Your privacy is fundamental to our mission

Product Telemetry Data

• SQL Server telemetry data and performance metrics
• Query execution information and database activity
• System metadata and derived analytics
• SQL text and stored procedure calls when enabled for analysis (not row data or result sets; redaction and filtering available)

Website Contact Data

• Name and email address (via contact, demo, partner, careers, and privacy forms)
• Company information and SQL environment details where provided
• Messages, applications, and CVs / portfolio links submitted through our website
• Job applications and CVs you email to [email protected]
• Form submission timestamps. Client IP may be used briefly for rate limiting and abuse prevention on the website and is not stored in our CRM

Data We Do NOT Collect

• Row-level data from your databases
• Query result sets or actual data
• Database backups
• User credentials or passwords

Essential cookies

We use essential cookies and similar technologies required for the website to function securely — for example Cloudflare Turnstile on forms and basic session preferences. These are necessary and are not used for advertising.

Optional analytics

With your consent, we use Google Analytics to understand how visitors use kitroot.com (pages viewed, approximate location, device/browser). Analytics cookies are set only after you choose Accept on the cookie banner. If you choose Decline, Google Analytics is not loaded.

Website forms

Contact, demo, partner, and privacy requests are kept while the inquiry is active, then as needed for follow-up, security, and legal/accounting purposes. Typical working retention is up to 24 months, unless a longer period is required by law or an active matter.

Careers

Your CV is kept for 2 years from the date you apply, then deleted automatically — unless you are hired, or you ask us to keep it on file for longer. This applies however you apply. A CV uploaded through our careers form is stored on Kitroot's own servers; a CV you email to [email protected] is stored with that email in our ERP system (see Sub-processors). After that we keep the application record itself — your name and contact details, the role you applied for, and anything you wrote in your application or email (plus, for a CV uploaded through the form, a checksum proving which CV was deleted) — as our record that we handled your application properly. You can ask us to erase that record at any time using the contact details above.

Multi-tenant SaaS

Data processed in Kitroot's cloud regions with logical tenant isolation.

• Shared infrastructure with logical separation
• Standard security and compliance measures
• Automated data processing

Single-tenant SaaS

Customer chooses specific cloud region with physical isolation in dedicated VPC.

• Dedicated infrastructure and resources
• Enhanced security controls
• Custom compliance requirements support

On-premises

Complete data sovereignty - runs within your own data center.

• Complete data sovereignty and control
• Air-gapped deployment capability
• Integration with existing security infrastructure

Right to Access/Portability

You can request access to and export of your data at any time.

• Data export available upon request
• Multiple export formats supported
• All telemetry data associated with your account

Right to Rectification/Erasure

You can request modification or deletion of your data.

• Data correction and deletion available upon request
• Bulk operations for multiple records
• Audit trail for all modifications

Live Internal Registry

We maintain an internal list of all sub-processors that is always up-to-date and accessible to customers upon request.

30-Day Notice

We provide customers with a 30-day notice before any new sub-processor is added, giving them a window to object or make alternative arrangements.