Privacy Policy

Kanosis Website Privacy Policy

Effective: October 10, 2025
Entity: Kanosis LLC (“Kanosis,” “we,” “us”)

1) Scope

This policy explains how we collect, use, and share information when you visit kanosis.com and related pages (the “Site”). It does not cover our assessments or services delivered to customers; those are governed by our Assessment Privacy Notice and/or customer contract.

2) Information we collect

1. Information you provide
   If you submit a contact form or email us, we collect what you provide (e.g., name, business email, company, role, and the contents of your message). Please do not include confidential, HR, or medical details in free-text fields.
2. Information collected automatically (security/operations)
   When you visit the Site, our hosting and security providers automatically receive limited technical data such as your IP address, date/time, URL visited, referrer, browser/OS, and basic device information. We use this to deliver, secure, and improve the Site (e.g., prevent abuse, debug issues, and manage capacity).
3. Cookies and similar technologies
   At launch, we use only essential cookiesrequired for security and basic site functionality (and for administrator access). We do notuse analytics or advertising pixels at launch. If that changes, we will update this policy and our Cookie Policy ([link]).
4. Categories of personal information (U.S. state law framing)
   • Identifiers(e.g., name, business email) — if you submit them.
   • Internet or network activity(e.g., page views, IP address, user-agent) — collected automatically for security/operations.
   • Sensitive personal information— not sought or needed for the Site.

3) How we use information

• Operate, secure, and maintain the Site (including fraud and abuse prevention).
• Respond to your inquiries and conduct ordinary B2B communications.
• Comply with legal obligations and enforce our Terms.

4) Disclosures to service providers (categories)

We share information with vendors that process it for us and only under our instructions, including:

• Hosting/CDN and security(site delivery, DDoS/WAF, TLS/SSL, caching, logging).
• Email and IT(to receive and respond to contact requests).
• Website platform/plugins(to render the Site).
  We do not sell personal information and do not “share” it for cross-context behavioral advertising.

5) Aggregated and de-identified information

We may aggregate or de-identify information, and use or share it for analytics, site improvement, and business reporting. We will not attempt to re-identify such information.

6) Security

We implement appropriate technical and organizational measures to help protect personal information, including TLS encryption in transit, access controls, regular updates, and monitoring. No method of transmission or storage is perfectly secure.

7) Retention

• Security logs:retained for about 90 days, unless needed longer for security or legal reasons.
• Contact requests:retained for up to 24 months from the last interaction (or longer as required by law or to maintain business records).
  We determine retention based on factors such as legal requirements, security needs, and the nature of our relationship with you, and may retain data longer to comply with law, resolve disputes, or enforce agreements.

8) Your privacy choices and U.S. state rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information you provided. You can make a request using the contact information below. We will verify your identity and respond within applicable timelines (generally 45 days in the U.S.).

• Opt-out of sale/share / targeted advertising:Not applicable at launch because we do not sell or share personal information, and we do not engage in targeted advertising on the Site. If our practices change, we will provide required notices and controls.
• Sensitive personal information:We do not use or disclose SPI for any purpose that requires a “limit” right.
• Authorized agents (CA):If you use an agent, we may require proof of authorization and identity verification.
• Appeals (CO/CT/VA and similar states):If we decline your request, you may appeal by replying “Appeal” to our decision email; we will review and respond as required.

9) Global Privacy Control / Do Not Track

We do not sell or “share” personal information or run targeted advertising on the Site. We will honor recognized opt-out signals, including Global Privacy Control (GPC), where required by law. At launch, there is nothing to opt out of on this Site.

10) International visitors

We are a U.S. company and process data primarily in the United States. If you visit from another region, your information may be processed in countries with different data-protection laws.

11) Children

The Site is for business audiences and not directed to children under 13. We do not knowingly collect personal information from children.

12) Third-party links

The Site may link to third-party websites or services. Their privacy practices are their own; we encourage you to review their policies.

13) Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the Effective date and, where required, provide additional notice.

14) Contact us

Email: [email protected]