Privacy Policy

This Privacy Policy describes how Kumo ("Kumo," "we," "us," or "our") collects, uses, stores, shares, and protects your personal information when you use our cloud computing platform and related services (the "Services"). This policy applies to our website, applications, APIs, and all interactions with our Services.

We are committed to protecting your privacy and handling your data responsibly. By using our Services, you agree to the practices described in this Privacy Policy.

We use the information we collect to:

• Provide, maintain, and improve the Services.
• Process transactions and manage your account.
• Send service notifications, including billing, security alerts, and operational updates.
• Respond to your inquiries and provide customer support.
• Monitor for and prevent fraud, abuse, and security threats.
• Generate anonymized and aggregated analytics to improve our platform.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers — with trusted third parties who perform services on our behalf, such as payment processing, infrastructure hosting, and analytics. These providers are bound by contractual obligations to protect your data.
• Legal requirements — when required by law, regulation, legal process, or governmental request.
• Safety and security — to protect the rights, property, or safety of Kumo, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

We retain your personal information for as long as your account is active or as needed to provide the Services. When you delete your account, we will delete your personal data within a reasonable timeframe, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

Usage logs and analytics data may be retained for up to 12 months after collection. Backup data may be retained for up to 30 days after account deletion to support recovery needs.

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS), access controls, regular security audits, and infrastructure monitoring.

While we strive to protect your data, no method of transmission or storage is completely secure. We cannot guarantee the absolute security of your information and are not responsible for unauthorized access resulting from factors beyond our control.

We use cookies and similar tracking technologies to collect information about your browsing activity. These include:

• Essential cookies — required for the Services to function properly, including session management and authentication.
• Analytics cookies — help us understand how users interact with our Services so we can improve them.
• Preference cookies — remember your settings and preferences for a better experience.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our Services.

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your personal data, subject to legal retention requirements.
• Data portability — request your data in a structured, machine-readable format.
• Objection — object to certain processing activities, including direct marketing.
• Restriction — request that we limit how we process your data.

To exercise any of these rights, please contact us at the address provided in Section 12. We will respond to your request within a reasonable timeframe.

Your data may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place for such transfers, including standard contractual clauses or other legally recognized transfer mechanisms.

Our Services are not intended for children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised "Last updated" date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Kumo — Data Protection
Email: [email protected]
Website: kumo.run