Privacy policy

Kramiva is a founder-led software and digital-product studio. For information you submit through this website, we are the data controller. You can reach us at contact@kramiva.com, and a person reads that address.

The inquiry form is the only place this site asks you for personal information. There is no account, no login, no newsletter, and no comment field.

It becomes one email, sent to us. The site has no database and stores no copy of your inquiry: the submission is validated, passed to our email provider, and exists after that as a message in our inbox.

We use it to reply to you and, if the project proceeds, to scope and run the engagement. That is the whole purpose. We do not add you to a marketing list, we do not sell your information or disclose it for anyone else's marketing, and we do not put inquiry content into any AI model for training. The only other parties involved are the infrastructure providers named below, which process it so the form works and our reply reaches you.

Two providers, and we can name both.

Because the site stores nothing, retention is a question about our mailbox rather than about this application. Inquiries stay in it while they are useful — an active conversation, or a project we are delivering — and we delete on request without argument.

We are setting a fixed retention schedule with our advisers, and this page will state the period once it exists. We would rather tell you that than publish a number we have not committed to.

Whichever country you are in, you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to our holding it at all. Email us and we will action it — there is no form and no ticket queue.

For inquiries from the UK and EU, our basis for processing is legitimate interest: replying to a business inquiry you sent us. You can object at any time, and we will delete the record. If you are in the UK or EU you also have the right to complain to your supervisory authority.

Kramiva sets no advertising cookies, no analytics cookies, no session cookies, and no cross-site trackers on this website. It runs no analytics product and no tag manager, and there is no measurement script of any kind in the application. One functional cookie exists, and it is described below.

Our hosting provider keeps ordinary server logs, as any web server does. That is infrastructure operation and error diagnosis — it is not behavioural analytics, it builds no profile of you, and we do not query it to study visitors.

Our hosting provider also works out an approximate country from your connection and passes it to us as a two-letter country code alongside each request. The site uses it for one thing: to ask whether you would prefer the regional version of the page you are on. It is used while the page is being served and then dropped — we do not store your IP address for this, no third-party location service is involved, and your browser is never asked for your location.

If you answer that notice, the site remembers your answer in a first-party cookie named kramiva-region. It holds the region you chose and nothing else: not the country you appeared to be in, not your address, not a profile. Your theme choice is kept separately, in your browser's local storage, and never leaves your device. The cookie policy names both, with their values and how long they last.

To stop automated submissions, the form carries a hidden field that real people never fill in, and the server briefly counts submissions per connection. That count is held in memory for at most an hour, is never written to disk, and is never included in the email or sent anywhere.

This policy covers the website. When we build software for you, any personal data inside that system is yours: the applicable processing roles, the handling, the material service-provider dependencies, the hosting requirement, and what happens at the end are agreed in writing for that engagement before the build starts. A data-processing agreement can be included where the engagement requires one.

The DPDP Act is an obligation we scope your project against, not a certification Kramiva holds. Where a build handles personal data, consent, storage, access, and erasure are designed and agreed in writing before it starts. Information you send through this website is used only to answer your inquiry — never sold, never used for advertising, never added to a marketing list — and is processed only by the infrastructure providers named in our privacy policy.