Legal

Privacy Policy

Last updated: 21 July 2026

This Privacy Policy explains how Kyron Infotech (“Kyron Infotech”, “we”, “us” or “our”) collects, uses, shares and protects your information when you use Kyron Deck (the “Service”).

Kyron Deck is a workspace for keeping everything your software projects run on in one place — repositories, domains, servers, deployments, documents, and credentials and environment variables. Some of that information is highly sensitive, so protecting it is central to how the Service is built.

By using the Service you agree to this Policy. If you do not agree, please do not use the Service.

01Information we collect

We collect the following categories of information:

  • Account information — your name, email address, a hashed password, workspace or company name, profile details, and information about teammates you invite.
  • Workspace content — the data you choose to store: projects, git repositories, domains, servers, deployments, documents, and the credentials, keys and environment variables you add to them. You decide what goes in.
  • Usage and technical data — log data, IP address, device and browser information, the actions you take in the Service (recorded in an activity log), and timestamps.
  • Cookies and local storage — session and authentication cookies and preferences such as your theme.

02How we use your information

  • To provide, operate and maintain the Service, authenticate you, and enforce role-based access.
  • To keep the Service secure and maintain audit trails — for example, recording when a secret is revealed.
  • To send you service, security and account communications.
  • To improve, troubleshoot and develop new features.
  • To comply with legal obligations and enforce our terms.

We do not sell your personal information or your workspace content, and we do not use your workspace content to train machine-learning models.

03How we store and protect your information

  • Data is encrypted in transit (TLS) and at rest.
  • Sensitive values are masked by default and revealed only on demand, and every reveal is recorded.
  • Role-based access controls limit who within your workspace can view, edit or reveal data.
  • We apply administrative, technical and organizational safeguards and grant internal access on a need-to-know basis.

No method of transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security.

04Service providers and sub-processors

We rely on trusted third parties to host and operate the Service. They process data on our behalf under agreements requiring appropriate confidentiality and security. These include categories such as:

  • Cloud hosting and compute
  • Managed database
  • File and object storage
  • Transactional email delivery
  • Error monitoring and product analytics

05When we share information

  • With the service providers described above, to operate the Service.
  • Within your workspace — with the teammates you invite, according to their roles.
  • To comply with applicable law, legal process or lawful requests.
  • To protect the rights, property or safety of Kyron Infotech, our users or the public.
  • In connection with a merger, acquisition or sale of assets, with notice to you.

We never sell your information.

06Cookies

We use essential cookies to sign you in and keep your session, preference cookies (such as your theme), and minimal analytics. You can control cookies in your browser, but disabling essential cookies will prevent you from signing in.

07Data retention

We retain your information for as long as your account is active or as needed to provide the Service. When it is no longer needed, or on account deletion, we delete or anonymize it, subject to any legal retention obligations. You can request deletion at any time.

08Your rights

Depending on where you live — including under the EU/UK GDPR and India’s Digital Personal Data Protection Act — you may have the right to access, correct, delete, port, restrict or object to the processing of your personal data, and to withdraw consent. To exercise these rights, contact us at privacy@kyroninfotech.in. We will respond within a reasonable time and as required by applicable law.

09International data transfers

We are based in India, and your information may be processed in India and in other countries where we or our service providers operate. Where required, we put appropriate safeguards in place for such transfers.

10Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

11Security incidents

If a security breach affecting your personal data occurs, we will notify affected users and the relevant authorities as required by applicable law.

12Changes to this Policy

We may update this Policy from time to time. We will post the updated date at the top, and for material changes we will provide additional notice. Your continued use of the Service after changes take effect means you accept the updated Policy.

13Contact us

If you have questions about this Policy or your data, contact Kyron Infotech at privacy@kyroninfotech.in — Ahmedabad, Gujarat, India.