Kastron Privacy Notice

Effective Date: October 8, 2026

Last Updated: October 8, 2026

Kastron Technologies Inc. (“Kastron”, “we”, “us” or “our”) respects your privacy. This Privacy Notice explains how we collect, use, disclose, and otherwise process personal information through our marketing website at www.kastron.ai (our “website”). It covers this website only. It does not cover the Kastron product or other services.

If you are a California resident, this notice also describes your rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and how to exercise them.

Collection

What Personal Information We Collect

When you request a demo or contact us by email, we collect identifiers that you provide us, such as your name, email address, company name, and phone number.

When you visit our website, we and our service providers that host, secure, and analyze our website automatically collect the following personal information:

Identifiers, such as IP address, cookie identifiers, and a random identifier for your browser, created if you turn analytics on yourself. If you then request a demo, it is associated with your request.
Internet or other electronic network activity information, such as pages visited, time and date of visits, referring URLs, browser and device information, approximate location derived from your IP address, and how you interact with our website, including the sections you view, copy and share actions, and video viewing.

California Disclosures (CCPA/CPRA)

Notice at Collection (California)

This section applies to California residents. We provide this notice at or before the point we collect personal information.

What we collect

Identifiers (e.g. name, email, company name, phone number, IP address, cookie identifiers, browser identifier).
Internet or other electronic network activity information (e.g. pages visited, browsing behavior, referring URLs, approximate location, interactions with our website).

Why we collect and use it

Respond to inquiries and demo requests, including recording them in our customer relationship management system.
If you turn analytics on yourself and request a demo, associate your website activity with your request.
Run and improve our website (including troubleshooting and analytics).
Protect our website and users (security and fraud prevention).
Meet legal requirements.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.
We disclose personal information to our service providers so they can run our website and help us respond to you, as described in “How We Disclose Personal Information”. They process it on our behalf for those purposes. Under California law, these disclosures are not a sale or sharing.

Sensitive personal information

We do not collect sensitive personal information. If we begin collecting sensitive personal information, we will update this notice.

California “Preceding 12 Months” Summary

In the preceding 12 months, we collected the categories of personal information described in this notice, from the sources and for the purposes described in it, and disclosed them for business purposes to the service providers described in “How We Disclose Personal Information”. In the preceding 12 months, we have not sold personal information or shared it for cross-context behavioral advertising, including personal information of consumers under 16 years of age.

Where We Get Personal Information

We collect personal information directly from you when you request a demo or contact us by email.

We and our service providers collect personal information automatically through cookies and similar technologies when you visit our website, as described in “Cookies And Tracking Technologies” below.

How We Use Personal Information

We use personal information for these business and commercial purposes:

To respond to you, including processing demo requests, recording them in our customer relationship management (CRM) system so we can follow up, and sending you the information you asked for.
If you turn analytics on yourself and request a demo, to associate your activity on our website with your request, so we can understand your interests and support follow-up on your request.
To run and improve our website, including keeping it working properly, fixing problems, and improving your experience.
To understand how our website is used, including analyzing visits and activity so we can improve our services.
To protect our website and users, including preventing fraud and stopping unauthorized access.
To meet legal requirements, including complying with laws and responding to lawful requests.

How We Disclose Personal Information

We may disclose personal information to certain third parties for business purposes, depending on how you use our website and services. The types of third parties we may disclose personal information to include:

Service providers that help us run our website and respond to you: website hosting and security, video delivery, email delivery, our customer relationship management (CRM) system, website analytics, and IT support. These disclosures are for business purposes and are not a sale or sharing of personal information.
Legal, regulatory, or other parties when we believe disclosure is required by law, legal process, or a lawful request, or when needed to protect our rights, safety, and property.
Parties involved in a business transaction, such as a merger, acquisition, financing, reorganization, or sale of some or all of our business or assets.
Our affiliates, for internal business purposes consistent with this notice.

How Long We Keep Personal Information

We keep personal information only for as long as we need it to do the things described in this notice. How long we keep it depends on what the information is and why we collected it. Here are some examples:

Inquiry and demo request records: We keep these long enough to respond to you and manage follow-up, unless you ask us to delete them (and unless we must keep them for legal reasons). This includes the record in our CRM and any website activity summary linked to it.
Demo requests on their way to our CRM: We keep a temporary copy for at most 7 days while the request is recorded in our CRM.
Website activity and demo requests: A browser stays associated with a demo request for 24 months after the latest demo request from that browser, or until you turn analytics off. Activity waiting in your browser to be sent to us expires after 30 days. Our systems keep an activity summary while a browser remains associated with your request. After the last browser association ends, we delete this copy once the final CRM update is complete, and no later than 30 days afterwards. Limited technical records that prevent a visit being counted twice, or a browser being associated again after you turn analytics off, are kept for 45 days. The activity added to your demo request record is kept as described for inquiry and demo request records.
Website analytics: our website analytics provider keeps user-level and event-level data for 14 months. Aggregated reports, which do not identify individual visitors, may be kept longer.
Security logs: We keep these for a limited time that is appropriate for security, fraud prevention, troubleshooting, and auditing.
Legal and compliance records: We keep these as required by law or as needed to establish, exercise, or defend legal claims.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. Disclosures to our service providers, described above, are not a sale or sharing. Before we add advertising or marketing partners, we will review this notice and our practices.

