Privacy Policy

Welcome to kaspero

kaspero Inc., a Delaware corporation ("kaspero", "we", "our", or "us"), welcomes you to our website at kaspero.io and any related webpages, forms, demonstrations, free scans, webinars or events we may offer in connection with our marketing and support activities (collectively, the "Website").

We respect your privacy. This Privacy Policy ("Policy") explains how we access, collect, use, store and share information about you when you visit or interact with our Website, and when you communicate with us as a customer, prospective customer, partner or applicant. Please read it carefully.

This Policy covers:

• What information we collect about you
• How we use the information we collect
• How we share the information we collect
• How we store, retain and secure your information
• International data transfers
• How you can access and control your information
• Children, updates and how to contact us

This Policy should be read together with our Terms of Service. Nothing in this Policy is intended to limit your statutory privacy rights or any remedy available to you under applicable law.

1. What Information Do We Collect?

Personal Data (also called Personally Identifiable Information, or "PII") means information that identifies you or that could, with reasonable effort, be used to identify you, as defined by applicable laws.

We collect information in three ways: (i) when you actively provide it to us, (ii) automatically when you use the Website, and (iii) from third parties.

I. Information You Actively Provide

• Contact Details. Your full name, company, professional title, business email address and phone number when you submit a form on our Website, such as "Get a Free Scan", "Request a Demo" or "Contact Us".
• Scan and Demonstration Requests. The brands, domains, markets or properties you ask us to look at, and anything else you choose to include in your request.
• Marketing Preferences. Your preferences for receiving updates, event invitations and other communications, and how you engage with them.
• Communications and Feedback. Comments, questions and feedback you send us through the Website, by email, or at events.
• Customer and Billing Information. If your organization becomes a customer, the contact, billing and account details needed to operate the relationship.

II. Information Collected Automatically

• Server Logs. When the Website is accessed, our hosting provider records standard logs including IP address, browser type and version, pages requested, referring and exit URLs, and date and time. These are used for security, troubleshooting and keeping the Website running.
• Cookies and Tracking Technologies. The Website uses only cookies that are strictly necessary for it to function and remain secure. We do not use advertising, profiling or cross-site tracking cookies. If we add analytics or marketing cookies in future, we will update this Policy and, where the law requires it, ask for your consent before those cookies are set.

III. Information We Receive from Third Parties

• Referrals. We may receive your name, company and business email when a contact refers you or your employer invites you to an event.
• Business Information Providers. Subject to applicable law, we may receive professional information such as job title, company, business email or phone number from business-information, marketing and professional networking sources, in order to make relevant business-to-business contact.

We may combine information from these sources to keep our records accurate, identify potential customers, and suggest services that may interest you.

2. How We Use the Information We Collect

How we use your information depends on how you interact with us and the preferences you have communicated. Under applicable data protection laws, including the GDPR, UK GDPR and CCPA/CPRA, we must have a legal basis to process Personal Data. We rely on the following:

I. To Perform Our Contract with You

• Respond to your scan requests, demonstration requests, support requests and other messages
• Provide, administer and support the subscription, including billing
• Operate and maintain the Website under our Terms of Service

II. With Your Consent

• Send marketing communications, updates and event invitations where consent is required
• Publish customer case studies or testimonials featuring your name or company

You may withdraw consent at any time. Withdrawal does not affect processing that has already taken place.

III. To Comply with a Legal Obligation

We may process and disclose Personal Data where reasonably necessary to comply with applicable law, regulation, legal process, or a valid governmental or law enforcement request, and to meet tax, accounting and audit requirements.

IV. Legitimate Interests

We rely on our legitimate interests, where they are not overridden by your rights, to:

• Respond to people who contact us and follow up on business inquiries
• Carry out business-to-business marketing to relevant organizations
• Detect, prevent and respond to security incidents, fraud and misuse
• Analyze usage with anonymized or aggregated data to improve the Website
• Establish, exercise or defend legal claims, and in connection with a merger, acquisition or sale of business

We may anonymize and aggregate information so that it can no longer identify you. We may use and disclose anonymized information without restriction.

3. How We Share Your Information

We do not sell your Personal Data.

Service Providers. We work with third-party providers who help us operate, host, maintain and market the Website and run our business, including hosting and infrastructure, email, document storage, customer relationship management, accounting and payment processing. They may access your information only as needed to perform services on our behalf, under our instructions and subject to confidentiality and security obligations.

Professional Advisers. Lawyers, accountants and auditors, where necessary.

Affiliated Companies. We may share information with kaspero's corporate affiliates to operate and improve the Website and our services. The protections in this Policy apply to such sharing.

Business Transfers. If kaspero is involved in a merger, financing, acquisition or sale of all or part of our business, your information may be transferred as part of that transaction. We will notify you by email or a prominent notice on the Website and inform you of any choices you may have.

