Skip to main content
BACK TO HOME
legal_privacy.md [DATA_SPEC]
LEGAL & DATA PRIVACY SPECIFICATION

Privacy Policy

LAST_UPDATED: OCTOBER 2026•STATUS: ACTIVE_SPECIFICATION

1. Information We Collect

When you interact with the Krat.OS website, Project Estimator, or contact dispatchers, we collect only the information necessary to provide project estimates and communicate with you:

  • Identity & Contact: Your name, work email address, and optional telephone or WhatsApp number.
  • Project Specifications: Selected architecture modules, timeline requirements, target budget ranges, and project descriptions submitted via our forms.
  • Technical Telemetry: Anonymized interaction events, page URL, referrer parameters, and IP address strictly for rate limiting, DDoS prevention, and security auditing.

2. Data Storage & Third-Party Processors

We do not sell, rent, or monetize your information. We utilize trusted, industry-standard infrastructure providers to process and safeguard your data:

  • Database Storage (Supabase): Lead records are stored in access-controlled PostgreSQL instances with Row-Level Security (RLS) policies and encrypted at rest.
  • Transactional Delivery (Resend): Project estimates and inquiry notifications are delivered to you and our lead engineers via Resend transactional email API over TLS 1.3.
  • Spam Prevention (Cloudflare Turnstile): Form submissions are verified with Cloudflare Turnstile to prevent automated abuse without invasive captcha puzzles.

3. Data Security & Encryption

All traffic between your browser and our infrastructure is strictly encrypted in transit via SSL/TLS 1.3 with modern cipher suites. Database connections enforce SSL with automated security patching and daily backups.

4. Cookies & Tracking

We avoid intrusive third-party cross-site advertising cookies and behavioral trackers. Client preferences (such as color theme and motion accessibility level) are stored locally in your browser storage (localStorage) and never transmitted to ad brokers.

5. Your Rights & Data Deletion

Under applicable privacy regulations (including GDPR and CCPA), you have the right to inspect, correct, or request the immediate deletion of your submitted contact records from our database.

6. Privacy Inquiries

For data access requests, records purge requests, or security notices, email our engineering leads directly at [email protected].