What we collect when you contact us, why we hold it, how long we keep it, and what you can ask us to do about it.
Draft This document is a working draft pending legal review. It is published for transparency and may change.
Kaevor AI Solutions, based in Sri Lanka, decides how and why personal information collected through kaevor-ai.tech is used. In data protection terms we are the controller for that information.
We do not publish a postal address. For anything in this policy, including a request about your own data, write to support@kaevor-ai.tech and we will respond from a named person.
Two things, and no more than that:
We use what you send us to read your enquiry, reply to it, and keep a record of the conversation. That is all we use it for.
We do not sell it, rent it, trade it, or add you to a mailing list. We do not use it for advertising, and we do not use enquiry content to train machine-learning models.
Where the GDPR applies to you, our lawful basis is legitimate interests — you have approached us about our services, and responding to that is what you would expect. Where Sri Lanka’s Personal Data Protection Act No. 9 of 2022 applies, we process on the equivalent basis of responding to a request you initiated. You can object at any time and we will stop.
Only the founders of Kaevor, and two service providers who process data on our instructions and are not permitted to use it for their own purposes:
We are based in Sri Lanka, so your information is accessed from there. Brevo is a French company and processes email within the European Union.
Where information moves between these places, we rely on our providers’ contractual data protection terms, which include the European Commission’s standard contractual clauses where they are required.
Enquiries are kept for 6 months from your last message to us, then deleted. If your enquiry becomes a client engagement, the correspondence is kept for as long as that relationship and our record-keeping obligations require, under the agreement we sign with you.
Server logs are kept for the short period our hosting provider retains them by default.
You can ask us to delete your enquiry sooner — see clause 7.
Write to support@kaevor-ai.tech and you can ask us to:
We do not charge for this, and we will respond within 30 days. If we need to confirm who you are before releasing anything, we will ask — usually by replying to the address the enquiry came from.
These rights come from Sri Lanka’s Personal Data Protection Act No. 9 of 2022 and, where it applies to you, the GDPR. We honour requests from anyone who asks, wherever you are, rather than checking which law covers you first.
The site is served over HTTPS. Form submissions are handled on the server, so the credentials used to send the email are never exposed to your browser. Access to the inbox that receives enquiries is limited to the founders.
No system is perfectly secure, and email in particular is not a confidential channel. Please do not send us credentials, financial details, or confidential material through the form — see clause 7 of the Terms.
This site sets no cookies. There is no analytics, no advertising pixel and no third-party tracker on any page.
Fonts are built into the site rather than fetched from a font provider while you browse, so visiting this site does not make a request to any third party about you. This is why you are not being shown a cookie banner — there is nothing to consent to.
If we ever add analytics, we will update this policy before turning it on.
This site is aimed at organisations and the people who work in them. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has sent us something, tell us and we will delete it.
We may update this policy. The version here is the one that applies, and the date at the top tells you when it last changed. This version is dated 17 August 2026.
If you are unhappy with how we have handled your information, tell us first at support@kaevor-ai.tech — most things are quicker to fix directly.
You also have the right to complain to a regulator: in Sri Lanka, the Data Protection Authority established under the Personal Data Protection Act No. 9 of 2022; in the EU or UK, your national supervisory authority.