Privacy Policy

Last updated: July 22, 2026

This Privacy Policy explains how Kyro9 ("Kyro9", "we", "us"), operated by Kyro9 Technologies Private Limited, collects, uses, and protects personal information when you visit kyro9.com, use our marketing site and free threat-intel hub, book a demo, or subscribe to our newsletter. It also covers your rights under the EU/UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and India's Digital Personal Data Protection Act (DPDP).

This policy covers our public website and demo/newsletter flows. Processing of a customer's own cloud data within the Kyro9 product is governed by the customer agreement and Data Processing Addendum (available on request), and — for self-hosted deployments — remains entirely within the customer's environment.

1. Who we are

The data controller is Kyro9 Technologies Private Limited (trading as "Kyro9"), registered address Vasundhara, Ghaziabad, Uttar Pradesh 201012, India. For any privacy question or request, contact [email protected].

2. Information we collect

  • Demo bookings — when you book a demo through our scheduling provider (Cal.com), we collect your name, work email, company, and any details you provide about your environment and meeting.
  • Newsletter subscription — if you subscribe to our threat-intel newsletter, we collect your email address (and the time and approximate origin of the request for abuse prevention).
  • Direct contact — if you email us, we receive your email address and the contents of your message.
  • Usage & device data (cookies) — with your consent, we collect standard analytics and advertising data such as IP address, device/browser type, pages viewed, referring source, and interactions, via the tools described in Section 5 and our Cookie Policy.

We do not intentionally collect special-category/sensitive personal data through this website, and ask that you not send it to us.

3. How we use your information

  • To schedule, prepare for, and follow up on the demo you request.
  • To send our newsletter and product updates you subscribe to (you can unsubscribe at any time).
  • To respond to your enquiries and provide support.
  • To measure and improve our website and marketing, and — with consent — to measure the performance of our advertising.
  • To protect the site against abuse and to comply with legal obligations.

4. Legal bases (GDPR/UK)

Where the GDPR applies, we rely on: consent (analytics/advertising cookies, newsletter); legitimate interests (responding to enquiries, securing and improving our site); and contract / steps prior to a contract (arranging a demo you request). You may withdraw consent at any time.

5. Cookies, analytics & advertising

We use essential cookies to operate the site, and — only after you consent via our cookie banner — analytics and advertising cookies. We implement Google Consent Mode v2, so Google's tags load in a consent-aware way and non-essential storage stays disabled until you opt in. See our Cookie Policy for the full list and controls. You can change your choices any time via "Cookie settings" in the footer.

6. Third parties we share data with

We share personal data only with the service providers ("sub-processors") needed to run this site and our demo/newsletter flows. We do not sell your personal information. Current providers include:

  • Google LLC — Google Analytics (site measurement) and Google Ads (advertising measurement/conversion). With consent, data such as your IP, device and interactions is shared with Google; see Google's privacy policy.
  • Cloudflare, Inc. — website hosting, CDN, security and storage.
  • Cal.com, Inc. — demo scheduling; processes the booking details you submit.
  • Our email/newsletter provider — delivery of the newsletter you subscribe to.

A current, detailed list is maintained on our Sub-processors page. We may also disclose information where required by law.

7. International data transfers

Our providers may process data in the United States, India, the EU and other countries. Where personal data is transferred out of the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

8. Data retention

We keep demo and enquiry data for as long as needed to pursue the relationship and for a reasonable period thereafter; newsletter data until you unsubscribe; and analytics data per the retention settings of our analytics tools. We delete or anonymize data when it is no longer needed.

9. Your rights

EEA/UK (GDPR): you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to lodge a complaint with your supervisory authority.

California (CCPA/CPRA): you have the right to know, delete, and correct your personal information, and to opt out of "sale" or "sharing." We do not sell personal information; to opt out of sharing for cross-context advertising, use "Cookie settings" or decline advertising cookies, and we honor Global Privacy Control (GPC) signals.

India (DPDP Act): you have the right to access, correction, and erasure of your personal data, and to grievance redressal.

To exercise any right, email [email protected]. We will verify and respond within the timeframes required by applicable law.

10. Children

Our site and services are intended for businesses and are not directed to children under 16. We do not knowingly collect data from children.

11. Security

We apply administrative, technical and organizational measures appropriate to the risk, including encryption in transit and least-privilege access. No method of transmission is perfectly secure, but we work to protect your information.

12. Changes to this policy

We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, take additional steps as required by law.

13. Contact us

Questions or requests: [email protected]. Postal: Kyro9 Technologies Private Limited, Vasundhara, Ghaziabad, Uttar Pradesh 201012, India.