Privacy Policy

1. Controller

[PLACEHOLDER · legal review: controller identity and contact details]

Privacy contact: contact@kertus.ai

2. Data processed on this website

• Contact form submissions (name, company, email, message), processed to respond to your enquiry, after double-opt-in email verification.
• Aggregate, cookie-less usage analytics.

[PLACEHOLDER · legal review: legal bases per processing activity (Art. 6 GDPR)]

3. Processors and recipients

• Resend: transactional email delivery (contact-form verification and notifications).
• Stripe: subscription payments when self-serve checkout is enabled.
• Vercel Analytics: aggregate website analytics.
• Hetzner: EU (Frankfurt) hosting of the Kertus gateway service.

[PLACEHOLDER · legal review: DPA references and transfer mechanisms per processor]

4. The gateway service

• Zero prompt retention by default; prompts and AI responses are not stored.
• The semantic cache stores masked text only, encrypted, with a TTL.
• Audit records store decisions and counts, never content.

[PLACEHOLDER · legal review: processor/controller roles for gateway traffic; retention periods]

5. Your rights under GDPR

You have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21), and the right to lodge a complaint with a supervisory authority (Art. 77).

[PLACEHOLDER · legal review: competent supervisory authority]