How we protect your data

Last updated: July 07, 2026

1. Information We Collect

KernelFlow Infrastructure Labs collects information to provide, improve, and secure our services. We collect:

• Account Information: Name, email address, company name, and billing details when you sign up.
• Usage Data: Model routing patterns, inference requests, performance metrics, and system logs.
• Technical Data: IP address, browser type, device information, and operating system.
• Communication Data: Emails, support tickets, and feedback you provide.

2. How We Use Your Information

We use your data for the following purposes:

• Service Delivery: To operate, maintain, and improve our AI infrastructure platform.
• Security & Compliance: To detect and prevent fraud, abuse, and security incidents.
• Customer Support: To respond to your inquiries, troubleshoot issues, and provide technical assistance.
• Product Improvement: To analyze usage patterns and develop new features.
• Legal Compliance: To comply with applicable l, regulations, and legal requests.

3. Data Sharing & Subprocessors

We do not sell your personal data. We share data only with trusted third‑party subprocessors that help us deliver our services:

• (Amazon Web Services): Cloud infrastructure and data storage — Privacy Policy
• Stripe: Payment processing — Stripe Privacy Policy
• SendGrid: Transactional email delivery — Twilio Privacy Policy

A complete list of our subprocessors is available in our Subprocessor List.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with services. We may also retain data to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your data at any time.

5. Data Security

We implement industry‑standard security measures to protect your data:

• Encryption: AES‑256‑GCM at rest and TLS 1.3 in transit.
• Access Controls: Role‑based access control (RBAC) and least‑privilege principles.
• Monitoring: 24/7 security monitoring and incident response.
• Audits: Regular third‑party security audits and penetration testing.

6. Your Rights

Under GDPR, CCPA, and other privacy regulations, you have the following rights:

• Access: Request a copy of the data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your personal data.
• Restriction: Restrict processing of your data.
• Portability: Request a machine‑readable copy of your data.
• Objection: Object to processing for marketing or legitimate interests.

To exercise any of these rights, contact us at privacy@kernelflow.one.

7. Cookies & Tracking

We use essential cookies for authentication and security. We also use analytics cookies (via Google Analytics) to understand how you interact with our website. You can manage your cookie preferences in your browser settings. For more details, see our Cookie Policy.

8. International Data Transfers

KernelFlow operates dual headquarters in the United States and Sri Lanka. Data may be transferred between these locations and to our subprocessors in compliance with applicable data protection l. We rely on Standard Contractual Clauses (SCCs) and other legally‑approved mechanisms for international transfers.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our website. The latest version will always be available at kernelflow.one/privacy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please reach out:

• Email: privacy@kernelflow.one
• Address: KernelFlow Infrastructure Labs, 101 California Street, 32nd Floor, San Francisco, CA 94111, USA
• Sri Lanka Office: KernelFlow Infrastructure Labs, Colombo, Sri Lanka