Privacy Policy

1. Scope

This Privacy Policy applies to Kosmoy websites, applications, and services. It covers data provided directly by users, data created through account activity, and technical data collected during product usage.

2. Controller and Processor Roles

Depending on the use case, Kosmoy may act as a data controller or as a processor on behalf of a customer organization. When we act as a processor, we process data according to customer instructions and contractual commitments.

3. Data We Collect

• Account data: name, email address, organization, and role assignments.
• Service data: configuration, workspace content, and activity logs generated in the platform.
• Technical data: device/browser attributes, IP address, and service diagnostics.
• Cookie and usage data: session preferences and product analytics needed to operate and improve the service.

4. How We Use Data

• To provide, secure, and maintain the service.
• To authenticate users and enforce access controls.
• To detect abuse, troubleshoot incidents, and prevent fraud.
• To communicate service updates and support responses.
• To improve product quality, reliability, and user experience.

5. Legal Bases

We process personal data under applicable legal bases, including contract performance, legitimate interests, legal obligations, and consent where required.

6. Sharing and Subprocessors

We share data only as needed to operate the service, comply with law, or protect rights and security. This may include vetted cloud providers, analytics tools, and support vendors operating under contractual safeguards.

7. International Data Transfers

If data is transferred across jurisdictions, we use appropriate safeguards and contractual controls designed to protect personal data under applicable privacy law.

8. Retention and Security

We retain data for as long as necessary for service delivery, legal compliance, and legitimate operational needs. We use administrative, technical, and organizational safeguards to reduce unauthorized access, disclosure, or misuse.

9. Your Rights

Subject to local law, you may have rights to access, correct, delete, or restrict processing of personal data, and to object to certain uses. To exercise these rights, use the support and contact channels listed on kosmoy.com.

10. Cookies and Similar Technologies

We use cookies and similar technologies to keep sessions active, remember preferences, and analyze service usage. Browser controls may allow you to limit or disable certain cookies.

11. Children's Privacy

Kosmoy services are not directed to children. If you believe a child's data was provided in error, contact us so we can review and address the request.

12. Policy Updates

We may update this Privacy Policy to reflect service, legal, or regulatory changes. The latest version will always be available on this page with a revised update date.