Privacy Policy

Effective date: November 24, 2025

This Privacy Policy explains how Krazimo (the Krazimo group of companies) collects, uses, shares, and protects personal information when you use our website and related pages, contact us, or book a meeting (the “Site”). For client projects delivered under a services agreement, we process data as a processor/service provider—your contract and Data Processing Addendum (DPA) govern.

1) Who we are & how to contact us

  • Krazimo (group) — primary contact for the Site
  • Privacy inbox: admin@krazimo.com
  • Mailing address: Krazimo Inc., 8 The Green STE B, Dover DE, 19901

Scope: this Policy covers the Site (including contact forms and embedded scheduling). It does not cover third‑party sites we link to or client environments controlled by our customers.

2) What we collect

Information you provide

  • Contact/“Get started” forms: name, work email, company, role, region,budget range, and your message.
  • Meeting scheduling (e.g., embedded Calendly): name, email, company, time zone, meeting preferences.
  • Optional: newsletter sign‑ups; recruiting submissions (if enabled).

Information collected automatically

  • Usage & device data (e.g., IP address, browser/OS, pages viewed, referrers) and security logs.
  • Cookies/SDKs used to operate, measure, and secure the Site (see Cookies below).

We do not intend to collect sensitive personal information via the Site. Please avoid including it in free‑text fields.

3) How we use information

  • Respond and schedule: handle inquiries, book meetings, and prepare proposals.
  • Operate, secure, improve: run the Site, measure performance in aggregate where feasible, and prevent abuse.
  • Communicate: send updates or marketing with your consent or as allowed by law.
  • Recruiting: process applications (if enabled).
  • Legal/compliance: comply with law and protect rights, safety, and property.

When acting as a processor/service provider for clients, we use data only per contract and instructions.

4) How we share information

  • Service providers (subprocessors) that help run the Site and our operations (hosting/CDN, scheduling, analytics/measurement, CRM/email, security/monitoring, reviews widgets). They are contractually limited to the specified purposes.
  • Affiliates within the Krazimo group.
  • Legal/compliance and business transfers (e.g., merger, acquisition).
  • With your direction or consent.

A current list of key service‑provider categories is available on request (or at /legal/subprocessors if published).

5) Cookies & tracking

We use:

  • Strictly necessary cookies for core functionality and security.
  • Analytics/performance cookies to understand and improve the Site.
  • Marketing cookies only if we run ads (not required to use the Site).

Your choices:
manage preferences via our cookie banner or your browser. Where required (e.g., EU/UK), we request consent before setting non‑essential cookies. If your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt‑out of sale/sharing or targeted advertising where applicable in the US.

6) AI/ML & client data (summary)

  • No training by default: We do not train foundation or fine‑tuned models on client data unless you explicitly opt in by contract.
  • Segregation & access controls: Client data is siloed; access is role‑based with authentication and logging.
  • Model providers & keys: Where feasible you may bring your own API keys. If our keys are used, prompts/completions may be logged by the provider per their policies; we configure no‑training where available.
  • Evaluation telemetry: Limited quality signals (e.g., redacted prompts, metrics) may be retained 30–90 days with access controls.

7) Security

We apply reasonable technical and organizational measures appropriate to risk (e.g., encryption in transit/at rest where applicable, MFA/SSO, least‑privilege access, logging/monitoring, vulnerability management, vendor reviews). No method is 100% secure.

8) Retention

We keep personal information only as long as needed for the purposes above or as required by law. Typical ranges: website inquiries & scheduling metadata ≤ 12 months after last interaction; raw logs 30–180 days; aggregated analytics longer; recruiting records 12–24 months.

9) International transfers

We may process data in countries where we or our providers operate (including the United States and locations outside your home country). Where a law requires specific safeguards (e.g., EU/UK Standard Contractual Clauses/IDTA), we implement them.

10) Your rights & choices (US & EU/UK)

  • United States (state privacy laws): you may have rights to access, delete, correct, and opt out of certain uses (including sale/sharing/targeted advertising). Use our cookie/banner tools or contact privacy@krazimo.com. We honor GPC where required. We do not have actual knowledge of selling/sharing data of consumers under 16.
  • EU/UK (GDPR/UK GDPR, if applicable): rights to access, rectify, erase, restrict, port, object, and withdraw consent. We will identify our legal bases (e.g., contract, legitimate interests, consent, legal obligation) and provide transfer safeguards where needed.

If you submit a request, we may need to verify your identity. Authorized agents may act on your behalf where your law allows.

11) Children

The Site is intended for business audiences and is not directed to children. If you believe a child has provided us personal information, contact privacy@krazimo.com so we can delete it.

12) Changes

We may update this Policy. We will post updates here and revise the Effective date above. For significant changes, we may provide additional notice.

13) Contact

Email: admin@krazimo.com
Mailing address: Krazimo Inc, 8 The Green STE B, Dover DE, 19901