you use our services
• •Preference cookies: Remember your settings and preferences
• •You can control cookies through your browser settings

Your data may be transferred to and processed in countries other than your own. We ensure adequate protection through:

• •Standard Contractual Clauses (SCCs) approved by the EU Commission
• •Privacy Shield frameworks where applicable
• •Ensuring all data centers meet international security standards

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes via:

• •Email notification to your registered address
• •Prominent notice on our website
• •In-app notifications (if applicable)