Privacy
Policy.

This Privacy Policy applies to information collected by KyberCore Solutions ("KyberCore," "we," "us," or "our") through our website at kybercore.ai, our product surfaces (including but not limited to MACE at mace.kybercore.ai and Parsec at parsec-landing.fly.dev), and through direct communications such as our contact form, email, and intake calls.

It does not apply to data we process strictly on behalf of a client under a signed services agreement or data processing addendum; in those engagements, the client is the data controller and our obligations are governed by that contract.

Provided directly by you

• Contact form submissions: name, email address, company, and the free-text message describing your operation.
• Client engagement materials: any business data you share during scoping calls, design partnerships, or onboarding — including documents, screenshots, exports, and live system access.
• Product accounts: credentials and configuration for any KyberCore product you use, plus the operational data those products ingest on your behalf.

Collected automatically

• Server logs: IP address, user-agent string, referring URL, requested path, and timestamp. Retained for a rolling 30 days for security and operational diagnostics, then aggregated or deleted.
• Performance + reliability telemetry: page-load timing, JavaScript error reports, and similar diagnostic data. Tied to a session, not to your identity.

What we do not collect

We do not run third-party advertising trackers, do not sell or share your data for cross-context behavioral advertising, and do not use heat-mapping or session-recording tools that capture personally-identifiable user input on this website.

We use the information we collect to:

• Respond to inbound inquiries and qualify potential engagements;
• Deliver and improve our products and services;
• Operate, secure, and debug our websites and product surfaces;
• Comply with our legal obligations, enforce our agreements, and protect our and others' rights, safety, and property;
• Communicate with current clients about engagements, billing, scheduling, and product updates.

Where applicable law requires a lawful basis to process your personal data (e.g., the EU/UK GDPR), we rely on: (a) your consent, when you submit the contact form or otherwise reach out; (b) the performance of a contract with you or your organization; (c) our legitimate interest in operating our business; or (d) compliance with a legal obligation.

We do not sell your personal information. We share it only with the following categories of recipients, and only as needed:

• Service providers and sub-processors: infrastructure, hosting (Fly.io), email delivery, error monitoring, and AI inference providers (e.g., Anthropic, OpenAI) used to power product features. We enter into appropriate data processing terms with these providers and limit their access to what they need to perform their function.
• Professional advisors: our accountants, lawyers, insurers, and similar advisors, under confidentiality.
• Legal and safety: when required by law, subpoena, or court order, or where we believe disclosure is necessary to investigate, prevent, or respond to suspected illegal activity, fraud, or threats to safety.
• Business transfers: if KyberCore is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred to the surviving or acquiring entity, subject to confidentiality.

The marketing site at kybercore.ai uses only the minimum cookies required for the website to function correctly — for example, to remember your form-submission state in a single session. We do not use cookies for advertising or cross-site tracking on this site.

Our product surfaces (MACE, Parsec, etc.) require authentication cookies to keep you signed in. Those cookies are limited in scope to the product domain and are described in each product's in-app privacy notice and terms of service where applicable.

You can configure most browsers to refuse cookies or to alert you when cookies are being sent. If you disable cookies, some parts of our products may not function correctly.

• Contact form submissions: retained while we are in active discussion and for up to 24 months thereafter for follow-up, then deleted or anonymized.
• Client engagement records and business correspondence: retained for the duration of the engagement and for the period required by our agreements, tax obligations, and applicable statute of limitations.
• Product data: retained per the contract governing the product engagement. On termination, we return or delete client data as instructed, subject to any retention required by law.
• Server logs: 30 days rolling.

We may retain backup copies for a reasonable period after deletion from active systems. We may retain de-identified or aggregated data indefinitely; that data cannot be used to identify you.

Depending on where you live, you may have the right to: (a) request a copy of the personal data we hold about you; (b) ask us to correct inaccurate information; (c) ask us to delete your personal data; (d) restrict or object to certain processing; (e) request portability of your data in a structured, machine-readable format; and (f) lodge a complaint with your local data protection authority.

California residents have additional rights under the CCPA/CPRA, including the right to know the categories and specific pieces of personal information we collected; the right to delete; the right to correct; and the right to opt out of sale or sharing of personal information for cross-context behavioral advertising. We do not sell or share personal information for cross-context behavioral advertising.

To exercise any of these rights, email [email protected]. We will respond within the timeframe required by applicable law (typically within 30 to 45 days). We may need to verify your identity before fulfilling a request.

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include encryption in transit (HTTPS/TLS), encryption at rest for stored client data, access controls, audit logging, and least-privilege access policies for our team.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you and the appropriate authorities to the extent required by applicable law.

KyberCore is based in the United States. If you access our website or services from outside the United States, the information we collect may be transferred to, stored, and processed in the United States or other countries where we or our service providers operate. By using our website or services, you understand that your information may be transferred to countries that may not have the same data protection laws as the country in which you reside.

Where required by applicable law (including the EU/UK GDPR), we rely on appropriate safeguards for international transfers — including Standard Contractual Clauses and any additional measures required by the jurisdiction at the time of transfer.

Our website and services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

Our website contains links to third-party websites — including live product sites operated by KyberCore (such as parsec-landing.fly.dev) and external resources cited in case studies. We are not responsible for the privacy practices of any third-party site. We encourage you to read the privacy policy of every website you visit.

Our products and internal workflows use large language models, including services from Anthropic and OpenAI, to power agentic capabilities such as auto-generated insights, document extraction, and chat responses. Inputs to these services may include content you submit to our products.

We configure our use of these services to disable provider-side training on our data wherever supported by the provider. We do not allow our service providers to use your data to train their general-purpose models without your explicit consent.

We may update this Privacy Policy from time to time. We will revise the "Last updated" date at the top of this page and, for material changes, will provide additional notice (such as a banner on the website or, where required, direct notification). Your continued use of our website or services after a change takes effect constitutes your acceptance of the revised policy.

Questions, requests, or complaints about this Privacy Policy or our handling of your data can be sent to:

For general inquiries, please use the contact form on our homepage.