Privacy Policy
Last updated: 2026-02-27
1. Who We Are
KriyaFlow AI is a consultancy that builds automation and AI solutions for growing businesses. We are based in Poland and operate worldwide.
If you have any questions about this Privacy Policy, please contact us at hello@kriyaflowai.com.
2. What Data We Collect
We collect information that you provide directly to us when you use our website. This includes:
- Contact Form Data: When you submit our contact form, we collect your full name, work email address, company name, company size, main challenge description, budget range, and timeline preferences.
- Analytics Data: If you consent to analytics cookies, we collect anonymised usage data through Umami Analytics, including pages visited, time spent on site, and general location (country level only). This data does not include any personally identifiable information.
- Cookies: We use essential cookies for session management and, with your consent, analytics cookies. See our Cookie Policy for more details.
- Technical Data: We automatically collect certain technical information when you visit our website, including your IP address, browser type, and device information. This data is used for security and to improve our services.
3. How We Use Your Data
We use the information we collect for the following purposes:
- To Respond to Enquiries: We use your contact form data to respond to your discovery call requests and to assess whether our services are a good fit for your business.
- To Improve Our Website: We use analytics data to understand how visitors use our website and to make improvements to the user experience.
- To Provide Our Services: We use your information to deliver the services you have requested and to communicate with you about those services.
- For Security: We use technical data to protect our website from security threats and to ensure the integrity of our systems.
We do not use your data for marketing purposes without your explicit consent. We do not sell your data to third parties.
4. Who We Share Your Data With
We share your data with the following GDPR-compliant service providers who help us operate our website and deliver our services:
- Supabase: We use Supabase to store contact form submissions and blog content. Supabase is a GDPR-compliant database and authentication provider. Data is stored in secure data centers within the European Union.
- Resend: We use Resend to send email notifications when you submit a contact form. Resend is a GDPR-compliant email delivery service. Your email address and form data are transmitted securely to Resend for the sole purpose of sending notifications.
- Umami Analytics: If you consent to analytics cookies, we use Umami to collect anonymised usage data. Umami is a privacy-focused analytics platform that does not collect personally identifiable information and is GDPR-compliant.
We do not share your data with any other third parties unless required by law or with your explicit consent.
5. How Long We Keep Your Data
We retain your data for the following periods:
- Contact Form Data: We retain contact form submissions for 2 years from the date of submission. After this period, the data is automatically deleted from our systems.
- Analytics Data: Analytics data is aggregated and anonymised. We do not retain individual user data beyond the current session.
- Cookies: Essential cookies are deleted when you close your browser. Analytics cookies are retained for up to 1 year if you consent to them.
If you request deletion of your data before the retention period expires, we will delete it within 30 days of your request.
6. Your Rights
Under GDPR and other data protection laws, you have the following rights regarding your personal data:
- Right to Access: You have the right to request a copy of the personal data we hold about you.
- Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal data.
- Right to Deletion: You have the right to request that we delete your personal data, subject to certain legal obligations.
- Right to Data Portability: You have the right to request that we provide your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You have the right to object to the processing of your personal data in certain circumstances.
- Right to Withdraw Consent: If we are processing your data based on your consent, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at hello@kriyaflowai.com. We will respond to your request within 30 days.
7. Cookies
We use cookies to provide essential functionality and, with your consent, to collect analytics data. For detailed information about the cookies we use and how to manage your cookie preferences, please see our Cookie Policy.
8. How to Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Email: hello@kriyaflowai.com
Location: Poland
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.