Controls

Your Privacy Rights

We provide the rights below to all users as part of our global privacy standard:

Right to know / access: You can ask for the categories and specific pieces of personal information we collected about you, the sources we collected it from, the purposes for collecting it, and the categories of third parties we disclosed it to.
Right to delete: You can ask us to delete personal information we collected from you.
Right to correct: You can ask us to correct inaccurate personal information we maintain about you.
Right to opt out of sale/sharing: You can opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

You can submit a request to know, access, delete, or correct your personal information, or to opt out of the sale or sharing of your personal information, by sending an email to privacy@kastron.ai.

To help us process your request, please include:

Your name and email address.
The type of request (e.g. access, deletion, correction, or opt out).
Enough information for us to verify your identity.

To protect your personal information, we verify your identity before we process your request:

For access and correction requests: We match information you provide (such as name and email) against our records.
For deletion requests: We match information you provide against our records and may send a confirmation to the email address we have on file before we complete the deletion.

We respond to requests for access to your personal information within 30 days after we receive them. If applicable law permits us to extend that period, we will send you a notice of extension within those 30 days. Where the Personal Information Protection and Electronic Documents Act (PIPEDA) applies, the notice will tell you the new time limit, the reasons for the extension, and your right to make a complaint to the Privacy Commissioner of Canada about the extension. We respond to other requests within the time required by applicable law. You can appoint an authorized agent to submit a request for you. We may ask the agent to provide proof of your written permission, and we may verify your identity directly.

Opt Out Preference Signals (Global Privacy Control)

We do not sell personal information or share it for cross-context behavioral advertising. We also treat a Global Privacy Control signal as a request to keep website analytics off. If your browser sends one, Google Analytics stays off for that browser and no website activity from it is linked to a demo request, even if you turned analytics on before. To learn more about GPC and how to enable it, visit: https://globalprivacycontrol.org/

We do not sell personal information or share it for cross-context behavioral advertising. You can send any privacy request, including a request to opt out of the sale or sharing of your personal information, to privacy@kastron.ai, as described in “Your Privacy Rights” above.

Cookies And Tracking Technologies

We and our service providers use cookies and similar technologies on our website to:

Provide and secure the website.
Analyze website traffic and usage.
With your agreement, link your website activity to your demo request.

Website analytics. We use Google Analytics, provided by Google, to understand how visitors use our website. When analytics is on, Google Analytics collects information about your visit: the pages and sections you view, actions such as copying text, copying or sharing a link, clicking Request a Demo, and how much of our product video you play, whether a demo request was sent, your browser and device, and your approximate location derived from your IP address. It uses first-party cookies for this. We do not send Google the contents of our forms, or your name, email address, company or phone number. Google signals and advertising features are off, and we do not use analytics data for advertising.

Default setting. Analytics is off by default if you are in the European Economic Area, the United Kingdom, Switzerland or Quebec, or if we cannot determine your region. Elsewhere it is on by default. To choose the default, we use the approximate country and, in Canada, the province that our hosting provider derives from your connection. We do not store it.

Your choice. You can turn analytics on or off at any time under Privacy Choices at the bottom of our pages. Your choice is saved in your browser and replaces the default. Turning analytics off stops collection from that browser immediately. Information already collected is kept as described in “How Long We Keep Personal Information”.

Website activity and demo requests. If you turn analytics on yourself and request a demo, we associate activity from that browser with your request, including earlier activity and later visits. This includes the sections you view, copy and share actions, video viewing and demo-request activity. We use this information to understand your interests and support follow-up on your request. You can stop further collection through Privacy Choices. Previously collected information is retained as described under ‘How Long We Keep Personal Information’.

A default setting never creates this association: it happens only if you turn analytics on yourself. A Global Privacy Control signal from your browser prevents it. We associate a browser, not a person, so if someone else uses that browser, their activity may be included. This association and your contact details are not sent to Google.

We do not use advertising cookies or pixels. You can also block or delete cookies in your browser settings. Google offers a browser add-on for opting out of Google Analytics on websites that use supported versions of it: https://tools.google.com/dlpage/gaoptout. The add-on works only in browsers where it is supported and installed, and it is separate from the Privacy Choices control on our website.

Children’s Privacy

Our website is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we collected personal information from a child under 16, we will promptly delete it.

International Data Transfers

Kastron is headquartered in Canada. Your personal information may be transferred to, stored in, and processed in Canada or other countries where our service providers operate. Our service providers, including our website analytics and CRM providers, may process personal information outside Canada, including in the United States. We take reasonable measures to protect your information in line with this notice and applicable law.

Updates To This Notice

We may update this Privacy Notice from time to time. If we make material changes, we will post the updated notice on our website with a new effective date. We encourage you to review this notice periodically.

Contact Us

If you have questions or concerns about this Privacy Notice or our privacy practices, please contact us by sending an email to privacy@kastron.ai.