KaryaFlow

Privacy Policy

1. Introduction

KaryaFlow™ ("we," "our," or "us") is committed to protecting the privacy and security of data entrusted to us. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website (karyaflowhq.com) or use our enterprise AI Operating System, orchestration platform, and related services (collectively, the "Services").

2. Our Role: Controller vs. Processor

For the purposes of global data protection laws (including GDPR and CCPA), it is important to distinguish between the two types of data we handle:

  • Corporate/Marketing Data (KaryaFlow as Data Controller): This includes information you provide when visiting our website, requesting a demo, or communicating with our sales team (e.g., name, business email, job title, company name).
  • Customer Operational Data (KaryaFlow as Data Processor): This includes the data flowing through our platform via your connected integrations (ERP, CRM, HRIS). We only process this data according to your strict instructions and our Master Services Agreement (MSA). We do not sell this data, nor do we use your proprietary operational data to train our foundational AI models.

3. Information We Collect

Information You Provide: Contact details, billing information, and user account credentials.

Automated Diagnostic Data: When you use our platform, we automatically collect telemetry data (e.g., API request volumes, error rates, workflow execution times) to ensure SLA compliance, monitor system health, and provide technical support.

Cookies & Tracking: We use essential cookies to maintain secure sessions and performance cookies to understand website traffic. You can manage these preferences via our Cookie Consent Manager.

4. How We Use Your Information

We use your Corporate Data to:

  • Provide, operate, and maintain our Services.
  • Process enterprise billing and administration.
  • Respond to technical support requests and security incidents.
  • Send critical administrative updates and security alerts.

5. Data Sharing & Sub-processors

We do not sell your personal information. We may share necessary data with trusted third-party sub-processors (e.g., secure cloud infrastructure providers like AWS/GCP) who assist us in operating our platform. All sub-processors are bound by strict enterprise-grade confidentiality and security obligations. A full list of our current sub-processors is available upon request.

6. Data Retention & Security

We implement zero-trust architecture, controls aligned to the SOC 2 Trust Services Criteria, and end-to-end encryption to protect your data. Customer Operational Data is retained only as long as you maintain an active license, or as explicitly defined in your enterprise MSA, after which it is securely deleted.

7. Your Privacy Rights

Depending on your jurisdiction, you have the right to access, correct, delete, or restrict the processing of your personal data. To exercise these rights, please contact our Data Protection Officer at hello@karyaflowhq.com.

8. Contact

If you have any questions about this Privacy Policy, please contact us at hello@karyaflowhq.com.