Privacy Policy.

1. Our Fundamental Privacy Commitment

The Kratia Foundation operates as an independent non-profit institution. Unlike commercial advertising networks or venture-backed software vendors, our business model does not rely on tracking user behavior, selling insights to data brokers, or feeding proprietary AI models with your organizational records.

2. Information We Collect

We collect only the bare minimum information necessary to maintain your membership and deliver services:

• Contact & Organization Profile: Name, work email, organization name, and country for billing and executive communications.
• Authentication Data: Cryptographically salted password hashes and multi-factor authorization tokens.
• Operational Logs: Transient server health logs (HTTP status, error codes) required to maintain 99.95% availability, pruned every 30 days.

3. Information We Never Collect

The Kratia Foundation explicitly does not collect, inspect, or intercept:

• Customer invoices, bank accounts, or ledger transaction entries.
• Employee identification records, salaries, or payroll details.
• Warehouse inventory catalogs or supplier pricing agreements.
• Cross-site cookies or third-party advertising trackers.

4. Global Regulatory Compliance (GDPR, CCPA, Sovereign Laws)

Because every Kratia database table is natively partitioned by ISO-3166 country codes, member organizations enjoy automated data residency compliance. European member records remain within the EU under GDPR mandates, and California residents retain full rights under CCPA/CPRA, including the absolute right to cryptographic deletion.

5. Contact Our Data Protection Council

If you have any questions or require an institutional Data Processing Agreement (DPA), contact our legal and privacy council directly at:

privacy@kratia.org