Privacy Policy

Privacy Notice. Kelvin Inc. (“we,” “our,” or “us”) values your privacy and is committed to protecting your information. This privacy policy explains how we collect, use, and safeguard your information when you visit our website, use our products, or access our services (collectively, the “Services”). The Services include the Kelvin Platform (Cloud Components, Kelvin UI, Kelvin AI, and the Kelvin Edge software), an industrial software platform for enterprise customers. Each customer’s data is held in a dedicated environment; environments are not shared between customers, and customer data is not made public.

Kelvin Inc. is the controller of the personal information we collect through our website and in our direct business dealings, and of the account and usage information we collect to provide and secure the Kelvin Platform. Our customers control the data they bring into the Kelvin Platform. We use that data to provide the Services to them, as set out in our agreements with them, and in de-identified form as described in Section 6. If you use the Kelvin Platform through your employer or another organization, that organization’s privacy notice also applies, and questions about how it uses the Kelvin Platform should be directed to it.

Please read this policy carefully.

1. Information We Collect

1.1 Personal Information

We may collect personal information directly from you when you interact with our Services, including but not limited to:

• Account Information: Name, email address, mailing address, and login credentials. Login credentials (username and password) are treated as sensitive personal information under California law; we use them solely to authenticate access to the Services and for related account security purposes.
• Communication Data: Records of inquiry, feedback, and customer support interactions.

1.2 Automatically Collected Information

When you use our Services, we may automatically collect:

• Device Information: IP address, approximate location derived from IP address, browser type, operating system, and device identifiers.
• General Usage Data: Pages viewed, links clicked, time spent on our website, and other user behavior metrics.
• Authenticated User Data: audit logs of actions taken in the Kelvin Platform (who did what and when) and product analytics events describing how the interface is used.
• Cookies and Tracking Technologies: We use cookies, web beacons, and other tools to enhance user experience and analyze website performance. Our Services do not currently respond to browser “Do Not Track” signals. Where the law requires it, including for visitors from the European Economic Area, we ask for your consent before setting cookies that are not strictly necessary, and you can change your choice at any time.

1.3 Third-Party Information

We may receive information from third parties, such as:

• Social media platforms if you interact with our profiles.
• Service providers for analytics and marketing purposes.

2. How We Use Your Information

We may use the collected information to:

• Provide, personalize, and improve our Services.
• Respond to your inquiries.
• Analyze usage trends and monitor website performance.
• Send marketing emails and promotional materials (where required, with your consent).
• Ensure security and prevent fraudulent activity.

Where the GDPR or UK GDPR applies, we rely on: our legitimate interests (operating and securing our website and Services, understanding how they are used, responding to inquiries, and business-to-business marketing); performance of a contract (providing the Services to our customers and their users); your consent (for non-essential cookies and for marketing emails where consent is required); and compliance with our legal obligations.

3. How We Share Your Information

We do not sell your personal information. However, we may share it with:

3.1 Service Providers

Third-party vendors that perform services on our behalf, such as:

• Hosting providers (currently Amazon Web Services)
• Analytics and error-monitoring tools (currently Heap and Sentry in the Kelvin Platform, and Heap and HubSpot on our website)
• AI model providers (currently OpenAI, for Kelvin AI and other AI-powered features of the Kelvin Platform, under terms that prohibit OpenAI from using this data to train its models)

3.2 Business Partners

Resellers, referral partners, systems integrators, and cloud co-selling partners we work with to offer or deliver the Services. We share only the business contact information and opportunity details needed for that work, and not for the partner's own marketing.

3.3 Legal and Compliance Obligations

Authorities or legal entities when required to comply with laws or protect our rights.

4. Your Rights

Depending on your location, you may have rights under laws like the General Data Protection Regulation (GDPR) or California Consumer Privacy Act (CCPA), including:

• Access: Request details of the personal data we hold.
• Correction: Update inaccurate or incomplete information.
• Deletion: Request deletion of your personal data.
• Opt-Out: Withdraw consent for marketing communications.
• Portability: Receive a copy of your personal data in a machine-readable format.
• Restriction: Request that we limit how we process your personal data in certain circumstances.
• Objection: Object to our processing of your personal data in certain circumstances.

Kelvin Unipessoal Lda is Kelvin’s establishment in the European Union for individuals in the European Economic Area. If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office). We will respond to a verified request within the period applicable law requires. To exercise your rights, contact us at support@kelvin.ai.

5. Data Security

We implement industry-standard measures to protect your information, including:

• Encryption during data transmission.
• Secure storage with limited access.
• Regular security audits.
• An annual SOC 2 Type II examination by an independent auditor.
• Encryption of personal data at rest.

However, no method of electronic storage or transmission is 100% secure. If personal data under our control is subject to confirmed unauthorized access, we will investigate, will notify affected customers within the time required by our customer agreements, and will notify individuals and regulators where applicable law requires.

6. Data Retention

We retain your data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. We may also use de-identified data, meaning information that has been processed so that it does not identify you, our customers, or any individual, household, device, or asset, to operate, maintain, and improve our products and services, including developing and training our models. We maintain and use de-identified data only in de-identified form, we will not attempt to re-identify it, and we will not knowingly permit anyone we share it with to re-identify it. Customer data is retained and deleted in accordance with the retention terms of the applicable customer agreement and Kelvin’s Retention Schedule; user account data is retained for the subscription term and deleted with the customer environment within 90 days of contract termination.

7. Third-Party Links

Our Services may contain links to external websites. We are not responsible for their privacy practices. Review the policies of any third-party sites you visit.

8. Children's Privacy

Our Services are not intended for individuals under the age of 13. We do not knowingly collect data from children.

9. International Data Transfers

If you are accessing our Services from outside the U.S., your data may be transferred to and processed in countries with different data protection standards. Kelvin Inc. is located in the United States and has operations in Portugal and Australia. Customer data is hosted on Amazon Web Services in the United States by default, or, where agreed with the customer, in another region or in the customer's own cloud environment. For environments Kelvin hosts, encrypted backups are replicated to a second region. Where personal data is transferred across borders, we take steps designed to ensure it continues to receive protection consistent with applicable law, including through contractual commitments with our service providers. For individuals in Australia, Kelvin takes reasonable steps to ensure the recipient handles the data in accordance with the Australian Privacy Principles.

10. Updates to This Privacy Policy

We may update this privacy policy periodically. Changes will be posted on this page with an updated "Last Updated" date.

11. Contact Us

If you have questions or concerns about this privacy policy or our data practices, please contact us: