Privacy Policy
Last updated: [DATE — PENDING]
1. Who we are
KRU ("we") operates this website and the conversational engine described herein. For privacy requests: [privacy@getkru.com].
2. Data collected via this website
When you submit the contact form, we collect: name, company, work email, role, selected use case, and optional message. We may also collect basic technical data (IP address, browser type) for security and aggregated analytics, depending on the analytics tool configured.
3. Data processed on behalf of clients
When our clients use the KRU conversational engine, we process personal data of their leads, workers, customers, or partners as a data processor. The client is the data controller. Data types depend on the configured campaign (name, phone, requested documents, survey responses, etc.).
4. Purposes
On this site: respond to demo requests, communicate with prospects, and improve the site. In the conversational engine: operate client-configured campaigns toward defined goals (recruiting, research, orders, documents, etc.).
5. Legal bases
Consent when submitting the form; legitimate interest in responding to commercial inquiries; contract performance with clients for engine processing. Clients are responsible for having appropriate legal basis to contact their recipients.
6. Retention
Form data: as long as needed for commercial follow-up and legal obligations. Engine data: per client agreement and campaign retention configuration.
7. Sharing
We do not sell personal data. We may share data with infrastructure providers (hosting, messaging, analytics) under processing agreements. Documents collected in campaigns are routed per client instructions.
8. Security
We implement reasonable technical and organizational measures: encryption in transit, access controls, activity logging. No system is 100% secure; report incidents to [privacy@getkru.com].
9. Data subject rights
In Mexico, you have ARCO rights (Access, Rectification, Cancellation, Opposition) and consent revocation. In the EU and other jurisdictions, additional rights may apply (access, rectification, erasure, portability, objection, restriction). To exercise them: [privacy@getkru.com]. We will respond within applicable legal timeframes.
10. Opt-out and consent
People contacted by the conversational engine may opt out at any time with any phrasing. Opt-out is instant and permanent for that person in that campaign.
11. International transfers
Data may be processed on servers outside your country. Where applicable, we implement appropriate contractual safeguards.
12. Changes
We may update this notice. We will publish the current version on this page with the last updated date.