Privacy policy.

1. Who we are

Kontrol is built and operated by KyleDev Software Systems (Pty) Ltd (“KyleDev”, “we”, “us”), a South African company. This policy explains how we handle personal information when you visit our website, sign up for Kontrol, or use the product. We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA).

2. What we collect

Account information: your name, business email address, business name, industry and (optionally) your logo and phone number, provided during sign-up and workspace setup.

Business data: the products, customers, sales, inventory and other records you enter into Kontrol. This data belongs to your business.

Usage and technical data: IP address, device and browser information, and product usage events used to secure the service (rate limiting, security alerts) and improve reliability.

Communications: messages you send us through the contact form or support email.

3. How we use it

To provide the service: authenticate you, store your business data, send transactional email (sign-in links, stock alerts, receipts-related notices).

To secure the service: detect abuse, investigate incidents, and enforce rate limits.

To communicate: respond to your enquiries and send service announcements. We do not send marketing email without your consent, and transactional email always tells you how to manage notifications.

We do not sell your personal information, and we do not use your business data to train AI models. Kontrol AI features process your data only to serve your own organisation.

4. Where it lives and who can see it

Your data is stored on managed cloud infrastructure. Business data is isolated per organisation, and access inside Kontrol is governed by role-based permissions. KyleDev staff can only access your data to support you, at your direction, or where required by law.

We use service providers for hosting, database and email delivery (for example our cloud database and SMTP provider). They process data on our instructions under contract.

5. Retention

We keep your account and business data for as long as your workspace is active. If you cancel, we retain data for a grace period to allow export or reactivation, after which it is deleted from production systems. Backups age out on the provider's schedule. Security and audit logs are kept as required for the security of the service.

6. Your rights

Under POPIA you may request access to, correction of, or deletion of the personal information we hold about you, and object to certain processing. To exercise these rights, email us and we will respond within a reasonable period.

7. Security

We protect your data with encryption in transit, hashed credentials, rate limiting, security event monitoring and least-privilege access controls. No system is perfectly secure; if a breach affects your information, we will notify you and the regulator as required by law.

8. Changes and contact

We may update this policy as the product evolves. Material changes will be announced in the product changelog. Questions? Email us and we will help.