Privacy Policy

This Privacy Policy explains how Codprez Softwares ("Codprez", "we", "us") collects, uses, and protects personal data when you use the KiteGuard platform and related services (the "Service"). It is written to align with the principles of the EU General Data Protection Regulation (GDPR) and similar privacy laws.

For the purposes of GDPR, Codprez Softwares acts as the data controller for account and billing data, and as a data processor for the operational telemetry you choose to send us from your servers.

We collect the following categories of data:

• Account data — name, email address, organization name, and authentication details you provide when registering.
• Billing data — subscription plan, transaction records, and the partial payment details required to process payments (full card numbers are handled by our payment provider, not stored by us).
• Operational telemetry — server metrics, security events, and infrastructure signals that the KiteGuard agent collects from systems you connect.
• Usage data — log data, device and browser information, and interactions with our dashboard and websites.

We process personal data to: provide, operate, and secure the Service; detect threats and generate alerts; process payments and manage subscriptions; provide customer support; communicate important service notices; and comply with legal obligations.

Our lawful bases for processing include performance of our contract with you, your consent (where required, for example for certain cookies), our legitimate interests in operating and improving the Service, and compliance with legal obligations.

We use cookies and similar technologies to keep you signed in, remember your preferences (such as light or dark theme), and understand how the Service is used.

Strictly necessary cookies are required for the Service to function. Optional analytics cookies are only set with your consent where required by law. You can control cookies through your browser settings; disabling some cookies may affect functionality.

We use privacy-conscious analytics to measure aggregate usage and improve the Service. Where analytics involve non-essential cookies or tracking, we rely on your consent. We do not sell your personal data, and we do not use analytics data to build advertising profiles.

Payments are processed by an authorized third-party payment provider acting as an independent controller or processor as applicable. We receive transaction confirmations and limited billing metadata (such as the last four digits of a card and billing country) to manage your subscription and issue receipts. We do not store complete payment card numbers on our systems.

We share personal data only as needed to operate the Service, including with vetted sub-processors such as cloud hosting, payment processing, and communication providers. These parties are bound by contractual obligations to protect your data and process it only on our instructions.

We may also disclose data where required by law, to enforce our Terms, or to protect the rights, safety, and security of our users and the public. We do not sell personal data to third parties.

We implement technical and organizational measures designed to protect personal data, including:

• Encryption of data in transit using TLS, and encryption at rest for stored data;
• Role-based access controls and least-privilege access to production systems;
• Continuous monitoring, logging, and alerting on our own infrastructure;
• Regular review of our security posture and sub-processor practices.

No method of transmission or storage is completely secure, but we work continuously to safeguard your information.

We retain personal data for as long as your account is active or as needed to provide the Service. Operational telemetry is retained according to the retention window of your plan. When data is no longer required for these purposes, we delete or anonymize it, unless a longer retention period is required by law.

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate data;
• Request deletion of your data ("right to be forgotten");
• Object to or restrict certain processing;
• Request a portable copy of your data;
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at info@codprez.com. You also have the right to lodge a complaint with your local data protection authority.

Your data may be processed in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards, such as standard contractual clauses, to ensure your data remains protected in accordance with applicable law.

For privacy questions or to exercise your rights, contact Codprez Softwares at info@codprez.com or through our contact page.