Privacy Policy
Effective August 17, 2026 (supersedes the July 7, 2026 version)
1. Overview
This policy explains how Kovyr Technology LLC (“Kovyr,” “we”) collects, uses, and protects information when you use our website and our services — security-posture monitoring, compliance documentation, managed IT, and IT support.
2. Information we collect
Account and lead information: your email address, and — if you request a free scan or contact us — the domain you ask us to look at and the results of that scan.
Service data: the assets you enroll (domains, devices, accounts), scan results and findings, and — for managed IT and support engagements — technical information about the systems we service. In the course of repair or managed work we may incidentally encounter data stored on your systems; we access it only as needed to do the work.
Payment information is processed by Stripe; we do not store your card number.
Website usage: our site uses Vercel Analytics and Google advertising tags (Google Ads conversion tracking) — see section 4.
3. How we use it
We use your information to provide the services, generate your reports and documentation, respond to inquiries, communicate with you about your account (including, for free-scan users, follow-up email you can opt out of at any time), process payments, and measure whether our advertising works.
4. How we share it
We share information with service providers who help us operate: our hosting, analytics, and database providers (Vercel, Supabase), our payment processor (Stripe), and our email provider (Resend) — only as needed to run the services. Our website also loads Google tags for advertising measurement; Google may set cookies and receive standard web-visit information (such as pages viewed) in accordance with Google's own policies. We do not sell your data, and we do not share the contents of scans, reports, or your systems with advertisers. We may disclose information if required by law.
5. Data security
Access is restricted with database row-level security so that one customer cannot access another customer's data. Data is encrypted in transit, and administrative credentials are kept server-side only. Client credentials we hold for managed engagements are stored with access limited to performing the work.
6. Data retention
We keep your data while your account is active and for a reasonable period afterward, then delete or anonymize it. You may request deletion at any time.
7. Your choices
You may access or request deletion of your data by contacting us, unsubscribe from marketing email via the link in any message, and cancel subscriptions at any time. You can limit ad cookies through your browser settings and Google's ad settings.
8. Changes and contact
We may update this policy; changes will be posted here with a new effective date. Questions? Contact kendall@kovyr.com.