Legal
Privacy Policy
Effective date: March 20, 2026
Kybra, Inc. ("Kybra," "we," "us," or "our") operates the kbyra.ai website and the Kybra platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use the Service.
1. Information We Collect
Account Information
When you create an account, we collect your name, email address, company name (optional), and password. We use this information to authenticate you and provide access to the Service.
Usage Data
We collect information about how you interact with the Service, including API requests, inference calls, model deployments, resource consumption, and access logs. This data is used to operate the Service, enforce fair use, and produce billing records.
Technical Information
We automatically collect IP addresses, browser type, operating system, referring URLs, and timestamps when you access the Service. This data is used for security monitoring, abuse prevention, and service improvement.
2. How We Use Information
- Provision, operate, and maintain the Service
- Authenticate users and manage sessions
- Process payments and generate invoices
- Detect and prevent fraud, abuse, and security threats
- Send transactional emails (account confirmation, billing receipts, service alerts)
- Respond to support requests
- Comply with legal obligations
We do not sell your personal information. We do not use your data to train AI models without your explicit consent.
3. Data Sharing
We share your information only in the following circumstances:
- Service Providers: Infrastructure, payment processing, and monitoring vendors who process data on our behalf under confidentiality obligations.
- Legal Requirements: If required by law, court order, or regulatory authority, or to protect the rights and safety of Kybra or others.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations.
4. Data Retention
We retain account data for the duration of your account and for up to 90 days following account deletion. Billing records are retained for seven years as required by applicable law. Usage logs are retained for up to 12 months.
5. Security
We implement technical and organizational measures to protect your data, including encryption in transit (TLS 1.2+), encrypted storage, access controls, and audit logging. No system is completely secure; we encourage you to use strong passwords and protect your API credentials.
6. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict processing of your personal data. To exercise these rights, contact us at [email protected].
We will respond to verified requests within 30 days. We may need to verify your identity before processing your request.
7. Cookies
We use essential session cookies required for authentication and service operation. We do not use third-party advertising cookies or cross-site tracking cookies.
8. International Transfers
The Service is operated in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States. We rely on Standard Contractual Clauses where required for transfers from the European Economic Area.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified by email or by a prominent notice on the Service. Your continued use of the Service after the effective date constitutes your acceptance of the updated policy.
10. Contact
For privacy questions or requests, contact us at [email protected] or by mail at Kybra, Inc., TODO: Add registered company address.