1. Company Information

Controller:
KyberionAI, Inc.
300 Delaware Ave, Suite 210
Wilmington, DE 19801, USA
Registered in the State of Delaware
Registered Agent: Harvard Business Services, Inc., 16192 Coastal Highway, Lewes, DE 19958, USA
Email: [email protected]

2. Data We Collect

We collect only the information that is necessary to provide and improve our services.

• Newsletter Data: When you subscribe to our newsletter, we collect your email address.
• Server Logs: Our hosting providers (DigitalOcean and Cloudflare) automatically collect certain technical data, such as your IP address, browser type, operating system, and access times.
• Contact via Email: If you contact us directly, we will process the data you provide (e.g., your email address and message content).
• Cookies: We currently do not use cookies or tracking technologies. If we introduce cookies in the future, this Privacy Policy will be updated accordingly.

3. Purpose of Data Processing

We process your data for the following purposes:

• To send newsletters to subscribers who have given explicit consent
• To ensure the security and stability of our website (via server logs and Cloudflare protection)
• To communicate with you regarding inquiries
• To comply with legal obligations and prevent misuse or fraud

4. Legal Bases for Processing (EU Visitors)

For visitors from the European Union, processing is based on:

• Consent (Art. 6(1)(a) GDPR): For newsletter subscriptions and optional communications
• Legitimate Interests (Art. 6(1)(f) GDPR): For website security, server logs, and general site operation

You may withdraw your consent at any time by unsubscribing from the newsletter or contacting us at [email protected].

5. Newsletter and Rapidmail

We use the service provider Rapidmail GmbH for managing and sending newsletters.
Rapidmail stores and processes personal data on secure servers in Germany (EU) and, if required for technical reasons, also in the United States.

All processing by Rapidmail is done based on a Data Processing Agreement (DPA) and, where applicable, Standard Contractual Clauses (SCCs) approved by the European Commission to ensure compliance with the GDPR.

6. Hosting and Infrastructure

Our website is hosted by DigitalOcean LLC (USA) and protected by Cloudflare Inc. (USA).
These providers may temporarily process IP addresses and related technical data to deliver our website securely and efficiently.

Both companies are reputable US-based providers that comply with international data protection frameworks and implement strong security measures.

7. Data Transfers to the United States

As KyberionAI, Inc. is a US company, your personal data may be processed in the United States.
Where required under the EU General Data Protection Regulation (GDPR), we rely on Standard Contractual Clauses (SCCs) to ensure that any transfer of personal data outside the European Economic Area (EEA) maintains an adequate level of protection.

Please note that while the United States does not currently have an EU adequacy decision, we take all necessary steps to safeguard your data in accordance with GDPR standards.

8. Data Retention

We store your personal data only for as long as necessary:

• Newsletter data: until you unsubscribe
• Contact emails: until your inquiry is resolved
• Log files: typically deleted automatically within 30 days (depending on hosting settings)

9. Your Rights (EU Data Subjects)

If you are located in the EU or EEA, you have the following rights under the GDPR:

• Right to access your data
• Right to rectification and erasure
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

To exercise your rights, contact us at [email protected].

10. Data Security

We use appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.
This includes HTTPS encryption, firewall protection via Cloudflare, and secure storage of data.

11. Children’s Privacy

Our website and services are not directed to children under 16 years of age.
We do not knowingly collect personal information from minors. If you believe a child has provided personal data to us, please contact [email protected].

12. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the "Last updated" date at the top.

Material changes will be clearly communicated on the website before they take effect.

13. Contact

If you have any questions about this Privacy Policy or your personal data, please contact us:

KyberionAI, Inc.
Email: [email protected]