Privacy Policy

This Privacy Policy explains how Kyrazo LLC (“we”, “our”, “us”) collects, uses, and protects personal data when you use our website, book a discovery meeting, or use our dedicated webhook infrastructure. Kyrazo is a sales-led service. We do not offer self-serve account signup. We are committed to processing your data securely and transparently.

1. Information We Collect

We collect the minimum personal data required to evaluate a deployment, provision dedicated infrastructure, and operate the Service.

2. Data Security & Isolation

Professional deployments run on physically isolated compute, databases, and delivery workers reserved exclusively for your organization. Enterprise BYOC deployments process payload data inside the cloud boundary specified in your Order Form. We also implement application-level encryption for sensitive data using AES-256-GCM.

• In Transit: All data is encrypted using TLS 1.2+ (HTTPS).
• At Rest: Sensitive fields and high-volume event payloads are encrypted before being stored.
• Isolation: No shared database memory and no multi-tenant worker pools on Professional dedicated infrastructure.

3. Data Residency & Hosting

Hosting depends on the deployment model in your Order Form:

• Professional: Dedicated Spaceship Starlight virtual machines provisioned exclusively for your environment. The region is specified in your Order Form.
• Enterprise BYOC / private cloud: Processing occurs in your cloud account or private deployment as specified in the Order Form. Payload data does not leave that boundary unless you instruct otherwise.
• Backups: Encrypted snapshots for managed deployments are replicated to EEA (EU) regions for disaster recovery via Cloudflare R2, unless your Order Form specifies another arrangement.

4. Data Retention

We adhere to the principle of storage limitation. Data is purged based on your Order Form and service agreement:

• Ingest & Dispatch Events: Deleted automatically according to the retention period in your Order Form.
• Processed Webhooks: Retained according to contracted retention settings.
• Workspace Data: Retained for the duration of the active contract, then deleted or returned when the dedicated environment is decommissioned.

5. Third-Party Processors

We share data with the following trusted service providers to operate Kyrazo:

6. Your Rights

You have the right to access, rectify, or delete your personal data. You also have the right to object to processing and data portability. To exercise these rights or request a Data Subject Access Request (DSAR), please contact us. Detailed information on your rights can be found on our GDPR Compliance Page.

7. Contact Information