Privacy Policy

1. Scope of this policy

In this policy, “Kubto,” “we,” and “us” refer to the business operating kubto.com (the “Site”). This policy covers personal information processed through the public Site, its enquiry form, and related business communications.

It does not by itself govern customer content, production data, prompts, model inputs or outputs, credentials, logs, or other data that Kubto processes while delivering a paid product, implementation, managed service, or consulting engagement. Those activities are governed by the applicable proposal, order form, statement of work, master services agreement, data processing agreement (“DPA”), and any product-specific terms. If those documents conflict with this policy for customer-service data, the signed customer documents control.

2. Information we receive

Information you choose to provide

The website enquiry form currently asks for:

• your name and work email address;
• your company name, if you choose to provide it;
• the service category you select; and
• the project details you write in your message.

We also receive information you include in direct emails, meeting requests, proposals, or follow-up conversations. Please do not send passwords, API keys, regulated data, production datasets, or other sensitive or confidential material through the public enquiry form.

Technical request information

When a browser requests the Site or submits the form, the hosting, content-delivery, security, and email-delivery systems involved may process standard request data such as IP address, request time, browser or device information, referring page, requested URL, and security or error logs. This information is used to deliver the Site, diagnose faults, and detect abuse.

The Site does not currently offer public user accounts or collect payment-card details through its enquiry form.

3. Why we use this information

We use website and enquiry information to:

• receive, review, route, and respond to business enquiries;
• understand the requested service and assess whether Kubto can help;
• arrange discussions and prepare proposals or other pre-contract materials;
• operate, secure, troubleshoot, and improve the Site and enquiry workflow;
• maintain reasonable business records and prevent spam, fraud, or misuse; and
• meet legal, regulatory, tax, accounting, or dispute-resolution obligations where they apply.

Submitting an enquiry does not automatically subscribe you to a marketing list. If Kubto later offers optional marketing communications, the message will identify how to unsubscribe and any consent required by applicable law will be obtained.

Where applicable law requires a legal basis, the basis may be taking steps at your request before entering a contract, performing a contract, complying with law, Kubto’s legitimate interests in operating and protecting a B2B website and responding to enquiries, or consent where consent is required. The appropriate basis depends on the context and location.

4. Enquiry delivery and Resend

When you submit the website form, the information listed above is sent to Kubto’s enquiry endpoint and passed to Resend, the email-delivery provider used to deliver the message to Kubto’s business inbox. Resend may process the form contents, email addressing information, delivery metadata, and diagnostic information needed to send and protect that email service.

Kubto uses service providers only for the relevant operational purpose and expects appropriate confidentiality, security, and data-protection commitments to apply. A provider may also process limited information to meet its own legal obligations or protect its service, as described in its applicable terms and privacy materials.

5. Cookies and analytics

The current Site application does not initialize Google Analytics. Kubto does not describe analytics or advertising cookies as active when they are not enabled. Basic browser or infrastructure storage may still be used where necessary to deliver, secure, or remember the state of a feature.

If Kubto enables Google Analytics or another non-essential measurement, advertising, or tracking tool, this policy will be updated to identify the tool, the information it receives, the purpose and retention approach, and the choices available to visitors. Any cookie notice or consent control required by applicable law will be provided before or when that tool is enabled.

6. When information is disclosed

Website and enquiry information may be disclosed only as reasonably needed to:

• hosting, content-delivery, security, communications, and email-delivery providers, including Resend;
• professional advisers under appropriate duties of confidentiality;
• authorities or other parties when required by law, necessary to protect rights and systems, or needed to investigate suspected abuse; or
• a successor or participant in a genuine financing, reorganisation, merger, acquisition, or sale, subject to appropriate confidentiality and legal safeguards.

Based on the website flow described in this policy, Kubto does not sell enquiry information for money or use it for cross-context behavioural advertising. If that practice changes, Kubto will update this policy and provide any legally required opt-out mechanism.

7. Customer AI and service data

Data used in an AI, search, recommendation, RAG, automation, cloud, infrastructure, or software engagement must be handled under the signed customer contract and, where appropriate, a DPA. Those documents should define the parties’ controller or processor roles, permitted purposes, instructions, security commitments, approved subprocessors, locations and transfer mechanisms, retention and deletion, incident obligations, audit rights, and whether any provider may use data to train or improve models.

No statement on this public page expands Kubto’s rights to use customer data beyond the applicable agreement. Prospective customers should request and review the relevant architecture, security information, subprocessor details, and DPA before providing production or regulated data.

8. International processing

The Site’s infrastructure, Resend, and other service providers may process information in countries other than the one where you are located. Where applicable law restricts those transfers, Kubto will use the transfer mechanism and supplementary safeguards appropriate to the provider, data, and engagement. Customer-service transfer arrangements belong in the applicable DPA or customer agreement.

9. Retention and security

Kubto retains enquiries and related correspondence only for as long as reasonably needed to respond, evaluate and manage the business relationship, keep necessary records, resolve disputes, secure the service, and meet legal obligations. The exact period can vary with the nature of the enquiry and whether it becomes a customer engagement. Customer data follows the retention and return-or-deletion terms in the applicable contract or DPA.

Kubto and its providers use technical and organisational measures intended to protect information in light of its sensitivity and the service involved. No internet transmission, email system, or storage method is completely secure, so please use an agreed secure channel before sharing sensitive customer material.

10. Your choices and privacy rights

Depending on your location and the circumstances, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or review of a decision. You may also have the right to complain to a relevant privacy or data-protection authority. These rights are not absolute and lawful exceptions may apply.

To make a request, email [email protected] with “Privacy request” in the subject line. Kubto may ask for information reasonably needed to verify your identity, authority, and the information involved. You may also ask about an appeal process if one applies in your jurisdiction.

11. Business audience and children

The Site is designed for organisations and business professionals, not children. Kubto does not knowingly solicit personal information from children through the Site. If you believe a child has submitted personal information, contact Kubto so the circumstances can be reviewed and appropriate action taken.

12. Updates to this policy

Kubto may revise this policy when the Site, enquiry workflow, providers, or legal obligations change. The review and version status will be changed when a new draft or approved version is published. Once an approved policy is effective, additional notice of material changes will be provided where required by applicable law or contract.

13. Contact and related terms

Questions, requests, or concerns about this policy can be sent to [email protected]. Kubto’s full responsible legal-entity name and registered address should be added here after counsel confirms them.

For the rules that apply when accessing the Site, read the Terms of Service.