Privacy Policy

kaspero Ltd. ("kaspero", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services.

1. Information We Collect

1.1 Information You Provide

When you register for an account, request a demo, or contact us, we may collect:

• Name, job title, and company name
• Business email address and phone number
• Company website URL and jurisdiction information
• Billing and payment information (processed by our PCI-compliant payment processor)
• Communications you send to us (support tickets, emails, feedback)

1.2 Information Collected Automatically

When you access our platform, we automatically collect:

• Device information (browser type, operating system, device identifiers)
• Log data (IP address, access times, pages viewed, referring URLs)
• Usage data (features used, actions taken, search queries within the platform)
• Cookies and similar tracking technologies (see Section 6)

1.3 Information from Third Parties

We may receive information from third-party integrations you connect (such as Slack, Jira, or email providers), publicly available data sources relevant to compliance monitoring, and business partners or resellers who refer you to our services.

2. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain our compliance monitoring platform
• Process your transactions and send related information
• Send administrative messages, technical notices, and security alerts
• Respond to your comments, questions, and support requests
• Analyze usage patterns to improve our services and develop new features
• Detect, prevent, and address fraud, abuse, and technical issues
• Comply with legal obligations and enforce our agreements

3. Data Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Service providers who perform services on our behalf (hosting, analytics, payment processing)
• Professional advisors (lawyers, auditors, insurers) where necessary
• Law enforcement or regulatory bodies when required by applicable law
• Business transferees in connection with a merger, acquisition, or sale of assets

All third-party service providers are contractually bound to protect your data and use it only for the purposes we specify.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Compliance monitoring data (screenshots, scan results, audit trails) is retained for 7 years in accordance with regulatory requirements in key jurisdictions (UKGC, MGA, GGL). You may request deletion of your account data at any time, subject to our legal retention obligations.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability (receive your data in a structured, machine-readable format)
• Withdraw consent at any time (where processing is based on consent)

To exercise these rights, contact us at privacy@kaspero.io.

6. Cookies and Tracking

We use strictly necessary cookies for platform functionality, analytics cookies to understand usage patterns (with your consent), and preference cookies to remember your settings. You can manage cookie preferences through your browser settings or our cookie banner.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, for all international transfers of personal data.

8. Children's Privacy

Our services are intended for business use only and are not directed at individuals under 18. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. Your continued use of our services after such changes constitutes acceptance.

10. Contact Us

For privacy-related inquiries, contact our Data Protection Officer at privacy@kaspero.io or write to: kaspero Ltd., Data Protection Officer, [Registered Address].