Privacy Policy
Last updated: February 2025
Introduction
KYFEX (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you visit our website at kyfex.io or use our services.
We have written this policy in plain language so you can understand exactly what happens with your data.
Data We Collect
We collect the following types of information:
Information You Provide
- Newsletter subscriptions: Your email address when you subscribe to our newsletter. This data is stored in Amazon DynamoDB and emails are sent via Amazon SES.
- Booking information: When you schedule a call through Cal.com, we receive your name, email, and any notes you provide.
- Contact information: Any details you share when reaching out to us via email at info@kyfex.com.
Information Collected Automatically
- Usage data: Pages visited, time spent, referral source, browser type, device type, and general geographic region.
- Cookies: See the Cookies section below.
Chatbot Data
If you interact with our AI chatbot, your messages are processed by a managed AI service. Chatbot sessions are temporary and are not stored permanently. We do not use chatbot conversations to train AI models. Session data is held only for the duration of your visit to provide context within the conversation.
Cookies
By default, we use only essential cookies that are necessary for our website to function properly. These include cookies for session management, security, and user preferences (such as theme and language).
If you accept analytics cookies through our cookie banner, we may set additional cookies from:
- Google Analytics 4 (GA4): Helps us understand how visitors use our site. Data is anonymized and we do not enable advertising features.
- PostHog: Product analytics to help us improve the user experience. Self-hosted or EU-hosted where possible.
You can change your cookie preferences at any time through the cookie settings in the footer of our website.
How We Use Your Data
We use your information to:
- Send you our newsletter if you have subscribed (you can unsubscribe at any time)
- Schedule and manage booking calls via Cal.com
- Respond to your inquiries
- Understand how our website is used so we can improve it
- Ensure the security and performance of our website
We do not sell your personal data. We do not use your data for advertising purposes.
Third-Party Services
We use the following third-party services that may process your data:
- Amazon Web Services (AWS): Infrastructure hosting, DynamoDB for newsletter storage, SES for email delivery, managed AI services for chatbot processing.
- Google Analytics 4: Website analytics (only if you accept analytics cookies).
- PostHog: Product analytics (only if you accept analytics cookies).
- Cal.com: Appointment scheduling.
- YouTube (embedded videos): We use privacy-enhanced mode (youtube-nocookie.com) to minimize data collection.
Each of these services has its own privacy policy. We recommend reviewing them if you have concerns.
Data Storage and Security
Your data is stored on AWS infrastructure, primarily in the US East region. We use industry-standard security practices including encryption in transit (TLS) and at rest, access controls, and regular security reviews.
Newsletter email addresses are stored in DynamoDB with encryption at rest enabled. We retain your email only as long as you remain subscribed.
Your Rights (GDPR and CCPA)
Regardless of where you are located, we extend the following rights to all users:
- Right to access: You can request a copy of the data we hold about you.
- Right to rectification: You can ask us to correct inaccurate data.
- Right to erasure: You can ask us to delete your data. For newsletter subscribers, you can unsubscribe at any time and your email will be removed.
- Right to data portability: You can request your data in a machine-readable format.
- Right to object: You can object to certain types of data processing.
- Right to opt out of sale: We do not sell your data, but you have the right to confirm this.
To exercise any of these rights, email us at info@kyfex.com. We will respond within 30 days.
Children's Privacy
Our website and services are not directed at children under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “last updated” date at the top of this page. We encourage you to review this page periodically.
Contact
If you have any questions about this Privacy Policy or how we handle your data, contact us at:
- Email: info@kyfex.com
- Website: kyfex.io
