Legal

Privacy Policy

Last updated: February 2026

1. Introduction

KRIBANA ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us. Please read this policy carefully. By using our site or services, you consent to the practices described here.

2. Information we collect

We may collect the following types of information:

  • Personal identification information: Name, email address, phone number, company name, job title, and mailing address when you contact us, sign up for updates, or use our services.
  • Account and usage data: Login credentials, preferences, and how you use our website and services (pages visited, features used, time spent).
  • Technical and device data: IP address, browser type and version, operating system, device type, referring URLs, and approximate location (e.g. country or region).
  • Cookies and similar technologies: Data stored via cookies, pixels, and similar technologies as described in our Cookie Policy.
  • Communications: Records of emails, support tickets, and other correspondence you send to us.

3. How we use your information

We use the information we collect to:

  • Provide, operate, maintain, and improve our website and services
  • Respond to your inquiries, support requests, and feedback
  • Send you updates, newsletters, or marketing communications (where you have opted in)
  • Analyze usage patterns and trends to improve user experience and our offerings
  • Detect, prevent, and address fraud, security issues, and abuse
  • Comply with legal obligations and enforce our terms and policies
  • Personalize content and recommendations where applicable

4. Legal basis for processing (EEA/UK)

Where applicable under data protection laws (e.g. GDPR), we process your data on the basis of: (a) your consent; (b) performance of a contract with you; (c) our legitimate interests (e.g. improving our services, security, analytics); or (d) compliance with legal obligations. You may withdraw consent or object to processing where the law allows; see Section 8 for your rights.

5. Sharing and disclosure

We may share your information with:

  • Service providers: Hosting, analytics, email delivery, and other vendors who assist us under strict confidentiality and data-processing agreements
  • Legal and regulatory bodies: When required by law, court order, or to protect our rights, safety, or property
  • Business transfers: In connection with a merger, sale of assets, or acquisition, subject to the same privacy commitments

We do not sell your personal information to third parties for their marketing purposes.

6. Data retention

We retain your information only for as long as necessary to fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we securely delete or anonymize it. Specific retention periods may vary by data type and purpose; you can contact us for details.

7. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption, access controls, and regular security assessments. No method of transmission over the internet or electronic storage is 100% secure; we cannot guarantee absolute security but we strive to protect your data to a high standard.

8. Your rights

Depending on your location, you may have the right to:

  • Access and receive a copy of your personal data
  • Correct or update inaccurate data
  • Request deletion of your data (subject to legal exceptions)
  • Restrict or object to certain processing
  • Data portability (where technically feasible)
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a supervisory authority (e.g. in the EEA or UK)

To exercise these rights, contact us using the details in Section 12. We will respond within the timeframes required by applicable law.

9. International transfers

Your information may be processed in countries other than your own. Where we transfer data from the EEA, UK, or other regions with strict data protection laws, we use appropriate safeguards such as standard contractual clauses or other mechanisms approved by regulators to ensure your data is protected.

10. Children

Our website and services are not directed at individuals under the age of 16 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. For material changes, we may notify you by email or a prominent notice on our website. We encourage you to review this policy periodically.

12. Contact us

For questions about this Privacy Policy or our data practices, or to exercise your rights, please contact us at the address or email provided on our homepage, or refer to our Terms of Service for general contact details.