Privacy · effective 2026-09-01
Written plainly, not in legalese.
Kyrabase Technologies runs this website and its admin. This page explains what we collect, why, how long we keep it, and how to have it deleted. If any of the below is unclear, email apps@kyrabasetechnologies.com and a founder will answer directly.
What we collect from visitors
Only what you submit through the contact form: your name, email, optional company, optional needs and budget, and the message you write. Nothing else is collected while you browse — no analytics scripts, no third-party pixels, no fingerprinting, no advertising cookies.
When the site's contact form is submitted, an entry is stored in our own admin inbox and an email is sent to the founding team. The submission never leaves our infrastructure and is never shared with third parties.
What we collect from admin users
If you are logged in to the site's admin, we set one HTTP-only cookie containing a signed session token. This cookie is not readable by JavaScript, is never sent to third parties, and expires when you sign out or when the session ages out. That's it — no additional tracking for admin sessions.
Server logs
Our web server keeps standard access logs (timestamp, request path, response status, IP address, user agent) for operational purposes — debugging, abuse prevention, and capacity planning. Logs are rotated on a rolling window and are never used to build advertising profiles.
Cookies
The public marketing site sets no cookies. The admin sets one HTTP-only session cookie, described above. There is no cookie banner because there is nothing to consent to on the public site.
Retention
- Contact form submissions are retained for up to 24 months unless we mark them archived earlier. You can ask us to delete yours at any time and we will do it within 7 days.
- Admin sessions expire automatically. There is no long-lived tracking cookie.
- Server access logs are retained for up to 90 days.
Who has access
The founding team of Kyrabase Technologies. Nobody else. We do not sell, rent, or trade any of the information above.
How to have your data deleted
Email apps@kyrabasetechnologies.com from the same address you used to contact us. We'll delete the corresponding submission from the admin inbox and confirm within 7 days. If you cannot use that email, describe the request in enough detail that we can identify the submission — approximate date, company name, or subject — and we'll do the same.
Security
Traffic to and from this site is encrypted with TLS. The admin sits behind JWT authentication with rate-limited login attempts and bcrypt-hashed credentials. The data store is SQLite, backed up nightly to encrypted off-site storage.
Changes to this policy
If we materially change what we collect or how we handle it, the effective date at the top of this page will change. This policy last changed on 2026-09-01.
Contact
Questions or requests about this policy go to apps@kyrabasetechnologies.com. For anything privacy-specific, use the subject line "Privacy request" to route it to the right person.