Privacy Policy

Kyzeflo ("we", "us") is responsible for the personal information described here. We are a software and AI deployment studio working from Bangalore, India.

Privacy questions and requests go to admin@kyzeflo.com.

We want to be specific rather than reassuring. We set no cookies of our own. The site runs no analytics, no advertising or tracking scripts, and no session recording. It stores nothing in your browser — no local storage, no fingerprinting. It contains no forms, so there is nothing on it to submit.

Typefaces are served from our own domain rather than a font service, so simply reading a page does not make a request to any third party.

This site is hosted on Firebase Hosting, a Google service. Google processes standard server logs in order to deliver the site and keep it secure — typically an IP address, the page requested and a browser user-agent string — and retains them on its own schedule. Where its platform requires a cookie for delivery or security, that cookie is strictly necessary and is not used to profile you.

If you email us we receive your address, your message and anything you attach. If you book a call we receive the details you enter into the scheduling service — typically your name, email address and chosen time, plus anything you add in the notes.

That is the whole of it. We do not buy contact data, and we do not build profiles on people who have not contacted us.

Calls are booked through Calendly, an external scheduling service. When you follow that link you are on their platform, and their privacy policy governs what they collect there. They act as a processor for the booking details they pass to us.

Google provides our hosting, as described above. The client websites and profiles we link to from case studies are outside our control, and their own policies apply once you follow the link.

To reply to you, to arrange and hold a conversation, to prepare a proposal if there is something worth building, and to keep our own records of the engagement. We do not use it for advertising and we do not sell it.

Where the law requires a lawful basis, ours is your consent when you choose to contact us, our legitimate interest in responding and running a studio, performance of a contract once we are working together, and compliance with legal obligations such as tax records.

This is the part that matters most for the work we do, and our commitments are the same ones stated on our homepage.

Your data is never used to train or improve any model, ours or anyone else's. We retain only what is needed to deliver the engagement, and delete it on completion. Access is scoped, credentialed and revoked the moment we are done. Every deployment is built to be auditable, so you can see what ran, when, and why.

Where an engagement requires us to handle personal data belonging to your customers or staff, we do so on your instructions as a processor, under the terms of that engagement's written agreement.

Enquiries that do not lead anywhere are kept for no longer than three months and then deleted. Records relating to an engagement are kept for as long as the engagement runs, and afterwards only where a statutory obligation — tax and accounting, principally — requires it.

Client operational data handled during a build is deleted on completion, as described above.

We do not sell personal information and we do not share it for anyone else's marketing.

We share it only with the service providers who help us operate — Calendly for scheduling, Google for hosting, and our email provider — and only to the extent they need it; where a law or a court requires disclosure; and with your agreement, for example when you ask to be introduced to someone.

We are in India and work with clients in the United States, the United Kingdom and India. The providers we rely on — Google for hosting, Calendly for scheduling, and our email provider — operate global infrastructure, so information may be processed outside your country. Where it moves across borders we rely on the transfer safeguards those providers have in place.

Access to client systems and data is granted per engagement, credentialed individually and revoked at the end. We keep the number of people with access to the minimum the work requires. No system is perfectly secure, and we will not claim otherwise, but we will tell you promptly if something happens that affects your data.

You can ask us what we hold about you, ask us to correct or delete it, ask us to stop using it, or withdraw a consent you gave. Write to admin@kyzeflo.com and we will respond within a reasonable period.

Depending on where you live, you may have specific rights under Indian data protection law, the UK and EU GDPR, or the privacy laws of a US state. We honour those requests regardless of where you are, and we will not treat you differently for making one.

This site and our services are for businesses and are not directed at children. We do not knowingly collect information from anyone under 18. If you believe we have, write to us and we will delete it.

We may update this policy. The version published here is the one that applies, and the date at the top shows when it last changed. If a change materially affects how we handle information about you, we will make that clear rather than quietly amending the page.