Legal Requirements. We may disclose information where we believe it is reasonably necessary to comply with applicable law, regulation, legal process or a governmental request, or to protect our rights, property or safety or those of a third party. We validate such requests before disclosing any Personal Data.

Links to Third-Party Sites. Our Website may link to external sites whose privacy practices differ from ours. We are not responsible for those sites, and we encourage you to review their privacy policies before submitting information.

4. How We Store, Secure and Retain Your Information

Hosting and Security

Our Website and the information we collect are hosted by third-party infrastructure providers located in the United States. We use industry-standard technical and organizational measures to protect the information we store, including encryption in transit and at rest, access control on a least-privilege basis, multi-factor authentication for administrative access, logging and monitoring, and a documented incident response process. However, no method of transmission or storage is completely secure, and we cannot guarantee against unauthorized access resulting from circumstances outside our reasonable control.

Data Retention

How long we keep information depends on its type. After the applicable period, we delete or de-identify it.

• Inquiry, scan and demonstration request data: retained while there is an active business conversation and for a reasonable period afterwards.
• Marketing data: retained for a reasonable period from the date you last engaged with our communications or submitted a form.
• Customer contact and account records: retained for the subscription and for a reasonable period afterwards.
• Billing and accounting records: retained for the period required by tax and company law.
• Server logs: retained for a short period for security and troubleshooting.

We may retain data longer where required for legal, regulatory, tax or accounting purposes, to maintain accurate records, or where we reasonably believe litigation may arise. We maintain an internal retention policy to avoid holding Personal Data indefinitely.

5. International Data Transfers

kaspero operates from the United States. If you access the Website from the European Union, the EEA, the United Kingdom, Switzerland or elsewhere, your information may be transferred to and processed in the United States and other countries.

• EU/EEA Transfers. We rely on appropriate safeguards such as the EU Standard Contractual Clauses where required.
• UK Transfers. We rely on the UK International Data Transfer Agreement or UK-approved Standard Contractual Clauses where required.
• Third-Party Processors. When we transfer data to processors, we obtain appropriate contractual commitments to protect your Personal Data.

You may contact us for further information on the specific mechanism used when transferring your Personal Data.

6. Your Privacy Rights and Choices

Depending on where you live, you may have specific rights regarding your Personal Data.

EU / EEA / UK Residents (GDPR / UK GDPR)

• Access, Rectification and Erasure. Request a copy of, correction of, or deletion of your Personal Data.
• Restriction and Objection. Request that we restrict processing, or object to processing based on legitimate interests or for direct marketing.
• Portability. Receive certain data in a structured, commonly used, machine-readable format.
• Withdraw Consent. Withdraw consent at any time, without affecting prior processing.

You also have the right to lodge a complaint with your local data protection authority, though we ask that you contact us first so we can try to resolve the matter. In the UK that authority is the Information Commissioner's Office at ico.org.uk.

California Residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know. Request the categories and specific pieces of Personal Data we have collected, the sources, the purposes, and the third parties with whom we share it.
• Delete. Request deletion of your Personal Data, subject to legal exceptions.
• Correct. Request correction of inaccurate Personal Data.
• Opt Out of Sale or Sharing. kaspero does not sell your Personal Data and does not share it for cross-context behavioral advertising.
• Limit Use of Sensitive Personal Data. We do not collect sensitive Personal Data through the Website.
• Non-Discrimination. We will not discriminate against you for exercising your rights.

All Users

• Unsubscribe from Marketing. Use the unsubscribe link in any marketing email, or contact us to be removed. You will still receive non-marketing, transactional communications.
• Cookies. Manage cookie preferences through your browser settings.

To exercise your rights, contact us using the details in Section 9. We will respond within the timeframe required by applicable law, normally one month. We may ask for reasonable evidence to verify your identity first. Requests may be limited where fulfilling them would reveal another person's information, or where we are permitted or required by law to retain the data.

7. Children's Privacy

Our Website is directed at business users. It is not directed to, and we do not knowingly collect Personal Data from, anyone under the age of eighteen (18). If you are under 18, please do not provide Personal Data. If we become aware that we have collected such information, we will delete it. If you believe a child has provided us with information, please contact us at privacy@kaspero.io.

8. Updates to This Privacy Policy

We may update this Policy from time to time at our discretion. The most current version will always be posted on the Website with the "Last Updated" date above. For material changes we will provide notice on the Website and, where we hold your contact details, by email, and such changes will take effect seven (7) days after notice. Other changes are effective as of the "Last Updated" date. Your continued use of the Website after that date constitutes acceptance of the updated Policy.

9. How to Contact Us

If you have questions, concerns or complaints, or wish to exercise your privacy rights, please contact us first at:

• Privacy and data requests: privacy@kaspero.io
• Support: support@kaspero.io
• Office: kaspero Inc., 1111B S Governors Ave, STE 90478, Dover, DE 19904, United States

For EU, EEA and UK residents, if you are unsatisfied with our response, you may escalate your complaint to your local data protection authority.