PRIVACY & DATA HANDLING
Your information.
Clear responsibilities.
This notice covers the KonnectOS corporate website and the workspace used to manage our own client projects.
Updated October 27, 2026. Industry demonstrations use fictional information. A separately deployed customer platform requires its own privacy notice, service agreement and data-handling configuration.
Information we collect
- Consultation details you submit: name, business email, company, industry, requested services, message and contact permission.
- Account and company information: email, authentication records, contact details, profile information, planning responses and preferences.
- Project records: files you upload, project status, support conversations, approvals, quotes, invoices, course progress and certificates.
- Website and software assessments: submitted domain, observed public website signals, entered software costs, assumptions and saved reports.
- Technical records: service logs, security events and limited browser/network information processed by hosting and authentication providers. Hashed network and email identifiers are used to help limit abusive submissions.
Why we use it
We use this information to respond to requests, authenticate users, deliver contracted services, manage projects and approvals, provide billing records, maintain training progress, send service updates, investigate problems and protect the platform. Consultation contact permission applies to the request you submit; it is not blanket permission for unrelated promotional campaigns.
Providers and access
The current platform uses Vercel for hosting, Supabase for authentication, database and private file storage, and Resend for transactional email. Authorized team members access records needed for service and support. Providers process information necessary to deliver their services under their respective terms and data-handling arrangements. Infrastructure and support processing can involve locations outside your own region.
Payment collection is not active in this release. If payment processing is enabled later, the payment provider and relevant handling will be disclosed before payment. Do not send card details through messages or uploads.
Optional AI assistance
When you choose live AI assistance, your prompt and a limited summary of your own workspace project records are sent through Vercel AI Gateway to the configured model provider. Scripted public demonstrations do not make a live model request unless you select live AI. Do not enter confidential client records, health information, credentials or other restricted data. Provider processing and retention depend on the selected service; this notice does not promise zero retention or exclusion from provider training. Sensitive use requires a separate review and appropriate agreements.
Cookies, local storage and installation
Authentication cookies support sign-in and session security. Browser storage keeps items such as assessment claims, tutorial completion and fictional demo progress. The service worker caches a public offline screen and app icons; it does not cache authenticated pages, API responses or client files. Removing browser data can sign you out and remove local demo progress.
Email and notifications
Project and support alerts may be sent by email. Optional alert preferences are available in your workspace. Push notifications require browser permission and device registration; a push delivery provider receives the subscription details needed to deliver an alert. Lock-screen alerts use generic text. You can disable device notifications in the workspace or browser settings. Essential authentication messages are handled separately.
Retention and security
We retain records as needed to provide services, maintain business records, resolve disputes and meet applicable obligations. Exact retention, deletion, backup and handover requirements should be recorded in your service agreement. Account closure does not necessarily erase approval, invoice, audit or backup records immediately. No fixed backup-retention period or instant deletion is promised here.
Controls include authenticated access, record-level authorization, private file storage and audit records for supported actions. Automated file malware scanning is not connected in this release; uploaded files require staff review. No internet service can guarantee complete security.
Your choices and requests
You can update available profile fields and notification preferences in your account. Contact info@cybersecuritydoctors.com to request access, correction, export, account closure or deletion, or to ask about privacy. We may need to verify your identity and authority; available rights and exceptions depend on applicable law and the relevant agreement. Do not email passwords or identity documents unless a secure verification process has been agreed.
Scope and updates
This service is intended for business use. Do not submit information about children or regulated records without an expressly approved workflow. We may update this notice when the service changes and will show the revised date. Material changes affecting an existing engagement will be addressed through the applicable agreement or notice process.
Website terms · Ownership & service responsibilities · Contact us