Privacy Policy

1. Introduction & Overview

This Privacy Policy describes how Kyto ("Company", "we", "our", or "us") collects, uses, stores, and protects personal information obtained through our website, client portals, lead capture forms, scheduling widgets, and automated communication services (collectively, the "Services").

By accessing or interacting with our Services, you consent to the data collection and usage practices described in this Privacy Policy. If you do not agree with the terms outlined herein, please discontinue use of our Services.

2. Information We Collect

We collect information that identifies, relates to, describes, or is reasonably capable of being associated with you ("Personal Information"). We collect this information in two primary ways:

A. Information You Provide Directly

• Contact Details: Full name, email address, telephone/mobile number, and physical or business address.
• Inquiry & Booking Data: Service interests, appointment requests, consultation details, and feedback or survey responses.
• Account & Transaction Data: Invoicing details, billing address, and transaction history (payment card processing is handled securely by certified third-party PCI-DSS compliant payment gateways).
• Communications: The contents of any text messages, emails, live chat dialogues, or customer service inquiries submitted to us.

B. Information Collected Automatically

• Device & Usage Data: IP address, browser type and language, operating system, referring URL, pages viewed, time spent on pages, and standard server log data.
• Form Interaction Data: Timestamps and referral parameters (such as campaign identifiers) associated with submitted contact forms.

3. How We Use Your Information

We utilize the collected information for legitimate business purposes, including to:

• Provide, operate, personalize, and maintain our marketing, automation, and client services.
• Dispatch transactional notices, appointment confirmations, scheduling updates, and customer support communications.
• Deliver requested quotes, estimates, service follow-ups, and review invitations.
• Optimize workflow automations, diagnose technical bottlenecks, and enhance user experience.
• Maintain enterprise-grade cybersecurity, prevent fraudulent activity, and comply with applicable statutory laws.

4. Mobile Information & SMS Communications

Kyto provides SMS/text messaging notifications, appointment reminders, customer service responses, and follow-ups to users who explicitly opt in.

SMS Opt-In & Consent

Consent to receive SMS messages is collected through explicit online web forms, booking confirmations, or direct text inquiries. Mobile consent is strictly voluntary and is never required as a mandatory condition for purchasing products or services.

SMS Opt-Out Instructions

You may revoke text messaging consent at any time. To unsubscribe from text communications, reply STOP, CANCEL, END, QUIT, or UNSUBSCRIBE to any SMS message received from us. You will receive one final text confirming your removal, and no further text messages will be sent unless you re-initiate contact.

Customer Assistance

For support regarding text messages, reply HELP to any message, or reach our support team directly at [email protected] or +1 437-747-7367.

5. How We Disclose Your Information

We do not sell, rent, or trade your personal information. We may disclose your data solely in the following limited scenarios:

• Authorized Service Providers: Trusted third-party vendors who perform critical technical functions on our behalf (e.g., cloud hosting, telecommunication gateway routing, and email transmission). These vendors are granted access exclusively to perform designated tasks under strict contractual confidentiality obligations.
• Legal & Regulatory Mandates: Where required by valid court order, subpoena, governmental warrant, or applicable law to protect life, property, or legal rights.
• Corporate Reorganization: In connection with or during negotiations of any merger, acquisition, financing, or sale of company assets, subject to standard confidentiality protections.

As stated in Section 4, text messaging originator opt-in data is categorically excluded from any third-party disclosure for marketing or commercial promotion.

6. Cookies and Tracking Technologies

We may use cookies, pixels, and standard web beacons to facilitate site functionality, track session continuity across form steps, and analyze aggregated traffic. You can instruct your browser to refuse all cookies or notify you when a cookie is issued. Note that certain interactive features of our Services may function suboptimally if cookies are disabled.

7. Data Retention & Security

We retain personal information for the period necessary to fulfill the purposes outlined in this Privacy Policy, uphold our contractual obligations, and comply with legal or accounting requirements.

We employ industry-standard administrative, physical, and technical safeguards (including SSL/TLS data-in-transit encryption, restricted database permissions, and secure tokenization) designed to protect personal information against unauthorized access, loss, alteration, or misuse. However, no electronic transmission or storage system can be guaranteed 100% secure.

8. Your Privacy Rights (GDPR, CCPA/CPRA, PIPEDA, CASL)

Depending on your jurisdiction of residence, you may possess specific statutory rights regarding your personal information, including:

• Access: The right to request copies of the personal data we hold about you.
• Rectification: The right to request correction of inaccurate or incomplete personal records.
• Erasure / Deletion: The right to request deletion of your personal data ("Right to be Forgotten"), subject to statutory record-keeping exceptions.
• Opt-Out of Marketing: The right to opt out of promotional emails (via the unsubscribe link in every email footer) or SMS communications (via STOP command).

To exercise any of these rights, please submit a written request to [email protected]. We verify and respond to all verifiable requests within statutory timeframes.

9. International Data Transfers

Our operations and technical infrastructure may process data on cloud servers located in the United States, Canada, or other international jurisdictions. When data crosses borders, we ensure adequate cross-border data protection safeguards are applied in compliance with applicable international privacy standards.

10. Children's Privacy

Our Services are designed exclusively for general commercial and business audiences. We do not knowingly collect personal data from children under the age of 16. If we become aware that a child under 16 has submitted personal information, we will delete such data from our systems promptly.

11. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy periodically to reflect technological advancements, operational changes, or legal updates. Any revisions will be published on this page with an updated "Effective Date". Your continued use of our Services following the publication of changes signifies your acknowledgment of the updated policy.

12. Contact Information

If you have any questions, inquiries, or privacy requests regarding this Privacy Policy, please contact our designated privacy team: