This policy explains how KavachLab, a NewTurn Technologies product, handles personal data collected through this website. It covers the website only. Personal data processed inside a customer's own KavachLab deployment is controlled by that customer, not by us — our customer-hosted architecture means we never take custody of it.
1. Who we are
KavachLab is an enterprise AI visibility and control platform operated by NewTurn Technologies. For personal data submitted through this website, KavachLab is the data controller. You can reach us at privacy@kavachlab.com for any privacy question or request.
2. What we collect
We collect only what you choose to give us, plus the minimum needed to keep the site working:
- Information you submit through the demo request form: full name, work email, company name, and optionally job title, country, phone number, the AI tools you indicate are in use, and your message.
- Anything you choose to send through the live chat widget, including the content of your messages and any contact details you give the agent so we can follow up.
- Technical data required to serve and secure the site, such as IP address and browser user agent, processed by our hosting provider in server logs.
- We do not use advertising cookies, cross-site trackers, or third-party marketing pixels on this website.
3. Why we use it, and our lawful basis
We use demo request details to respond to your enquiry, arrange a demonstration, and scope a monitor-only discovery pilot. Our lawful basis is your consent when you submit the form, and our legitimate interest in responding to a business enquiry you initiated.
We use live chat messages to answer the question you asked and, where you ask us to, to follow up afterwards. The lawful basis is the same: your consent in starting the conversation, and our legitimate interest in responding to it. Please do not send confidential or special-category information through chat — it is a support channel, not a secure one.
We use server log data on the basis of our legitimate interest in operating a secure and reliable website. We do not use your details for automated decision-making or profiling.
4. Who we share it with
We do not sell personal data, and we do not share it for advertising. We share it only with service providers who help us operate this site and respond to you — currently our web hosting, email delivery, and live chat providers — and only to the extent needed for those purposes.
Our live chat is provided by Zaatly, which processes chat messages on our behalf in order to run the service. Their own privacy notice governs how they handle that data as a provider.
We may also disclose personal data where we are legally required to do so, or to establish, exercise, or defend legal claims.
5. How long we keep it
We retain demo request details for as long as needed to respond and to maintain a record of the business relationship, and no longer than 24 months from your last interaction with us unless you become a customer or you ask us to keep them for longer. Live chat transcripts are subject to the same 24-month limit. Server logs are retained on our hosting provider’s standard schedule.
6. How we protect it
The website is served over TLS. Form submissions are transmitted to our server-side endpoint and delivered to our sales team by email; we do not store form submissions in a public-facing database. Access to enquiry data is limited to the personnel who need it.
7. International transfers
Our hosting, email, and live chat providers may process data outside your country of residence. Where personal data is transferred internationally, we rely on appropriate safeguards, including standard contractual clauses where applicable.
8. Your rights
Depending on your jurisdiction — including under the GDPR, the UAE PDPL, and the Saudi PDPL — you may have the following rights. To exercise any of them, email us and we will respond within the period required by applicable law.
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct data that is inaccurate or incomplete.
- Erasure — ask us to delete your personal data.
- Restriction and objection — ask us to limit or stop certain processing.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent — at any time, without affecting processing already carried out.
- Complain — lodge a complaint with your local data protection authority.
9. Cookies and browser storage
This website does not set advertising, analytics, or cross-site tracking cookies. Only strictly necessary cookies required to serve and secure the site may be set by our hosting provider.
Our live chat widget is loaded from Zaatly on every page, and uses cookies or similar browser storage to keep a conversation continuous as you move between pages and if you return later. That storage exists to run the chat itself — it is not used to profile you or to follow you across other websites.
Because we run no advertising or analytics cookies, we do not display a consent banner. If you would rather not load the chat at all, blocking third-party scripts for this site in your browser will remove it; everything else on the site continues to work normally.
10. A note on the KavachLab platform
The KavachLab platform is deployed inside each customer’s own tenant. Prompts, files, and monitoring data processed by a customer deployment never transit or reside on our infrastructure, and content is encrypted with keys the customer owns. For those deployments the customer is the data controller, and their own privacy notice applies.
11. Changes to this policy
We may update this policy from time to time. Material changes will be reflected in the "last updated" date at the top of this page.
12. Contact
Privacy enquiries: privacy@kavachlab.com. General and sales enquiries: sales@kavachlab.com. Security disclosures: security@kavachlab.com.