Privacy policy
This document is pending legal review.
Version of
This policy explains what personal data we receive through the keruva.com website, why, who we share it with and how you can control it. It covers the website only. Data processing inside the KERUVA system is governed by the contract with each customer.
1. Who is responsible for your data
Data controller: the owner of keruva.com.
For any question about your data, write to office@keruva.com.
2. What data we receive
Through forms. When you send the form on the Contact or Pricing page, we receive:
- your name, work email and company name;
- your phone number, if you give it;
- the topic and text of your message, or the number of users for a quote;
- the language and address of the page the form was sent from.
To filter out spam, the form records when you started filling it in, and your IP address helps limit how many forms can be sent from one address. The IP address is not included in the email with your request.
When you visit. As with any website, the server receives technical request data: IP address, browser type, page address and time. This data is processed by Cloudflare, which hosts and protects the website. Cloudflare determines the country from the IP address, and the website uses it to choose the page language; we do not store the country.
The website does not use cookies, visitor analytics or third-party trackers.
3. Why we process data
- to reply to your message;
- to arrange and prepare a demo;
- to prepare a quote;
- to protect the website and its forms from abuse.
We do not send newsletters, and we do not sell data or share it for advertising.
4. Legal basis
- Your consent, given with the checkbox in the form (Article 11 of the Law of Ukraine “On Personal Data Protection”).
- For visitors from the EU, under the General Data Protection Regulation (GDPR): consent and steps taken at your request before entering into a contract (Articles 6(1)(a) and 6(1)(b)); protecting the website from abuse is our legitimate interest (Article 6(1)(f)).
5. Who else processes data
Requests from the forms arrive by email in the company mailbox and are kept there. The website has no separate database of requests. We use these services:
- Cloudflare, Inc. (USA) hosts and protects the website and processes the forms.
- Resend, Inc. (USA) delivers the email with your request to the company mailbox.
- Google (Google Workspace service) stores the company email where requests arrive.
These companies process data only on our instructions and may do so outside Ukraine, including in the EU and the USA. By sending a form, you consent to this transfer.
6. How long we keep data
Emails with requests are kept as long as they are needed to reply and to work together, and no longer than three years after your last message. Technical request logs are kept briefly and only to protect the website and investigate failures.
7. Your rights
You can:
- find out what data we hold about you and get a copy;
- correct inaccurate data;
- ask us to delete your data or restrict its processing;
- object to processing;
- withdraw your consent at any time; this does not affect processing that took place before;
- complain to the Ukrainian Parliament Commissioner for Human Rights or, if you are in the EU, to your national data protection authority.
To use these rights, write to office@keruva.com. We reply within 30 days.
8. How we protect data
The website works only over a secure connection (HTTPS). The forms accept only the fields they need and check them on the server. Only employees who need the request mailbox for their work have access to it.
9. Changes to this policy
We publish each new version on this page with the date it takes effect.